System administrators often need to locate disabled user accounts in Active Directory Users and Computers (ADUC) for auditing, cleanup, or reactivation purposes. Fortunately, ADUC provides built-in filters to perform this task efficiently using the graphical interface. This guide walks you through the steps using the built-in tools, complete with original screenshots.
Step 1: Open Active Directory Users and Computers
- Press Windows key + R to open the Run dialog.
- Type
dsa.mscand press Enter.
Alternative Method:
- Press Windows key and type Active Directory Users and Computers.
- Select the app from the Start menu.
Step 2: Enable Advanced Features
- Click on the View menu in ADUC.
- Select Advanced Features to enable additional management tabs.
This step is essential to access attributes like the Attribute Editor and view detailed account information.
Step 3: Perform a Search for Disabled Users
- Right-click on the container or domain where you want to search.
- Choose Find… from the context menu.
- In the Find Users, Contacts, and Groups window, click the Common Queries tab.
- Select the appropriate domain in the In dropdown.
- Check the box labeled Disabled accounts.
- Click Find Now to execute the search.
Step 4: Review Search Results
The results pane will display all user accounts that match your filter criteria. You can scroll through and verify usernames, organizational units (OUs), and descriptions to identify inactive or decommissioned accounts.
Step 5: View and Confirm Account Properties
- Double-click on a user account in the results list.
- Go to the Account tab to confirm that “Account is disabled” is checked.
Tips and Best Practices
- Use clear naming conventions when disabling accounts temporarily.
- Document reasons for disabling accounts using the Description field.
- Consider scheduling a quarterly review of disabled accounts for security hygiene.
Related Articles from MagnetClicks
- How to Add Users & Computers in Active Directory
- Create Security Groups in Active Directory
- Windows Activation Status – Explained
- How to Monitor for Overheating Computers
Please note that the exact steps and options may vary slightly depending on your version of Active Directory Users and Computers. The key is to enable “Advanced Features” to access additional options and fields, and then use the “Find” feature to search for disabled user accounts.
