Active Directory Inactive Users and Computers Report

ADManager Plus helps you to find all inactive or unused Active Directory (AD) objects such as user accounts and computers. It lists all those AD accounts which have not logged on to the Windows 2000/2003/2008/2012 domain during the specified period of time. ADManager Plus scans each Domain Controller (DC) to determine the last logon time of every user/computer object present in the specified domains/Organizational Units (OU) and lists those that do have any logon activity during the specified period.

Besides unused users and computers, ADManager Plus also helps you locate and fetch all the distribution and security groups that do not have any members (empty AD groups). Unlike the native AD tools, this web-based Active Directory management tool lets you do all these without using PowerShell scripts; you can even cleanup or manage (delete, disable or move) the inactive AD accounts right from the reports with just point-n-click actions.

Inactive Users/Computers Identification and Management

• Generate inactive users list
• Generate inactive computers list
• Delete, disable or move inactive users/computers, in bulk

Inactive Users Report

This report helps you track all dormant or unused Active Directory user accounts based on their true last logon time. To generate the inactive users report, all that you have to do is specify the time period for which you wish to check the logon activity and also the container (domains/OUs) from which you wish to fetch the inactive users; the tool will display all the users who have been inactive for the specified time period, along with details such as their last logon time and account status.

Inactive Computers Report

This report allows you to track all those computer objects in the Active Directory from which no logon activity has happened during the specified time frame. The unused computer accounts are tracked based on the values in their lastLogon and pwdLastSet attributes. To generate this report, just specify the domains/OUs from which you wish to identify the inactive computers and specify the time period for which you wish to check the logon activity; the tool will list all the computer accounts from which no logon activity has taken place during the specified time period.

Manage Inactive Users/Computers

ADManager Plus's 'on-the-fly' AD management ability allows you to manage or cleanup the inactive or unused user and computer accounts in bulk, right from the reports. One you generate the inactive users or computers report, you can select the desired ones from the report, and delete, disable, move all the selected objects to a different OU or even enable the disabled ones, using the management options located right within the report.

Management options in Inactive Users and Computers reports

Mentioned below are some of the management actions that can be performed from ADManager Plus's reports:

- Disable all the selected accounts from the list of inactive users or computers in the report
- Move all the desired inactive user or computer accounts, at once, to another OU. Steps to move user accounts from one OU to another, in bulk.
- Delete either one, many or all the unused user or computer accounts, in bulk, right from the inactive user/computer report
- Enable the desired disabled user or computer accounts

The inactive/unused users and computers report displays a specific set of attributes by default. These reports can also be customized as needed, to view information such as when created, account status, last logon time, last logoff time, member of, OS, etc.

ADManager Plus's Prepackaged Active Directory reports:

Besides the inactive users and computers reports, ADManager Plus's completely script-free AD reporter also includes 150+ reports which also include important reports such as :

• Account Status Reports: disable, expired, locked out, recently created/modified/deleted accounts, etc.
• Password Reports: password expired users, users whose passwords have not been changed during the specified, users whose passwords are about to expire, etc.

ADManager Plus also features a report scheduler using which you can auto-generate all the required reports and email them to multiple users. The scheduler also offers configurable filters to help you customize the reports while scheduling them.

Explore all the 150+ pre-built Active Directory reports in ADManager Plus using the 30-day free trial,

Need Features? Tell Us
If you want to see additional features implemented in ADManager Plus, we would love to hear. Click here to continue