Clean up your Active Directory
Over time, user and computer accounts become obsolete and needs elimination. ADManager Plus helps you to trace out all inactive, disabled, account-expired users and computers in Active Directory. Based on the company policy you can delete, disable, enable or move these accounts.
This enhances the safety of your Active Directory and its performance, also you can save significant time by eliminating the need of using command line tools and scripts.
Find user or computer accounts not logged on within X number of days
Find expired and unused Active Directory accounts
Locate inactive user or computer accounts and disable, delete, move or enable Active Directory accounts in seconds.
Shows disabled accounts, last logon/logoff time, OS type, etc.
Export report to CSV,XLS,HTML,PDF and CSVDE
Finding stale accounts on your network
Using the following reports from ADManager Plus will help detect and remove dormant accounts in your Active Directory:
With ADManager Plus you can easily generate the list of user/computer accounts that are disabled for some reason. The userAccountControl attribute is used to determine the disabled users in the domain. You can manage these accounts easily by deleting them or moving the accounts to another OU. Also you can delete/enable/move two or more disabled accounts at the same time. See How to move users account.
Active Directory user accounts that have gone obsolete for a long time might have expired without either the user or administrator knowing about them. Writing a script to find expired accounts can be tedious, ADManager Plus report generator scans the Active Directory and gives you a list of all expired accounts. From the result page, enabling you to proactively secure the network by deleting users or disabling users or move expired users to least privileged OU. You can also print and export Locked out Users results data to XLS, CSV, PDF, HTML, etc.
Using ADManager Plus you can retrieve inactive user accounts that have not logged into the domain within the last 30, 60 or more days. See Finding Inactive Users
A reliable Active Directory infrastructure should always ensure that the existing accounts are enabled and obsolete accounts are disabled /deleted, for optimum productivity and security. Active Directory user accounts status is very speculative as it is subjected to numerous password policies and other limitations; so in a small organization administrator can manually check the account status and eventually modify them, but for medium & large organizations a tool which can detect the status of user and computer accounts and delete, disable, move them subsequently is preferable.
ADManager Plus with its built-in Delete, Disable, Move feature helps administrator to maintain the status of Active Directory accounts up to date. You can delete, disable or move the single/bulk accounts at one instant by selecting them from any one of the User or Computer Reports. See How to move users account
How it Works
Administrator can generate inactive users or computers, disabled or expired accounts and manage them from the reports itself by disable, delete, enable or move the User or computer accounts to a differtent OU.
Other extensive built-in Active Directory Reports, includes:
ADManager Plus provides out-of-the-box reports on Active Directory infrastructure resources. More on Active Directory Reports
Sarbanes-Oxley Act (SOX)
Is your organization SOX compliant? In the article "SOX and the Single Admin", Redmond Magazine, January 2006, the author Russel Olsen, points out three controls that need to be addressed continuously. ADManager Plus will support your organization in this process.
Need Features? Tell Us
"We evaluated ADManager Plus along with several other Active Directory Management and Reporting software. After using it really made life easy for administrators. It is very understandable and fast to learn, I didn't even read the manual."
Bogdan Campeanu, Network Engineer