We use Active Directory Janitor for this. A pretty simple tool. I just use it to run reports to find dead computer accts. It can also find user accts that havent logged in forever. Disable everything, delete later! Ive used oldcmp with good results as well.