I'm trying to weed out inactive accounts, and have discovered that the majority of accounts have been inactive since before our domain functional level was raised to 2003. The
lastLogonTimestamp attribute is
<Not Set> on all of these accounts, and
DSQuery User -inactive # will not return them.
How can I find these inactive accounts?
If I retrieve a list of accounts with the
<Not Set>, will the list be a reliable indicator of a dead account?