Best way to clean out old computer accounts in 2003 AD

[dutrizacd]

While adding/removing computers from the network over the years, I've added and removed many computer accounts from our 2003 Active Directory. Can someone tell me how I'd be able to tell which of these computer accounts has been inactive, and for how long so I can do some spring cleaning safely?

 

[RebateMonger]

Disable them and see if anybody complains or if something stops working. REMOVING User accounts must be taken very seriously, since restoring or replicating a deleted account is a bummer.

 

[Alyx]

http://technet2.microsoft.com/...6f011033.mspx?mfr=true

dsquery user -inactive Numberofweeks

(powering on my server at the moment to make sure thats the right syntax)

Edit: Well my domain controller at home doesn't want to run it. But give it a try. Not sure why it wouldn't work on mine.

 

[dutrizacd]

Thanks for the tip, but I must be doing something wrong. I can do a dsquery on user accounts, even list computer account via description, but for some reason, it just doesn't like the dsquery computer domainroot -inactive command... *scratches forehead* I'll keep plugging away at it, maybe I'll get lucky.

Dan

 

[Genx87]

I have to admit the inactive command for computers doesnt seem to be working. I probably have about 100 computer accounts that I am 99% sure arent being used that dont show up when I use the inactive query and put it out 4 weeks.