Active Directory Enabled/Disabled Users Audit

Find Disabled Active Directory Users

Active Directory is used in almost all organizations to organize and manage both devices and users. Lansweeper can scan users directly from active directory along with a wide range of active directory attributes like the status of AD users.

Along with basic information about the user like their name and domain, this audit also lists the user AD status and whether it is enabled or disabled. So you can find disabled Active Directory Users much easier. This lets you easily find disabled users without the need of Powershell scripts or CMD commands and shows it all in one overview. From the report, you can also navigate straight to the user’s page to get all the detailed about the user including the devices that have been logged into.

Select Top 1000000 Case
    When tblADusers.Displayname Is Null Or
      tblADusers.Displayname = '' Then tblADusers.Userdomain + '\' +
      tblADusers.Username
    Else tblADusers.Displayname
  End As Displayname,
  Case
    When Coalesce(tblADusers.IsEnabled, 0) = 0 Then 'False'
    Else 'True'
  End As EnabledInAD,
  tblADusers.Username,
  tblADusers.Userdomain,
  tblADusers.Name,
  'usersm.png' As Icon,
  tblADusers.Lastchanged
From tblADusers
Order By tblADusers.IsEnabled Desc,
  Displayname