Finding stale computer accounts

[Guest]

What's the best way to find stale computer accounts in our AD?

[cmccullough]

Re: Finding stale computer accounts

Computer accounts are simliar to user accounts in the way that they logon, and then periodically reset their password. The one that seems to work best for this is PwdLastSet.

You can see this by right-clicking on the Computers folder under your domain and choosing Query Active Directory->Computers(Detailed). Once this finishes you can sort on the PwdLastSet column in the right window to identify computers that are beyond whatever you consider to be a normal range.