Windows Forum

Ask something
Discussion Locked

Monitoring user accounts

0 helpful
1 reply

by cferguson28

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
How do I run a query of some sort that allows me to find users that have not logged into the domain for at least 30 days? I would like to lock or delete the account(s) after 30 days of inactivity.

1 reply

by shanghai sam

Without other software you can built your own tool:
1. Use ?dumpel.exe? from Resource kit to export NT Events to a text file. Make a batch file like this:
C:\program files\rksupport\dumpel.exe -f securityevents.txt -s \\ComputerName -l security -t-d 30
2. After you run this batch file you will obtain the securityevents.txt file.
3. Now you can import this file in Excel or Access and apply filters or queries.
Also you can automate this job with task scheduler and you must change the Event Log Settings: Maximum Log Size and Overwrite Events

This discussion is closed to new replies.