Hyena should be able to export all of the users in AD to a tab delimited text file. If not, download a copy of DameWare NT utilities 30 day eval from
and you will never open Hyena gagin... DameWare is Hyena on STEROIDS!!
Once you have your text file, open the file in Excel, and click in the upper most left cell and the entire document will be hilighted,
Next click on Data on the toolbar, then filter => autofilter
between using the drop down boxes to filter, and combinations of sort by collumn ascending or descending, you should be able to weed out the never logged on accounts, and accounts with old passwords etc.
Once you have your list of users to be manipulated, use the Net user <username> /comment:"XXX To be deleted XXX" command
and the Net user <username> /active:no
to disable the accounts.
(Note Don't delete them right away, leave them disabled for 30 days and see who starts squawking... it is easier to re-enable an account than re create one)
After 30 days, use the Net user <username> /DELETE /y to remove the accounts all together.
If you are doing multiple accounts, cut the user ID column of cells of the filtered users that you want to manipulate
and paste them to a blank notepad, save it as July10-users.txt
You now have a list of the users in a single row in Notepad.
Next do the following command
for /f %a in (July10-users.txt) do net user %a /<Argument> >> results.log
This will process each of the users in the text file with the net user command consecutively, and dump the results out to a log file.
** Be very careful with the list of users... you could delete all of the users inyour entire domain (in about 5 minutes)if that is what you put into your users.txt file.
I would suggest getting comfortable with using the "Net user" and "for" commands by practicing on some local accounts on a test workstation before letting fly in your production environment...
If you don't like doing this manually, there are tools like "Active Rolls" for AD that do some very handy user Admin tasks, but they are much more expensive than opening a command window.
