Everyone who has managed Active Directory knows that keeping it free of “stale” accounts is a tough task. Typically no one cares about this until it’s time for the Microsoft True Up. Then we’ve got to hustle to get rid of all these unused accounts before we have to pay for them again! Pre-PowerShell it was tough because well… you didn’t have POWERSHELL! Now the hardest part about finding these accounts is defining what stale means to your company. There is no right or wrong answer to this question, but there are some things that we can check to help lead us to an optimal answer.
↧