User Tools
windows:proc:active_directory_user_and_computer_audit
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
windows:proc:active_directory_user_and_computer_audit [2023/02/16 15:43] tschulz |
windows:proc:active_directory_user_and_computer_audit [2023/02/16 15:57] (current) tschulz |
||
|---|---|---|---|
| Line 2: | Line 2: | ||
| ===== Users ===== | ===== Users ===== | ||
| - | <code>Get-ADUser -Filter * -Properties “LastLogonDate” | export-csv -path ad-user1.csv | + | - Run the following in a **administrator Powershell:**<code>Get-ADUser -Filter * -Properties “LastLogonDate” | export-csv -path ad-user1.csv</code> |
| - | + | - Open in Excel and sort by LastLogonDate Ascending | |
| - | Disable-ADAccount -Identity year_book</code> | + | - Consider removing accounts that are inactive for over a year |
| + | - Make a script with the following: <code>Disable-ADAccount -Identity <SamAccountName></code> | ||
| ===== Comptuers ===== | ===== Comptuers ===== | ||
| - | <code> | + | - Run the following in a **administrator Powershell:**<code>Get-ADComputer -Filter * -Properties LastLogonDate,operatingSystem,operatingSystemVersion,IPv4Address | export-csv -path ad-computers1.csv</code> |
| - | Get-ADComputer -Filter * -Properties LastLogonDate,operatingSystem,operatingSystemVersion,IPv4Address | export-csv -path ad-computers1.csv | + | - Open in Excel and sort by LastLogonDate Ascending |
| - | + | - Consider removing accounts that are inactive for over a year | |
| - | Disable-ADAccount -Identity MHESSELAPTOP$ | + | - Make a script with the following: <code>Disable-ADAccount -Identity <SamAccountName></code> |
| - | </code> | + | |
windows/proc/active_directory_user_and_computer_audit.1676583835.txt.gz · Last modified: 2023/02/16 15:43 by tschulz
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
