Re: Clean up old computer accounts in SMS

Tech-Archive recommends: Speed Up your PC by fixing your registry

For free, check out http://www.joeware.net, the "oldcmp" script he has there.
As a free solution, it takes more to setup, but a lot of companies use it to
disable old computer accounts, and then xx days later, re-run the script to
delete disabled computer accounts. Once you have a routine going (like if a
computer hasn't checked in w/AD in 30 days, disable it. If a computer has
been disabled for 30 days, delete it.), within a few months you'll have an
ongoing process where only computers that have communicated to AD in the last
month are in AD. Squeeky clean.

you normally disable first--on the off chance that box does come back
online, the computer account can be enabled in AD. It's also a slight shift
in thinking that you might need to communicate to your local techs. They
might be completely used to having hot spare computers/laptops sitting in a
drawer for months, and expect them to be valid AD joined computers when
powered on. That would no longer be the case.

Use the argument of "it's too out of date" to smooth the way to cleaning up
AD. Or there are a few more arguments you can use. It's a change in
thinking... and you know how people are. It's a change, and it's likely to
cause them work because you're changing their preconceptions.

"Rich" wrote:

I know this is starting to go off topic, but how can you tell from AD which
computer accounts are no longer needed? is there some variable you can check
somehow?

"IT Staff" wrote:

For me, i've written a poweshell scripts to delete AD objects.monthly
(30days)

Then i took those deleted objects (exported from powersehll) and ask the sms
administrator to remove these AD objects, than to wait based on the sms
console days



.

Relevant Pages

  • Re: Clean up old computer accounts in SMS
    ... disable old computer accounts, and then xx days later, re-run the script to ... month are in AD. Squeeky clean. ... Then i took those deleted objects and ask the sms ...
    (microsoft.public.sms.admin)
  • Re: Clean up old computer accounts in SMS
    ... computer accounts are no longer needed? ... Then i took those deleted objects and ask the sms ... console days ...
    (microsoft.public.sms.admin)
  • Re: Problem Sending Package to BITS Enabled DP
    ... >> the reboot advice. ... >> webdav enabled to be able to distribute even if the site server itself ... >> MVP SMS ... >>> In Advanced Security, SMS uses computer accounts. ...
    (microsoft.public.sms.admin)
  • RE: Clean up old computer accounts in SMS
    ... So I guess that means all the computers in my SMS have been ... Settings, Site Maintenance). ... Clean up old computer accounts in SMS ... Microsoft CDO for Windows 2000 ...
    (microsoft.public.sms.admin)
  • RE: Clean up old computer accounts in SMS
    ... Settings, Site Maintenance). ... Clean up old computer accounts in SMS ...
    (microsoft.public.sms.admin)