Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What is the point of pruning old objects from Active Directory, especially computer accounts? If a computer is wiped or destroyed, then the stale computer account doesn't pose any security risk because it can't be used any more.

And I can't imagine that stale objects affect performance very much, because if they aren't being changed then they aren't being replicated.

So, what is the real motivation to keep Active Directory clean of stale objects?

share|improve this question
Why do you flush a toilet? To get rid of unnecessary waste. – xeon Apr 5 '12 at 22:21
up vote 13 down vote accepted

Clarity, above all.

It's easier to find a needle in a pile of 5 pieces of hay, than it is in an entire haystack.

share|improve this answer

It's all about the signal to noise ratio. The more noise (old computer accounts, etc), the harder it is to pick out the important, useful, up-to-date information (signal).

If all of that stale, outdated, no-longer-correct information is left in there, eventually it's going to bite you in the ass.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.