This shows you the differences between two versions of the page.
Both sides previous revision Previous revision | |||
windows:proc:active_directory_user_and_computer_audit [2023/02/16 15:48] tschulz [Users] |
windows:proc:active_directory_user_and_computer_audit [2023/02/16 15:57] (current) tschulz |
||
---|---|---|---|
Line 2: | Line 2: | ||
===== Users ===== | ===== Users ===== | ||
- | - Run the following in a **administrtor Powershell:**<code>Get-ADUser -Filter * -Properties “LastLogonDate” | export-csv -path ad-user1.csv</code> | + | - Run the following in a **administrator Powershell:**<code>Get-ADUser -Filter * -Properties “LastLogonDate” | export-csv -path ad-user1.csv</code> |
- Open in Excel and sort by LastLogonDate Ascending | - Open in Excel and sort by LastLogonDate Ascending | ||
- Consider removing accounts that are inactive for over a year | - Consider removing accounts that are inactive for over a year | ||
- Make a script with the following: <code>Disable-ADAccount -Identity <SamAccountName></code> | - Make a script with the following: <code>Disable-ADAccount -Identity <SamAccountName></code> | ||
===== Comptuers ===== | ===== Comptuers ===== | ||
- | <code> | + | - Run the following in a **administrator Powershell:**<code>Get-ADComputer -Filter * -Properties LastLogonDate,operatingSystem,operatingSystemVersion,IPv4Address | export-csv -path ad-computers1.csv</code> |
- | Get-ADComputer -Filter * -Properties LastLogonDate,operatingSystem,operatingSystemVersion,IPv4Address | export-csv -path ad-computers1.csv | + | - Open in Excel and sort by LastLogonDate Ascending |
- | + | - Consider removing accounts that are inactive for over a year | |
- | Disable-ADAccount -Identity MHESSELAPTOP$ | + | - Make a script with the following: <code>Disable-ADAccount -Identity <SamAccountName></code> |
- | </code> | + | |