AD System Discovery does not delete or removed objects from ConfigMgr and the setting you called out only dictates the creation of new objects. To automatically delete old, stale objects, you need to enable the Delete Inactive Discovery Data site maintenance task and configure its threshold as desired: https://learn.microsoft.com/en-us/mem/configmgr/core/servers/manage/reference-for-maintenance-tasks#delete-inactive-client-discovery-data
Delete unnecessary computer objects
You are using the Configuration manger 2103 environment.
The total number of computer objects synchronized from AD is about 5000,
There are computer objects that are not currently in use.
You don't have to sync computer objects that you aren't currently using to Configuration Manager, so
In the system search setting option, the setting value of "Search only for computers logged in to the domain within the specified period" has been shortened.
After that, I manually performed a complete system search,
Unnecessary computer objects that have not been logged on for more than 30 days remain in Confiration Manager.
Is there a way to delete a computer object?
Microsoft Security Intune Configuration Manager Other
-
Jason Sandys 31,406 Reputation points Microsoft Employee Moderator
2021-09-02T14:36:06.197+00:00