Re: Computer accounts unused for more than 120 days

From: Marlon Brown (marlon_brown_at_hotmail.com)
Date: 06/02/04 

Date: Wed, 2 Jun 2004 15:10:56 -0700

It is 120 days (or something like that) because we are an education inst. =
vacation 120 days during Summer.

I do ask people to keep me informed on who is leaving, machine renamings,
etc but unfortunately that's not an accurate way and I have lots of machine
accounts old that needs a clean up.
I am wondering which attribute would be able to give me that info...

"Fao, Sean" <enceladus311@yahoo.comI-WANT-NO-SPAM> wrote in message
news:e$fHcrOSEHA.1048@tk2msftngp13.phx.gbl...
> Marlon Brown wrote:
>
> > On Win2K AD SP4, how can I find out computer accounts which have not
been in
> > use for longer than 120 days. From there I'd delete them.
> > I have eight DC's.
>
> There might be some way that I'm not aware of but I can't imagine why
> you would need this. Does your company have a procedure for departing
> employees?
>
> Where I work, the HR department notifies IT when an employee leaves so
> that we can disable their account. You would be surprised the number of
> times I have had employees delete what they considered to be unimportant
> data just before they left, because nobody notified me that they were
> leaving. Had I known, I could have had the account disabled and
> prevented it. 120 days is a long time to keep an account open if the
> employee is no longer working for the company. It makes it harder to
> recover any lost data in the event that the user did as I mentioned
> above. It also permits the user to continue accessing company
> information although they are no longer technically supposed to be
> authorized.
>
> Sean

Relevant Pages

  • Re: Computer accounts unused for more than 120 days
    ... the HR department notifies IT when an employee leaves so ... that we can disable their account. ... times I have had employees delete what they considered to be unimportant ... recover any lost data in the event that the user did as I mentioned ...
    (microsoft.public.win2000.active_directory)
  • Re: too complex for me!
    ... My report query is pulling data from the 'Time', ... 'Employees' and 'Accounts' tables. ... The idea, I guess, is to sum up the LaborHours from each account and show ...
    (microsoft.public.access.reports)
  • Re: echange email
    ... we have an e-mail acount hosted by an isp. ... The acount is a pop 3 account and ... all 4 employees to see the incoming and out going mails ...
    (microsoft.public.windows.server.sbs)
  • Re: Relational model versus object model
    ... That subsystem has a pure data ... With a pure data transfer interface all you need is some shared ... So, we can traverse the list, selecting employees by the joined ... >> Address, Account ID, ...}. ...
    (comp.object)
  • Re: How to secure the Administrator account?
    ... >>Administrator Account: We regularly rename and place strong passwords ... >>company and never to the normal "administrator" of the network. ... > 1) As you pointed out, your employees have to have system authority ...
    (microsoft.public.win2000.security)