Finding unused user accounts in active directory

Periodically it is a good idea to audit/review your user accounts in Active Directory to find unused accounts. This helps find terminated employees you might not know about, or role accounts which aren’t being used anymore. Sometimes you’ll discover temporary accounts which were setup for testing and have been abandoned.

It is very easy to query active directory for this, simply open a command line on your domain controller and enter:
dsquery user -inactive

You’re all set.