LKBEN10688: Howto automatically disable computer accounts in active directory after a number of days


This article has not been checked!

LKB | Created: 02/04/2020 | Version: 0 | Language: EN | Rating: 0 | Outdated: False | Marked for deletion: False

Author: Wim Peeters - Keskon GmbH & Co. KG


Symptom

You want to deactivate computer accounts after 9 weeks or 63 days

Cause

none

Solution

You can use the dsquery tool in combination with dsmod. The following can be copy and pasted in a command

line and can be scheduled. Please note, these computer accounts will be disabled. You should use the

dsquery first to have a look at the computers!

dsquery computer ou=Lubby-Desktops,DC=lubby,DC=org -inactive 9 -limit 0 |dsmod computer -disabled yes

You should use this script with care and let it run on the part of active directory where no important

servers or desktops have been created!

About the Author

Wim Peeters is electronics engineer with an additional master in IT and over 30 years of experience including time spent in support, development, consulting, training and database administration. Wim has worked with SQL Server since version 6.5. He has developed in C/C++, Java and C# on Windows and Linux in different European countries and different European languages. He writes knowledge base articles to solve IT problems and publishes them on the Lubby Knowledge Platform where he is one of the most important contributors and the main developer.

Disclaimer:

The information provided in this document is intended for your information only. Lubby makes no claims to the validity of this information. Use of this information is at own risk!