Exporting/Reporting Old Computer Accounts

[Guest]

I am new to Hyena and I don't know too much about the reporting feature but I am learning.

Everyone knows how when you add a computer to AD it is put in the default "Computers" OU. What I want to do is the following:
1. Export all computers with "laptop" in the computer name.
2. Export computers accounts that have not been logged into after a certian date.
3. (optional) If possible report any of these computer accounts that have not been logged into for a while, and see if they are still connected to the network.

Any help on this would be great.
Thanks.

[cmccullough]

Re: Exporting/Reporting Old Computer Accounts

One way you can do this is right-click on the Computers object in the left window and choose Tabular Views->Computer(Detailed). Then click the Filter icon on the toolbar and type laptop in the filter box for the Directory Name column.

That will leave you with only the computers with laptop in the name. Sroll over to the column labeled Pwd Last Set and click on the column header to sort on that column and find those you are interested in.

We recommend that any you feel are possibly dead computers that you disable them first, then after a week or so if noone has complained you can then decide to delete the computer accounts.

[Guest]

Re: Exporting/Reporting Old Computer Accounts

Thanks for getting back to me so quickly. This is great thanks for the info. One question though. How can I do this for a particular OU/Container?
I just want to do this in the "Computers" Default Container.

[cmccullough]

Re: Exporting/Reporting Old Computer Accounts

You would just need to add the Pwd Last Set field to the Container/OU query under File->Manage Object View->AD Queries.

Change the Query Type to Container/OU, then click on Container/OU (Summary) with Tabular in the Display Format column.

In the lower right change the Attribute Category to User Attributes, then find and add Pwd Last Set.

Then simply double-click on the OU you want and follow the other instructions to filter for laptops.

[Guest]

Re: Exporting/Reporting Old Computer Accounts

Can you tell me how the the column labeled Pwd Last Set correlates to computers that have not been logged onto for recently?

[cmccullough]

Re: Exporting/Reporting Old Computer Accounts

Apparently computers will periodically reset the password associated with their computer account. This happens between the computer and the domain controller. When it resets, this field is updated with the date that this occurred. So, the Pwd Last Set date can be used to identify suspect computers. You would of course want to verify that the computers aren't reachable, then disable them for a time before deleting them.

[Guest]

Re: Exporting/Reporting Old Computer Accounts

Thank you