Friday, October 8, 2010

Cleaning up tombstoned objects from Active Directory

I'm in the process of cleaning up some tombstoned objects from Active Directory.
I have created a new OU called Computers-Tombstoned where I'm moving all these accounts.

I just wanted to give a heads up to the helpdesk, just in case any calls are generated due to this. I don't expect it, but if it happens, you'll know where to look.

At this time I have only processed computer objects, and not users. (there were some computers that were in Active Directory since 1998!!!
1147 Computer accounts have been moved to the OU Computers-Tombstoned, disabled, and a description was added: gmk - Disabled on 10/8/2010 - Tombstoned - 120 days.

I have pruned all accounts that have no logged on to the domain in the past 120 days.

If you see any issues as a result of that, please talk to me.


  • This change was made on 10/8/2010 at 9:25am

No comments:

Post a Comment

Please make your comment. (GMK)

Note: Only a member of this blog may post a comment.