Announcement

Collapse
No announcement yet.

How to Check if the server object still in use / active in AD ?

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • How to Check if the server object still in use / active in AD ?

    Hi,

    How do you guys check or determine if a certain server object is no longer in used in the Active directory database ?

    because for some reason like:
    1. the server has been decommissioned
    2. the server has been renamed
    3. something else

    As for me, I do the ping test, but wondering if there is another smarter way in doing it before you right click and DELETE the object.

    Any kind of help would be greatly appreciated.

    Thanks.

  • #2
    Re: How to Check if the server object still in use / active in AD ?

    You could check the "Last Logon" date:
    http://forums.techarena.in/active-directory/1261905.htm
    Tom Jones
    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
    PhD, MSc, FIAP, MIITT
    IT Trainer / Consultant
    Ossian Ltd
    Scotland

    ** Remember to give credit where credit is due and leave reputation points where appropriate **

    Comment


    • #3
      Re: How to Check if the server object still in use / active in AD ?

      do you have a configuration management database ?
      Speak to the identified owner of the server
      Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

      Comment


      • #4
        Re: How to Check if the server object still in use / active in AD ?

        OldComp might be a worthwhile tool to use as well.

        http://www.joeware.net/freetools/tools/oldcmp/

        Comment


        • #5
          Re: How to Check if the server object still in use / active in AD ?

          When you check the lastlogon attribute, make sure to do this on every DC to find the most resent logon date time of the computer object.

          OldComp is by default using also the lastlogon attribute!
          When using the "-llts" switch then OldComp will use the lastLogonTimeStamp attribute. The lastLogonTimeStamp is a new attribute available only when the domain functional level is Windows Server 2003 or above. This attribute is unlike lastlogon replicated in Active Directory. However, it is only updated when the user logs on if the old value is more than 14 days in the past, that means the value can only be trusted if it is more than 14 days in the past [http://www.rlmueller.net/Last%20Logon.htm].


          /Rems

          This posting is provided "AS IS" with no warranties, and confers no rights.

          __________________

          ** Remember to give credit where credit's due **
          and leave Reputation Points for meaningful posts

          Comment


          • #6
            Re: How to Check if the server object still in use / active in AD ?

            Originally posted by Rems View Post
            When you check the lastlogon attribute, make sure to do this on every DC to find the most resent logon date time of the computer object.

            OldComp is by default using also the lastlogon attribute!
            When using the "-llts" switch then OldComp will use the lastLogonTimeStamp attribute. The lastLogonTimeStamp is a new attribute available only when the domain functional level is Windows Server 2003 or above. This attribute is unlike lastlogon replicated in Active Directory. However, it is only updated when the user logs on if the old value is more than 14 days in the past, that means the value can only be trusted if it is more than 14 days in the past [http://www.rlmueller.net/Last%20Logon.htm].


            /Rems
            thanks for the suggestion mate.
            I appreciate your helps.

            Comment


            • #7
              Re: How to Check if the server object still in use / active in AD ?

              Could use:

              dsquery computer/user -inactive <number of weeks>.

              This would give you a list of users/computers who have not contacted the DC within the parameters you specify.

              Comment

              Working...
              X