Keeping track of computer objects 1

[xyrx]

Hello all. I'm not a sysadmin, but I am a 2nd level desktop support tech attempting to find a resolution for our sysadmin who insists that the desktop support team do some of his work.

His major complaint is that with all the computer renaming , deleting, and new computer names coming up on the network, he has a hard time keeping track of all the changes with AD-aware server software... such as various agents running on all workstation (antivirus, encryption software, firewall, etc) . This sounds like he's having a hard time managing which objects are legitimate and which objects are orphaned or no longer valid.

Does anyone know of a way to manage this issue? Is there some tool that audits all computer name, and verifies whether a SID assigned to that name has changed, or whether a computer name has been deleted, etc? Right now, desktop support is responsible for reporting EACH and EVERY deletion/rename of a computer object, which is subject to human error. Thanks for any advice.

 

[Roadki11]

Try this tool. I use it every few months to make sure i didnt miss something as employees come and go. There are some other useful tools on that site also.

http://www.joeware.net/win/free/tools/oldcmp.htm

hope this helps,

RoadKi11

 

[xyrx]

That's a pretty cool utility... thanks!

 

[supportahm1980]

I have a script that checks to see if computer objects have not been modified in 180 days(or whatever day you specify). If it has not I disable the computer object and move into another OU. all done with VB script.