Find Disabled Computers in AD

 

1. Open the Active Directory Users and Computers snap-in.
2. In the left pane, connect to the domain you want to query.
3. Right-click on the domain and select Find.
4. Beside Find, select Common Queries.
5. Check the box beside “disabled accounts.”
6. Click the Find Now button.

ADUC Additional Information tab

The Additional Info tab in Active Directory Users and Computers is like, my favorite thing evar. And just because of the Password Expiration date. All the other info it shows is just a bonus. SID is helpful for when profiles poo the bed.

Here's how to get it. This should be done on the computer you are using to to run ADUC, not the server.... unless you're using the server to view ADUC.

For x86 systems

1. Download the Account Lockout Tools from MS. https://www.microsoft.com/en-us/download/details.aspx?id=18465 
2. Copy acctinfo.dll to the %systemroot%\system32 folder 
3. Register the service and dll with this command: regsvr32 acctinfo 

For x64 systems

1. Download the same installer from above. 
2. Extract the files. Move or copy acctinfo.dll to C:\Windows\SysWOW64. 
3. Open a Command Prompt and navigate to C:\Windows\SysWOW64 
4. Run regsvr32 acctinfo.dll. 
5. Open Active Directory Users and Computers in the run dialog box: dsa.msc -32 

To ease access to the 32 bit Management Console, a shortcut can be created for dsa.msc -32

Robocopy

I'm trying to learn Robocopy. It's hilarious fun.

Protip: Don't call your Robocopy bat file Robocopy. You'll get stuck in an endless loop, and even if you terminate the command, the next robocopy script you run will go back to that same loop, and you'll go (even more) stark raving mad.

If you DID name your bat file Robocopy, and find that stupid script is looping over and over and over and over, simply rename the bat file to go on with your life. It took me far longer than it should and a few more Google searches than it should to figure that out.