|
So we just started a policy of deleting Computer Accounts that have been inactive for 60 days. For the most part, it works well. But we're getting a handful of users who's User Accounts are active, but their Computer Account are reporting that the last login on that computer was 2 months ago. They do not have any other computers, and they can't log into anything else. Any ideas? Edit: Thanks to whoever changed my post tag! RadicalR fucked around with this message at 16:54 on Jul 25, 2014 |
#
?
Jul 25, 2014 16:21
|
|
|
|
| # ? Apr 27, 2024 00:10 |
|
|
Are you certain those machines are communicating with your domain controller? Normally they would get a Trust Relationship Fail message on login, but I've seen weird issues like this that usually require removing and readding to the domain.
|
|
#
?
Jul 25, 2014 18:16
|
|
|
RadicalR posted:So we just started a policy of deleting Computer Accounts that have been inactive for 60 days. For the most part, it works well. But we're getting a handful of users who's User Accounts are active, but their Computer Account are reporting that the last login on that computer was 2 months ago. They do not have any other computers, and they can't log into anything else. Sixty days seems like a short threshold. Any specific reason to do it so soon? Also, what kind of server OS/AD are you using? Could it be that the computers have been running for a few months and haven't been rebooted?
|
|
#
?
Jul 26, 2014 00:07
|
|
|
Zogo posted:Sixty days seems like a short threshold. Any specific reason to do it so soon? Also, what kind of server OS/AD are you using? Windows 2008R2 last I checked, but we may have upgraded to 2012 R2, I believe. That's the security rules that were handed down, so <shrug>. Also, I didn't think about that. Sleep mode doesn't count as shutting down, right?
|
|
#
?
Jul 26, 2014 01:08
|
|
|
RadicalR posted:That's the security rules that were handed down, so <shrug>. Overly stringent policies have been known to induce IT headaches. RadicalR posted:Also, I didn't think about that. Sleep mode doesn't count as shutting down, right? There are many power states with the modern OS/hardware but yea the server may not see some of those as being fully off unless they get a reset or shutdown. http://en.wikipedia.org/wiki/Advanced_Configuration_and_Power_Interface Easiest thing would be to reboot a few of those machines and see what happens.
|
|
#
?
Jul 26, 2014 01:36
|
|