It may be a requirement to clean up old computer accounts that have not been online for a while. A script may be used for this purpose that checks the pwdlastset attribute of the computer object in AD and then deletes all the accounts that did not update this attribute in a certain number of days.
Byy default, vasd changes the Active Directory password every 30 days. Active Directory will update the pwdlastset attribute when the password is changed.
Note: pwdlastset doesnt register when an administrator does a password set like during the initial join.
© ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center