Clean up inactive computers in Active Directory

Old and stale computer accounts in Active Directory may pose security threats and put you at risk for compliance violations. Therefore, it's important to routinely remove them from your Active Directory. However, using native tools or PowerShell scripts to perform this activity is tedious, time-consuming, and error-prone.

ADManager Plus lets you clean up inactive computers in Active Directory in just a few clicks. Its predefined report on inactive computers provides detailed information about computers that have been inactive for a specified number of days, as defined by the admin. Identify inactive computer accounts based on their "last logon" time or "password last set" time. Delete, disable, or move specific computer accounts right from within this report to cleanup your Active Directory easily and efficiently, as shown in Figure 1.

ADManager Plus also lets you automate your Active Directory inactive computer cleanup routine. Schedule an automation to disable, delete, or move inactive computers to a particular organizational unit, as required. If your organization's Active Directory housekeeping policy involves a series of tasks for inactive computer cleanup—such as identifying inactive accounts, disabling them, quarantining them, and finally deleting them—all you need to do is configure an automation policy to define when each of these tasks should be executed, as shown in Figure 2. Specify your desired time or time interval (hourly, daily, weekly, monthly, or even a custom time frame) to automatically execute tasks just once or periodically.

Besides inactive computers, you can also use ADManager Plus to cleanup disabled or dormant users and computers. Download ADManager Plus now and explore all its features!

Featured links

Need Features? Tell Us
If you want to see additional features implemented in ADManager Plus, we would love to hear. Click here to continue