XP End of Life

[hales]

I'm looking for a way to disable computers on our network that are still Windows XP after it has gone end of life. When 2000 went we disabled the accounts but we still had some teachers plugging in and using cached credentials, anybody got a way of disabling them on the network entirely?

 

Hales

[Michael]

Disable the XP computer accounts in Active Directory, or delete them completely (not recommended), but at least they can't authenticate with the domain.

[free780]

Why not upgrade the pcs?

[elsiegee40]

Why not upgrade the pcs?

 

It sounds like they are past the point of being upgradeable

[FN-GM]

You could do something in powershell. Something like this

 

Get-ADComputer -Filter {OperatingSystem -Like "Windows XP*"} -Property * | Set-ADComputer -Enabled $false

 

To delete

 

Get-ADComputer -Filter {OperatingSystem -Like "Windows XP*"} -Property * | Remove-ADComputer

 

 

I have not tested this but it should work.

 

If you enable the Active Directory recycle bin you can restore deleted computers really easy if you need to.

Edited January 15, 2014 by FN-GM

[plexer]

You can run a query to show computers where os is 5.1 then disable the resultant list of accounts.

 

Ben

[FN-GM]

You can run a query to show computers where os is 5.1 then disable the resultant list of accounts.

 

Ben

 

This would be an easier way, forgot you could do that!

[plexer]

Sorry should have also said you do this in Active Directory Users and Computers.

 

Ben

[LosOjos]

BBC News - Microsoft extends security fixes for Windows XP to 2015

[ajs]

Except, if you actually read the blog post, they're only providing antimalware and engine updates for software running on XP, so in effect they're updating Microsoft Security Essentials and nothing else. Support for XP itself is still ending as planned on 8th April.