0 votes

Hello All

We have a question in regards to checking the Active Directory forest for currently active groups. With the automation process begininning for adding groups to each person based on their jobCode, we need to weed out the groups that don't actually control anything anymore. We are looking for a suggestion, script or tool on how to accomplish this so we can weed out the groups that do not control anything.

Thank you

by (14.9k points)
0

Hello,

Could you specify exactly which groups should be deleted? How do we define that a group is inactive?

0

Our AD structure has been in place for many years and many incarnations of Admins before me. We know we have a few group (Office or internet) that were created way back when and no longer control anything in our environment. We are looking to discontinue using these groups and wanted to find all the groups that have been orphaned and no longer control anything.

0

Hello,

find all the groups that have been orphaned and no longer control anything

How exactly do you define these groups? Are these groups that have no Security Roles assigned?

As a solution, you can delete all the groups created more than a certain number of days ago. Does it meet your needs?

0

Sorry, that would not meet our needs. We need to be able to verify without breaking the entire organization, that groups that do not control anything can be disabled and then turned off. We were looking to see if we had a way to check for groups to be "called" upon in AD.

0

Hello,

Sorry, but we don't quite get which groups you want to delete? There is no such notion as 'active' or 'inactive' groups in AD, so you need to define it yourself. Maybe, you are searching for a way to clean up groups without any members in them? What are the criteria? Please explain.

0

Ok, we are gong a different way to test "active"groups. Sorry for any confusion.

Please log in or register to answer this question.

Related questions

0 votes
1 answer

It's possible to integrate ADAXES with HR Solution to create user in active directory ?

asked Feb 14 by babid (250 points)
0 votes
0 answers

We have delegated updating user properties in AD and the usrs have requested those changes updated in the GAL. Is ther ea way to do this in Adaxes?

asked Feb 13 by Derek.Axe (1.3k points)
0 votes
1 answer

Trying to setup accessing Office 365 using Adaxes v2018.1 I am getting "you need to install Azure Active Directory Powershell module" When I go to to do "install-module - ... Anyone know how to install this as the link on the forums here doesnt work Thanks

asked Oct 23, 2019 by davm79 (250 points)
0 votes
1 answer

Hi Our server manager has planned to upgrade Active Directory from 2008R2 to 2012R2. Is there a procedure to follow, regarding Adaxes, before and after this upgrade ? We are on Adaxes version 3.7.13430.0. - Thanks

asked Jul 12, 2017 by Boxx.dk (11.9k points)
0 votes
1 answer

Any idea what LDAP search filter I should be using to get a list of Deleted Objects (may be just user objects) from Active Directory's Recycle Bin. I was ... =test,DC=lab,DC=local" -ldapFilter:"(msDs-lastKnownRDN=*)" -IncludeDeletedObjects -Properties *

asked Oct 27, 2016 by Brajesh (2.5k points)
2,247 questions
2,007 answers
5,495 comments
20,752 users