How to Remove Multiple Expired User Accounts from Windows NT (251334)

MORE INFORMATION

Prerequisites

• If you use Microsoft Windows 95, you are required to use Microsoft Internet Explorer 4.0 or later with WSH and ADSI installed.
• If you use Microsoft Windows 98, you are required to install ADSI and we recommend you install the latest version of WSH.
• If you use Windows NT, you are required to install Windows NT 4.0 Service Pack 3 or later, Internet Explorer 4.0 or later, and ADSI.

Sample Script DELEXPUSR.VBS

'\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ 
'\\ 
'\\  DATE 1-14-2000
'\\ 
'\\  DELEXPUSR.VBS
'\\ 
'\\  Script is used to delete all user accounts on a domain in which the 
'\\  AccountExpirationDate has passed. Without using the /delete command it will only 
'\\  List the accounts that need to be deleted.
'\\ 
'\\  CSCRIPT DELEXPUSR.VBS domain /delete
'\\ 
'\\  domain  = Target Domain
'\\ 
'\\  /delete =  Delete will actually delete the user account from the same
'\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ 


dim objarg 
dim tDomain

set objarg = wscript.arguments

If objarg.count = 0 then
	Wscript.Echo "Domain Parameter Missing" 
	Wscript.quit
end if

'Command line args 
ptr = 0
testflag = true
Do until ptr  = objarg.count 	
select case ucase(objarg(ptr))
case "/DELETE"
	testflag = False 
end select
	ptr = ptr +1
Loop

tdomain = objarg(0)

set oDom = GetObject("WinNT://" & tdomain & ",domain")
oDom.filter = Array("User")

On Error Resume Next

'Look through each user record if account is expired delete the account
For each oUser in Odom 	
	tAccountexp = oUser.AccountExpirationDate	
	if err <> 0 then
		tAccountexp = 1
	else
		tAccountexp = oUser.AccountExpirationDate
	end if
	err.clear

	'compare the result to today;  if result is negative then tAccountexp is later than
	'today.
	if tAccountexp = 1 then
		result = 1
	else
		result = DateDiff("d",now,tAccountexp)
	end if 
	if result < 0 then 
		if ouser.name <> "Administrator" or ouser.name <> "Admin" then
			' insert check here later for testing for membership to Domain Admins group
			if testflag then
				wscript.echo "User: " & ouser.name & ". Expiration: " & oUser.accountexpirationdate 
			else
				wscript.echo "Deleting User: " & ouser.name & ". Expiration: " & oUser.accountexpirationdate
				call oDom.delete("User",ouser.name) ' Delete the user the date is in the past
			end if 
		end if
	else 
		wscript.echo "User: " & oUser.name & " - Account Current"
	end if
next