|
Clean up your Active Directory
Over time, user and computer accounts become obsolete and needs elimination. ADManager Plus helps you to trace out all inactive, disabled, account-expired users and computers in Active Directory. Based on the company policy you can delete, disable, enable or move these accounts.
This enhances the safety of your Active Directory and its performance, also you can save significant time by eliminating the need of using command line tools and scripts.
Features
|
Finding stale accounts on your network
Using the following reports from ADManager Plus will help detect and remove dormant accounts in your Active Directory: |
|
- Disabled Accounts
With ADManager Plus you can easily generate the list of user/computer accounts that are disabled for some reason. The userAccountControl attribute is used to determine the disabled users in the domain. You can manage these accounts easily by deleting them or moving the accounts to another OU. Also you can delete/enable/move two or more disabled accounts at the same time. See How to move users account
- Account Expired Users
Active Directory user accounts that have gone obsolete for a long time might have expired without either the user or administrator knowing about them. Writing a script to find expired accounts can be tedious, ADManager Plus report generator scans the Active Directory and gives you a list of all expired accounts. From the result page, enabling you to proactively secure the network by deleting users or disabling users or move expired users to least privileged OU. You can also print and export Locked out Users results data to XLS, CSV, PDF, HTML, etc.
- Inactive Users
Using ADManager Plus you can retrieve inactive user accounts that have not logged into the domain within the last 30, 60 or more days. See Finding Inactive Users
Delete, Disable or Move User/Computer Dormant or Stale Accounts
A reliable Active Directory infrastructure should always ensure that the existing accounts are enabled and obsolete accounts are disabled /deleted, for optimum productivity and security. Active Directory user accounts status is very speculative as it is subjected to numerous password policies and other limitations; so in a small organization administrator can manually check the account status and eventually modify them, but for medium & large organizations a tool which can detect the status of user and computer accounts and delete, disable, move them subsequently is preferable.
ADManager Plus with its built-in Delete, Disable, Move feature helps administrator to maintain the status of Active Directory accounts up to date. You can delete, disable or move the single/bulk accounts at one instant by selecting them from any one of the User or Computer Reports. See How to move users account
Other extensive built-in Active Directory Reports, includes: |
|
ADManager Plus provides out-of-the-box reports on Active Directory infrastructure resources. More on Active Directory Reports |
Sarbanes-Oxley Act (SOX) |
Is your organization SOX compliant? In the article "SOX and the Single Admin", Redmond Magazine, January 2006, the author Russel Olsen, points out three controls that need to be addressed continuously. ADManager Plus will support your organization in this process. |
Need Features? Tell Us
If you want to see additional features implemented in ADManager Plus, we would love to hear. Click here to continue
|
|