Cleanup assets inactive in AD (but not disabled

[rasldasl]

I keep running out of licenses due to the assets that are discovered from AD that are inactive (no contact with AD) but not yet disabled. Another department controls AD and they are behind with their regular cleanup (disable at 60/delete at 90 days inactivity). In SCCM there is a way to ignore these AD computer objects.

Any way to ignore these in scanning or delete during cleanup?

[rasldasl]

Is there a way to make a feature request for a future release?

[Esben_D]

I don't think this is retrieved for computers. For computers only state and Bitlocker recovery key were added.

[rasldasl]

I'm checking out the new 7.2 version to see if it can determine last logon for computer AD objects.

I see this data for users - is it gathered for comptuters? If so, where can I find it?

Active Directory Audit Information - Last scanned: 09/05/2019 16:38:30


State: Enabled in AD
Last logon: 09/04/2019 21:40:10 (GMT)
Password last set: 07/19/2019 17:37:31 (GMT)

[rasldasl]

The problem is they are discovered (in AD), scan is failing since they don't really exist, and they are consuming licenses. Active or inactive they appear to use a license. If they are cleaned up (manually or after xx days of inactivity) they are rediscovered on the next AD scan.

Need a way to NOT discover if inactive (but not disabled) in AD or inactive needs to NOT count against license.

Please.

[Esben_D]

Take a look at the asset cleanup options: https://www.lansweeper.com/knowledgebase/performing-automated-database-cleanups/

If assets are inactive and not contacting the domain controller, Lansweeper should not scan then and you can configure the cleanup options to automatically change the asset's state or delete them.