Answered by:
removed computer account in AD

Question
-
Hai,
i have joined a machine to domain. after few days i disjoined from ad that computer.now it shows disabled status. i want to know at what time or when this disabled account will be deleted by default??
Chandru CT. MCITPMonday, July 4, 2011 7:49 AM
Answers
-
Hello,
if you disjoin a machine from the domain it will not be removed automatically from AD UC, this you have to do manual with right-click and delete.
Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.- Proposed as answer by Santhosh Sivarajan-MVP Monday, July 4, 2011 1:24 PM
- Marked as answer by Nina Liu - MSFT Tuesday, July 5, 2011 6:27 AM
Monday, July 4, 2011 8:25 AM -
- Proposed as answer by Santhosh Sivarajan-MVP Monday, July 4, 2011 1:24 PM
- Marked as answer by Nina Liu - MSFT Tuesday, July 5, 2011 6:27 AM
Monday, July 4, 2011 8:36 AM -
What you see is by design, any system which has been removed from the domain or crashed, that object remain in AD & you have to remove it manually.Regrading DNS record of that computer object, its DnsTombstoned attribute is marked true for later deletion.
Regards
Awinish Vishwakarma| CHECK MY BLOG
Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.
- Proposed as answer by Santhosh Sivarajan-MVP Monday, July 4, 2011 1:24 PM
- Marked as answer by Nina Liu - MSFT Tuesday, July 5, 2011 6:27 AM
Monday, July 4, 2011 8:39 AM -
As others mentioned here, there is no automatic mechanism in AD to delete these computer accounts. You have to manually delete them. Or you can use a DSQUERY COMPUTER INACTIVE command to identify them.
http://technet.microsoft.com/en-us/library/cc730720(WS.10).aspx
Here is another example – identify and delete the stale computers from AD:
http://portal.sivarajan.com/2010/03/delete-stale-or-inactive-computer.html
Santhosh Sivarajan | MCTS, MCSE (W2K3/W2K/NT4), MCSA (W2K3/W2K/MSG), CCNA, Network+ Houston, TX
Blogs - http://blogs.sivarajan.com/
Articles - http://www.sivarajan.com/publications.html
Twitter: @santhosh_sivara - http://twitter.com/santhosh_sivara
This posting is provided AS IS with no warranties,and confers no rights.- Proposed as answer by Tanmoy Manik Monday, July 4, 2011 1:40 PM
- Marked as answer by Nina Liu - MSFT Tuesday, July 5, 2011 6:28 AM
Monday, July 4, 2011 1:26 PM
All replies
-
See the below link
http://technet.microsoft.com/en-us/library/cc759204(WS.10).aspx
Best regards Biswajit Biswas Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. MCP 2003,MCSA 2003, MCSA:M 2003, CCNA, MCTS, Enterprise AdminMonday, July 4, 2011 8:23 AM -
Hello,
if you disjoin a machine from the domain it will not be removed automatically from AD UC, this you have to do manual with right-click and delete.
Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.- Proposed as answer by Santhosh Sivarajan-MVP Monday, July 4, 2011 1:24 PM
- Marked as answer by Nina Liu - MSFT Tuesday, July 5, 2011 6:27 AM
Monday, July 4, 2011 8:25 AM -
- Proposed as answer by Santhosh Sivarajan-MVP Monday, July 4, 2011 1:24 PM
- Marked as answer by Nina Liu - MSFT Tuesday, July 5, 2011 6:27 AM
Monday, July 4, 2011 8:36 AM -
What you see is by design, any system which has been removed from the domain or crashed, that object remain in AD & you have to remove it manually.Regrading DNS record of that computer object, its DnsTombstoned attribute is marked true for later deletion.
Regards
Awinish Vishwakarma| CHECK MY BLOG
Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.
- Proposed as answer by Santhosh Sivarajan-MVP Monday, July 4, 2011 1:24 PM
- Marked as answer by Nina Liu - MSFT Tuesday, July 5, 2011 6:27 AM
Monday, July 4, 2011 8:39 AM -
As others mentioned here, there is no automatic mechanism in AD to delete these computer accounts. You have to manually delete them. Or you can use a DSQUERY COMPUTER INACTIVE command to identify them.
http://technet.microsoft.com/en-us/library/cc730720(WS.10).aspx
Here is another example – identify and delete the stale computers from AD:
http://portal.sivarajan.com/2010/03/delete-stale-or-inactive-computer.html
Santhosh Sivarajan | MCTS, MCSE (W2K3/W2K/NT4), MCSA (W2K3/W2K/MSG), CCNA, Network+ Houston, TX
Blogs - http://blogs.sivarajan.com/
Articles - http://www.sivarajan.com/publications.html
Twitter: @santhosh_sivara - http://twitter.com/santhosh_sivara
This posting is provided AS IS with no warranties,and confers no rights.- Proposed as answer by Tanmoy Manik Monday, July 4, 2011 1:40 PM
- Marked as answer by Nina Liu - MSFT Tuesday, July 5, 2011 6:28 AM
Monday, July 4, 2011 1:26 PM