beancole Posted October 19, 2015 Posted October 19, 2015 Hi All, what does everyone do to remove users. I'm talking Remove from AD and wipe profile folders (.v2) and also documents. I currently just have everything in the students year group then just delete everything manually at the end of the year. Can this be done in active directory powershell for example. I am just about to upgrade the Domain Level Function to 2012 and wondered how it might be done.
localzuk Posted October 19, 2015 Posted October 19, 2015 I delete it all by year at the end of the year, same as you @beancole. Data is archived and kept for a year though.
Oaktech Posted October 19, 2015 Posted October 19, 2015 I disable people as they leave throughout the year, at the end of the year I disable the whole leaving year group and leave it. The year group that left the previous year then is deleted wholesale from AD and their homedrive/profiles are also deleted.
sister_annex Posted October 19, 2015 Posted October 19, 2015 I'm just in the process of doing this... all our data get's archived at EOY (as should be standard) at the end of the year all our leavers (year 11 and 13/14) get disabled and moved to a To Be Deleted OU - if any students return (tends to be a lot for year 11 in to 12, not so much 13 to 14) we just re-enable the account and move it back to it's original OU Then at the Oct HT we run a script that looks in the TBD OU, pulls the AD information and then proceeds to delete Roaming profile/ appdata folders, delete User Home Directories, and finally delete the AD account Staff deletions take a similar approach! we are looking in to Salamander AD tool to automate all this though
Grey-gear Posted October 19, 2015 Posted October 19, 2015 Where I work takes a copy of there user spaces and then deletes the user from AD then deletes there user spaces and e-mail
Geoff Posted October 19, 2015 Posted October 19, 2015 I don't work in a school any more (although I imagine our system would work). We have a separate HR database in MS SQL. There's a bunch of Powershell scripts that create, rename, move, delete users based on what HR says. So it's completely hands off from our point of view. I fully expect you could do something similar based on what your MIS says.
beancole Posted October 20, 2015 Author Posted October 20, 2015 cheers gents some food for though there. Been familiarising myself properly with powershell as I have been lazy the last few years. Going to stick with just deleting the whole year folder. I just wish the active directory GUI would delete the profile and user area when you delete a user would be so much simpler. Currently even with GPO telling profiles to allow admin I have to by command take ownership of the whole folder as .v2 profiles wont delete even as admin.
jcookhgs Posted October 20, 2015 Posted October 20, 2015 we are looking in to Salamander AD tool to automate all this though How much is this if you don't mind me asking, I see no prices on their website!
kearton Posted October 20, 2015 Posted October 20, 2015 (edited) How much is this if you don't mind me asking, I see no prices on their website! I believe it's £999/yr, plus £400 (one-off) for install/config. It automates SO much for us, I wouldn't be without it. Edited October 20, 2015 by kearton
sister_annex Posted October 20, 2015 Posted October 20, 2015 This!! I believe it's £999/yr, plus £400 (one-off) for install/config.
jcookhgs Posted October 20, 2015 Posted October 20, 2015 Thanks. Maybe next year then from a budget perspective!!
Geoff Posted October 20, 2015 Posted October 20, 2015 I would highly encourage everyone to learn Powershell and automate it themselves.
beancole Posted October 26, 2015 Author Posted October 26, 2015 erm, thats kinda what I'm getting at. Anyone know the best place to start. I have been watching some microsoft virtual academy stuff but the problem is there doesn't seem to be a decent course to learn everything without paying through the nose.
themightymrp Posted October 26, 2015 Posted October 26, 2015 I don't use enough Powershell for what I could use it for, but I'm teaching myself bits as I go. For me, the MS Virtual Academy was a great start. Work your way through "Getting Started with Powershell Jumpstart" and then follow this up with "Advanced Tools and Scripting". Both of these courses are presented by Jason Helmick and Jeff Snover (the inventor of Powershell!!) They were excellent videos to learn from. Following from that you can go to "Using Powershell for Active Directory". It's a little more advanced (which is perhaps annoying) but does give you some insight on using it with your AD environment. Other than that, play around and search edugeek
Geoff Posted October 26, 2015 Posted October 26, 2015 The Powershell Unplugged 2014 Session is a great starting point as well. https://channel9.msdn.com/Events/TechEd/NorthAmerica/2014/DCIM-B318 1
halbaradkenafin Posted October 26, 2015 Posted October 26, 2015 Powershell in a month of lunches book is very good too if you want something to read that goes through the basics in a pretty easy yo understand way.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now