Mastering Active Directory

Best practices

Here we will look into some of the best practices that can be used to manage AD object:

• Housekeeping: It is important to review the validity of AD objects from time to time. There can be objects no longer active in operations. They can be computer objects, group objects, or user objects. There are several ways to handle these types of objects:
  • If it's possible to verify objects are not in use for 100% of the time, objects can be completely deleted from the AD.
  • If it's not possible to confirm, the object can be disabled and monitored for events. If there no events occur based on the action, it can be removed from the AD after sometime.

In order to manage disabled objects, it is advised to create a different OU and move ...