User Tools
windows:proc:active_directory_user_and_computer_audit
Table of Contents
Active Directory User and Computer Audit
Users
- Run the following in a administrator Powershell:
Get-ADUser -Filter * -Properties “LastLogonDate” | export-csv -path ad-user1.csv
- Open in Excel and sort by LastLogonDate Ascending
- Consider removing accounts that are inactive for over a year
- Make a script with the following:
Disable-ADAccount -Identity <SamAccountName>
Comptuers
- Run the following in a administrator Powershell:
Get-ADComputer -Filter * -Properties LastLogonDate,operatingSystem,operatingSystemVersion,IPv4Address | export-csv -path ad-computers1.csv
- Open in Excel and sort by LastLogonDate Ascending
- Consider removing accounts that are inactive for over a year
- Make a script with the following:
Disable-ADAccount -Identity <SamAccountName>
windows/proc/active_directory_user_and_computer_audit.txt · Last modified: 2023/02/16 15:57 by tschulz
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
