Skip to main content

Cleanup Job Group

The Active Directory > Cleanup Job Group identifies potential stale and unused users, computers, and groups as well as issues with group membership. Remediation workflows are included to deprovision unnecessary objects.

warning

Apply changes only to intended target Active Directory objects, and ensure only the changes required are enabled. Enabling and executing action modules without consideration can negatively impact Active Directory.

info

Run the actions in a test environment before making changes to a production environment.

Cleanup Job Group Overview page

The job groups in the Cleanup Job Group are:

  • 1.Groups Job Group – Provides an automated workflow to safely deprovision groups, as well as the ability to stamp security groups with what resources they are given access to
  • 2.Users Job Group – Provides an automated workflow to deprovision stale and unused user accounts
  • 3.Computers Job Group – Provides an automated workflow to deprovision stale computer accounts
  • AD_CleanupProgress Job – Tracks Active Directory computer, group, and user exceptions over time. This information can be used to provide a high-level picture of an organization's Active Directory cleanup effort.