Mass *Account Deleted* tidy up

[grabrail]

I have a bit of a problem with AD

We have around 5000 user accounts, and we have Exchange on the network.

abotu half of all of our accounts were migrated from an old domain to the current domain and the old domain no longer exists.

Now we are having some issue, mostly with old deleted accounts. e.g. with a lot of the migrated accounts, if we go to the Exchange Advanced tab, and click mailbox rights, it hangs for ages, eventually comes up and shows a load of *Accoutns Deleted*

Is there a way to tidy up AD so that all these deleted accounts and old doman accounts no longer show?

http://www.jadereynolds.co.uk

 

[ntinlin]

I would imagine that a lot of these accounts are flowing down from top level, so I'd take a look at XC organisation and server level security and see if you can remove some of them there.
e.g. Exchange admins for the old domain, old BES account etc. etc.


Also top-level AD rights, same story.

Neill

 

[ITPangaeaArchitect]

its pretty simple to build a clean up script with vbscript

you simply need to identify a "stale" days count (aka, how many days before an account is considered too old and should be disabled), and a deletion days count (how many days since last use before the account should be deleted).
Typically this is 90 for disabling, and 120 for deleting.

All you need to do is examine each user account's pwdLastSet and lastLogonTimeStamp (if on Win2003 in Win2003 domain/forest functional mode...otherwise must hit each DC and examine lastLogon attribute), then adjust the time epoch to make up for daylight savings and convert to the local machine time (local = where the script is being ran), then subtract the number of days for stale and deleted users, then use some if statements to clear those accounts out of the picture.

would give you sample code, but dont have the utility i built to do this with me (what i built is designed to do this maintenance full time as a scheduled task on the PDCe).

-Brandon Wilson
MCSE:Security00/03
MCSA:Messaging00
MCSA:Security03
A+