+ Reply to Thread
Results 1 to 3 of 3
  1. Senior Member motogpman's Avatar
    Join Date
    Apr 2008
    Location
    Houston, Texas
    Posts
    410

    Certifications
    MCSA 2k3 (270/290/291/293), Sec+, Net+, Server+, A+, Cert. in EE
    #1

    Default Inactive PC accounts

    Can someon please refresh my memory? Isn't the default for AD to push a PC/laptop account offline if it hasn't logged in, authenticated itself on thr domain, 90 days? I know there are ways to do a query from the cli to find out which systems haven't logged in a specific amount of time too, but I am looking at the defaults here from MS.

    I would also imagine that is if the system was renamed, the SID would change, so the old system name would get diasabled too?

    Thanks in advance!
    Reply With Quote Quote  

  2. SS
  3. Senior Member Devilsbane's Avatar
    Join Date
    Apr 2010
    Posts
    4,203

    Certifications
    MCSE:Security, MCDST, A+, Network+, Security+, ITIL V3 Foundations, ITIL 2011 Intermediate: Service Transition, MOS 2007 (MCAS) BAS Computer Forensics
    #2
    The PC password is 30 days by default. The user account disables after 90 days. And no, renaming a pc shouldn't change a sid or guid.
    Reply With Quote Quote  

  4. certified fool Unforg1ven's Avatar
    Join Date
    Apr 2008
    Location
    Austin, TX
    Posts
    108

    Certifications
    A.A.S in Network I.T, CWNA, MCSA:2008, MCTS, A+/Sec+/Net+/Proj+, CIW:JS
    #3
    Like devilbane said, the SID should stay the same. It's very convenient when transitioning one existing role to simply another person.
    Reply With Quote Quote  

+ Reply to Thread

Social Networking & Bookmarks