Deleting old userids
Application security, Biometrics, Database, Digital certificates, Encryption, Exchange, Firewalls, Forensics, Identity & Access Management, Incident response, Instant Messaging, Intrusion management, Network security, provisioning, Secure Coding, Security, Security tokens, Single sign-on, VPN, Wireless
I used to display the last signon date on a specific user profile to know if it was still used, if it was older than 3 months, it was deleted. Now there are more & more user profiles defined to the system for other applications than the "green screen", like FTP, ISeries Navigator, ODBC, etc....
What's the best way to find out when was the last time such user profiles were used.
Software/Hardware used:
Software/Hardware used:
ASKED:
January 11, 2006 5:55 PM
UPDATED:
January 13, 2006 9:37 AM
Answer Wiki:
You could run a wmi script that pulls it directly from Active Directory. As I found out, however, it's not as easy as just pulling it off your DC, so giving you a script to copy/paste to your system isn't going to work. You can go to the following page to see how the scripting guys do it and adapt it as you see fit to determine when people last logged onto the domain.
http://www.microsoft.com/technet/technetmag/issues/2006/01/ScriptingGuy/default.aspx
SF
To see all answers submitted to the Answer Wiki: View Answer History.
The last used date for the *USRPRF objects in QSYS should get you what you need.
If you want to be completely thorough in your examination, prior to deletion, you will need to check a number of “things”….
Last Used Date
Previous Signon Date
Password Last Changed Date
Creation Date
Is the profile a group profile?
Is it an IBM supplied profile?
Is it a 3rd party product profile?
All of these could affect your decision to delete the profile (or not)