OldCmp

OldCmp is a command-line utility used to find and cleanup old computer accounts that haven't been used. It can also be used to clean up user accounts when the proper filter is specified.

OldCmp was built because there was no decent way to find/report on/delete old computers in Active Directory. You can use dsget combined with dsrm but you are really taking your life in your hands. OldCmp has all sorts of safeties built in to try and prevent you from shooting your own foot. Note that you can still shoot yourself in the foot, it just takes more work. This appeals to the paranoid, scared, admin in myself.

OldCmp also is flexible enough to add your own components to the filter so if you want to only find disabled computer accounts or computer accounts in the xx dept or whatever, you have the ability to add any standard LDAP queries onto the base filter generated.

OldCmp as mentioned above has some safeties built in, the list is:

• You can not delete a machine account that isn't already disabled.
• You must specify a safety limit of how many machines it can manipulate at once if you want more than 10. By default it will only affect up to 10 accounts. If you want to work up to 50 machines you can say 50, if you want up to 100, specify 100.
• You must specify the FORREAL option if you really want it to make changes, otherwise it will just report what it will try to do... I.E. - It will be toothless.
• It will not modify domain controller accounts at all. Period. Just too many dangers there.

The tool can create output in several formats based on the switches specified. By default the output will be standard HTML. However you can specify Dynamic HTML (dhtml) or CSV as well. The dhtml allows for dynamic sorting by clicking on column headers.