Do you delete computer accounts from Active Directory?

Updated by Brady Stroud [SSW] 1 year ago. See history

123
No component provided for introEmbed

Computer accounts in AD are similar to user accounts - they can be used to access other systems and data in your domain. Since computer accounts do not hold any useful information, it is safe to delete them when a computer is decommissioned. It is also very easy to re-join a computer to the domain if needed, so there is no reason to leave computers in a "disabled" state.

❌ Figure: ![Bad example: Disabled computers in AD](/uploads/rules/delete-computer-accounts-from-ad/disabled-pcs.png)

✅ Figure: ![Good example: Only enabled, current computers](/uploads/rules/delete-computer-accounts-from-ad/enabled-pcs.png)

Acknowledgements

Chris Schultz
Related rules

Need help?

SSW Consulting has over 30 years of experience developing awesome software solutions.

We open source.Loving SSW Rules? Star us on GitHub. Star