3

What is the point of pruning old objects from Active Directory, especially computer accounts? If a computer is wiped or destroyed, then the stale computer account doesn't pose any security risk because it can't be used any more.

And I can't imagine that stale objects affect performance very much, because if they aren't being changed then they aren't being replicated.

So, what is the real motivation to keep Active Directory clean of stale objects?

Improve this question
1
  • 7
    Why do you flush a toilet? To get rid of unnecessary waste.
    – xeon
    Apr 5, 2012 at 22:21

2 Answers 2

Reset to default
13

Clarity, above all.

It's easier to find a needle in a pile of 5 pieces of hay, than it is in an entire haystack.

Improve this answer
9

It's all about the signal to noise ratio. The more noise (old computer accounts, etc), the harder it is to pick out the important, useful, up-to-date information (signal).

If all of that stale, outdated, no-longer-correct information is left in there, eventually it's going to bite you in the ass.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .