Identifying stale user accounts is an age old problem that all administrators deal with. Accessing Active Directory through DSQuery provides some strong and easy to use mechanisms to quickly identify inactive User accounts and to find Computer accounts for systems that should have been removed from the domain. In this episode we'll demonstrate how to access this information and explain some of the caveats with the DSQuery and DSGet options.

The show notes for this episode have been posted here http://it-audit.sans.org/blog/2011/08/08/episode-10-shownotes-more-dsquery-magic