Announcement

Collapse
No announcement yet.

AD security/Distribution Group access timestamp

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • AD security/Distribution Group access timestamp

    Hi team,

    is there a way to find out when was the last time the AD Group has been read by the system or users?
    I need to clean up some of my AD groups, but I need to find out if it has been inused or inactive.

    Thanks,
    HN

  • #2
    Re: AD security/Distribution Group access timestamp

    Try this command:
    $old = (Get-Date).AddMonths(-6)
    Get-QADGroup -sizeLimit 0 | where {$_.modificationDate -lt $old}

    Comment


    • #3
      Re: AD security/Distribution Group access timestamp

      Originally posted by WindowsGuy2014 View Post
      Try this command:
      $old = (Get-Date).AddMonths(-6)
      Get-QADGroup -sizeLimit 0 | where {$_.modificationDate -lt $old}

      Thank You!!!

      Comment


      • #4
        Re: AD security/Distribution Group access timestamp

        Originally posted by WindowsGuy2014 View Post
        Try this command:
        $old = (Get-Date).AddMonths(-6)
        Get-QADGroup -sizeLimit 0 | where {$_.modificationDate -lt $old}

        Presumably this depends on having the Quest (QAD) cmdlets installed
        Tom Jones
        MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
        PhD, MSc, FIAP, MIITT
        IT Trainer / Consultant
        Ossian Ltd
        Scotland

        ** Remember to give credit where credit is due and leave reputation points where appropriate **

        Comment

        Working...
        X