Active Directory and old machine cleanup

Question

Hello,

In our Active Directory environment (Server 2012 R2) we have many machines (Windows 7\Windows 8\Windows 10) that no longer exists. Because if this we have no way to properly disjoin them from the domain. Is there a "clean up" process for removing these machines from AD other than just manually deleting them?

Thank you,

Steve

Answer 1

Yes, deleting the computer accounts is a proper clean up plan for active directory.

--please don't forget to Accept as answer if the reply is helpful--

Answer 2

Some options here via PowerShell.
https://gist.github.com/9to5IT/ce47adee89e9611050d89e2ae210eb74

--please don't forget to Accept as answer if the reply is helpful--

Answer 3

Thank you for the response DSPatrick. I guess i could have been a little bit clearer in my initial post.

Is manually deleting old computer accounts the only proper or clean way to remove them when they no longer exist and are unable to properly disjoin them from the domain? I just want to make sure that there isn't any residual "stuff" left in AD when manually deleting versus disjoining.

Answer 4

Sounds good, thank you!

Answer 5

Hi,

I am glad to hear that your issue was successfully resolved\I am pleased to know that the information is helpful to you. If there is anything else we can do for you, please feel free to post in the forum.

Best Regards,

Vicky