How to Check if the server object still in use / active in AD ?

[Albertwt]

Hi,

How do you guys check or determine if a certain server object is no longer in used in the Active directory database ?

because for some reason like:
1. the server has been decommissioned
2. the server has been renamed
3. something else

As for me, I do the ping test, but wondering if there is another smarter way in doing it before you right click and DELETE the object.

Any kind of help would be greatly appreciated.

Thanks.

[Ossian]

Re: How to Check if the server object still in use / active in AD ?

You could check the "Last Logon" date:
http://forums.techarena.in/active-directory/1261905.htm

[tehcamel]

Re: How to Check if the server object still in use / active in AD ?

do you have a configuration management database ?
Speak to the identified owner of the server

[wullieb1]

Re: How to Check if the server object still in use / active in AD ?

OldComp might be a worthwhile tool to use as well.

http://www.joeware.net/freetools/tools/oldcmp/

[Rems]

Re: How to Check if the server object still in use / active in AD ?

When you check the lastlogon attribute, make sure to do this on every DC to find the most resent logon date time of the computer object.

OldComp is by default using also the lastlogon attribute!
When using the "-llts" switch then OldComp will use the lastLogonTimeStamp attribute. The lastLogonTimeStamp is a new attribute available only when the domain functional level is Windows Server 2003 or above. This attribute is unlike lastlogon replicated in Active Directory. However, it is only updated when the user logs on if the old value is more than 14 days in the past, that means the value can only be trusted if it is more than 14 days in the past [http://www.rlmueller.net/Last%20Logon.htm].


/Rems

[Albertwt]

Re: How to Check if the server object still in use / active in AD ?

When you check the lastlogon attribute, make sure to do this on every DC to find the most resent logon date time of the computer object.

OldComp is by default using also the lastlogon attribute!
When using the "-llts" switch then OldComp will use the lastLogonTimeStamp attribute. The lastLogonTimeStamp is a new attribute available only when the domain functional level is Windows Server 2003 or above. This attribute is unlike lastlogon replicated in Active Directory. However, it is only updated when the user logs on if the old value is more than 14 days in the past, that means the value can only be trusted if it is more than 14 days in the past [http://www.rlmueller.net/Last%20Logon.htm].


/Rems

thanks for the suggestion mate.
I appreciate your helps.

[Rick76]

Re: How to Check if the server object still in use / active in AD ?

Could use:

dsquery computer/user -inactive <number of weeks>.

This would give you a list of users/computers who have not contacted the DC within the parameters you specify.