User Tools
windows:proc:active_directory_user_and_computer_audit
Differences
This shows you the differences between two versions of the page.
| Next revision | Previous revision | ||
|
windows:proc:active_directory_user_and_computer_audit [2023/02/16 15:25] tschulz created |
windows:proc:active_directory_user_and_computer_audit [2023/02/16 15:57] (current) tschulz |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ====== Active Directory User and Computer Audit ====== | ====== Active Directory User and Computer Audit ====== | ||
| + | |||
| + | ===== Users ===== | ||
| + | - Run the following in a **administrator Powershell:**<code>Get-ADUser -Filter * -Properties “LastLogonDate” | export-csv -path ad-user1.csv</code> | ||
| + | - Open in Excel and sort by LastLogonDate Ascending | ||
| + | - Consider removing accounts that are inactive for over a year | ||
| + | - Make a script with the following: <code>Disable-ADAccount -Identity <SamAccountName></code> | ||
| + | ===== Comptuers ===== | ||
| + | - Run the following in a **administrator Powershell:**<code>Get-ADComputer -Filter * -Properties LastLogonDate,operatingSystem,operatingSystemVersion,IPv4Address | export-csv -path ad-computers1.csv</code> | ||
| + | - Open in Excel and sort by LastLogonDate Ascending | ||
| + | - Consider removing accounts that are inactive for over a year | ||
| + | - Make a script with the following: <code>Disable-ADAccount -Identity <SamAccountName></code> | ||
| + | |||
windows/proc/active_directory_user_and_computer_audit.1676582723.txt.gz · Last modified: 2023/02/16 15:25 by tschulz
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
