Server 2003 Log on Account Tracking

[Jayko]

I'm relatively new at my company and i am trying to clean up the ignored Active Directory Users and computers. I know there is a way to track users who have not logged in by an amount of time. If im not mistaken it can be done through saved queries, however; that solution did not work for me. I'd like to just see which users have not logged in in a specific amount of time, please help... and thank you in advance.

[dkumar]

If you're on a 2k3 AD then use AD Users and Computers and create a "Saved Query". Then when you define the query select the 'common queries' and at the bottom is "Days since last logon". . You find a tool called Active directory Janitor, but have to pay

Or use OLDcmp.exe - to clean Computer account

[Expertz]

You can use the Privilege Use category to track the exercise of user rights. Microsoft uses the terms privilege, right, and permission inconsistently. In this case, privileges refer to the user rights you find in Local Security Policy under Security Settings\Local Policies\User Right Assignment.

[Warner]

ADManager Plus helps you to trace out all inactive, disabled, account-expired users and computers in Active Directory. Based on the company policy you can delete, disable, enable or move these accounts.

This enhances the safety of your Active Directory and its performance, also you can save significant time by eliminating the need of using command line tools and scripts.

Download:AdManager plus 4.3

It has following Features:

• Find user or computer accounts not logged on within X number of days
• Find expired and unused Active Directory accounts
• Locate inactive user or computer accounts and disable, delete, move or enable Active Directory accounts in seconds.
• Shows disabled accounts, last logon/logoff time, OS type, etc.
• Export report to CSV,XLS,HTML,PDF and CSVDE

Your are also allow to:

• Find stale accounts on your network
• Disabled Accounts
• Account Expired Users
• Inactive Users
• Delete, Disable or Move User/Computer Dormant or Stale Accounts

[opaper]

Over time, user and computer accounts become obsolete and needs elimination. ADManager Plus helps you to trace out all inactive, disabled, account-expired users and computers in Active Directory. Based on the company policy you can delete, disable, enable or move these accounts.

This enhances the safety of your Active Directory and its performance, also you can save significant time by eliminating the need of using command line tools and scripts.

Features

• Find user or computer accounts not logged on within X number of days
• Find expired and unused Active Directory accounts
• Locate inactive user or computer accounts and disable, delete, move or enable Active Directory accounts in seconds.
• Shows disabled accounts, last logon/logoff time, OS type, etc.
• Export report to CSV,XLS,HTML,PDF and CSVDE

for more information see here : Clean up your Active Directory