Deleting old userids

20 pts.
Tags:
Application security
Biometrics
Database
Digital certificates
Encryption
Firewalls
Forensics
Identity & Access Management
Incident response
Instant Messaging
Intrusion management
Microsoft Exchange
Network security
provisioning
Secure Coding
Security
Security tokens
Single sign-on
VPN
Wireless
I used to display the last signon date on a specific user profile to know if it was still used, if it was older than 3 months, it was deleted. Now there are more & more user profiles defined to the system for other applications than the "green screen", like FTP, ISeries Navigator, ODBC, etc.... What's the best way to find out when was the last time such user profiles were used.
ASKED: January 11, 2006  5:55 PM
UPDATED: January 13, 2006  9:37 AM

Answer Wiki

Thanks. We'll let you know when a new response is added.

You could run a wmi script that pulls it directly from Active Directory. As I found out, however, it’s not as easy as just pulling it off your DC, so giving you a script to copy/paste to your system isn’t going to work. You can go to the following page to see how the scripting guys do it and adapt it as you see fit to determine when people last logged onto the domain.

http://www.microsoft.com/technet/technetmag/issues/2006/01/ScriptingGuy/default.aspx

SF

Discuss This Question: 2  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Maverick64
    The last used date for the *USRPRF objects in QSYS should get you what you need.
    0 pointsBadges:
    report
  • PaulThomas
    If you want to be completely thorough in your examination, prior to deletion, you will need to check a number of "things".... Last Used Date Previous Signon Date Password Last Changed Date Creation Date Is the profile a group profile? Is it an IBM supplied profile? Is it a 3rd party product profile? All of these could affect your decision to delete the profile (or not)
    0 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following