Disable computer accounts from old computers

Summary of Issue

This command will find computer accounts that have not checked in to the servers in over 60 days and then disable their accounts. This is great to use to clean up the computer accounts in AD.

Methods to resolve the problem

Instructions

1. Run the following command on a Domain Controller

C:\> dsquery computer -stalepwd 60 | dsmod computer -disabled yes