Penetration Testing mailing list archives
looking for tools/scripts to clean up unused AD accounts
From: Peter Hu <peternjusa () gmail com>
Date: Thu, 1 Dec 2005 11:02:33 -0500
Hello everyone. I am looking for tools/scripts to clean up unused AD accounts Background: - Active Directory is one of the key repositories for system and user accounts. - Various licensing systems use AD as an indicator of the number of licenses needed to cover the environment. - AD is known to have entries for systems and people that are no longer with the organization. Basic problem statement: - We need accurate counts of active machines and users in the environment and have not been able to generate the necessary reports using the existing tools and processes. - We need an automated process whereby we can generate accurate reports on a regular basis. I've identified a number of tools and processes we may be able to use as interim solutions. + LogParser used to query ActiveDirectory directly + SystemTools free utility "NetPwAge" (http://www.systemtools.com/download/netpwage.zip) Can any one recommend or give insight on how they have done it at their company? Peter. ------------------------------------------------------------------------------ Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on your website. Up to 75% of cyber attacks are launched on shopping carts, forms, login pages, dynamic content etc. Firewalls, SSL and locked-down servers are futile against web application hacking. Check your website for vulnerabilities to SQL injection, Cross site scripting and other web attacks before hackers do! Download Trial at: http://www.securityfocus.com/sponsor/pen-test_050831 -------------------------------------------------------------------------------
Current thread:
- looking for tools/scripts to clean up unused AD accounts Peter Hu (Dec 01)
- Re: looking for tools/scripts to clean up unused AD accounts Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] (Dec 01)
- <Possible follow-ups>
- Re: looking for tools/scripts to clean up unused AD accounts jay.tomas () infosecguru com (Dec 03)