ISD 820 Knowledge Base

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

====== Active Directory User and Computer Audit ======

===== Users =====
  - Run the following in a **administrator Powershell:**<code>Get-ADUser -Filter * -Properties “LastLogonDate” | export-csv -path ad-user1.csv</code>
  - Open in Excel and sort by LastLogonDate Ascending
  - Consider removing accounts that are inactive for over a year
  - Make a script with the following: <code>Disable-ADAccount -Identity <SamAccountName></code>
===== Comptuers =====
  - Run the following in a **administrator Powershell:**<code>Get-ADComputer -Filter * -Properties LastLogonDate,operatingSystem,operatingSystemVersion,IPv4Address | export-csv -path ad-computers1.csv</code>
  - Open in Excel and sort by LastLogonDate Ascending
  - Consider removing accounts that are inactive for over a year
  - Make a script with the following: <code>Disable-ADAccount -Identity <SamAccountName></code>

ISD 820 Knowledge Base

User Tools

Site Tools

Page Tools