Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
sop:active_directory [2017/11/07 19:11]
nullzilla [Accounts]
sop:active_directory [2018/02/25 01:18] (current)
Line 11: Line 11:
  
 ==== Accounts ==== ==== Accounts ====
 +For security purposes create dedicated users with only required permissions for things like running scheduled tasks, services and devices like copiers.
 +
 When a user account is no longer needed, don't delete the user, just disable it and if desired put it in a "​Disabled"​ folder. If after a period of time the account hasn't been needed you can then delete the account. When a user account is no longer needed, don't delete the user, just disable it and if desired put it in a "​Disabled"​ folder. If after a period of time the account hasn't been needed you can then delete the account.
  
-For security purposes create dedicated users with only required permissions for things like running scheduled tasks, services and devices like copiers. ​When cleaning up AD you can use these PowerShell commands to find any scheduled tasks that may be running as users you're removing/​changing passwords for:+When cleaning up AD you can use these PowerShell commands to find any scheduled tasks that may be running as users you're removing/​changing passwords for:
 <file powershell ViewScheduledTasksRunningAsAUser.ps1>​ <file powershell ViewScheduledTasksRunningAsAUser.ps1>​
 $schtask = schtasks.exe /Query /S localhost /V /FO CSV | ConvertFrom-CSV | Where { $_.TaskName -ne "​TaskName"​ } $schtask = schtasks.exe /Query /S localhost /V /FO CSV | ConvertFrom-CSV | Where { $_.TaskName -ne "​TaskName"​ }
  • Last modified: 2018/02/25 01:18
  • (external edit)