Skip to main content

Cleanup Job Group

The Active Directory > Cleanup Job Group identifies potential stale and unused users, computers, and groups as well as issues with group membership. Remediation workflows are included to deprovision unnecessary objects.

warning

Apply changes only to intended target Active Directory objects, and ensure only the changes required are enabled. Enabling and executing action modules without consideration can negatively impact Active Directory.

info

Run the actions in a test environment before making changes to a production environment.

Cleanup Job Group Overview page

The job groups in the Cleanup Job Group are:

  • 1.Groups Job Group – Provides an automated workflow to safely deprovision groups and stamp security groups with the resources they can access
  • 2.Users Job Group – Provides an automated workflow to deprovision stale and unused user accounts
  • 3.Computers Job Group – Provides an automated workflow to deprovision stale computer accounts
  • AD_CleanupProgress Job – Tracks Active Directory computer, group, and user exceptions over time. Use this information to provide a high-level picture of an organization's Active Directory cleanup effort.