Find Stale User Accounts in Active Directory
This guide describes how to use the AD Pro Toolkit to find stale user accounts in Active Directory.
- The toolkit uses the lastLogonTimestamp attribute to identify inactive user accounts.
- Enter the number of days of inactivity into the “no logons within” options box.
In this first example, I’ll find Active Directory users that have not logged on in the last 90 days.
Inactive Users for 90 days
Open the AD Cleanup tool and follow the steps below.
Step 1. Select the box “No logons within” and enter 90.
This means the account has not been logged on in the last 90 days.
Step 2. Click the run button to see the results.
You can perform the following actions on the accounts.
- Export to CSV, PDF, or excel file
- Bulk move the accounts to another OU
- Bulk disable the selected accounts
- Add or remove columns to the report
Inactive Users for 30 days
Follow these steps to find users that have not logged on in the last 30 days.
Step 1. Select the box “No logons within” and enter 30.
Step 2. Click the run button to review the results.
Next Steps
In this guide, you learned to find stale and inactive user accounts.
Go to the next guide to learn how to find all disabled users.
Find Disabled Users