active-directoryscriptingwindows
DSQUERY user -inactive 4 | DSMOVE -newparent <distinguished name of target OU>
Running this script and getting "dsmove failed (user) is an unknown parameter".
If I run the dsquery w/o the dsmove, it cleanly pulls a list for me. If I run with just one account, it works as well.
Thoughts?
Well, if you run dsquery user /? it tells you this
-inactive Finds users that have been inactive (not logged on) for at least number of weeks.
For computers, it just says 'stale', so we can assume it's the same thing - amount of time since the domain has seen that computer account get authenticated.
For your hypothetical, I'm sure a powered-on and well-connected computer would not show up as stale. There's things like GPO refresh and Kerberos timeouts that cause activity in the background, I'm sure those would refresh whatever 'stale' counter exists.
Best Answer
Got this working, here's what I did:
batch file that reads the below with a correlating windows sch task that runs the bat. Works like a champ.
Remember in 2008 to check the "run with highest privileges" and to change the run to "run whether user is logged on or not".