I'm currently the domain admin on a 2k3 AD network. One of the reports i'm running to discover inactive accounts queries the LastLogonTimestamp attribute to give a printout of inactive accounts.
Why use third-party security tools for Active Directory account cleanups when the ubiquitous PowerShell serves just as well? In a presentation of Microsoft security best practices, 21-time Microsoft ...
That sure is a long title for a blog post. Anyhow, I seem to hear the following question a lot: “In Active Directory, how do I figure out which account objects are valid?” Well, first off, if you ...