Deleted versus Disabled:
I recently did a scan and found over 300 computer accounts which had not checked in to the domain for the past year or more.
dsquery computer -inactive 52 -limit 0
I then disabled all of these machines with no issue.
My question is this: Are there environmental issues with removing these stale computer accounts?
For instance, I don't think it's relevant for spinning up an old VM from backup. I can't think of any 'loss' apart from the ability to know which systems names had been used, what OS they were, etc.
The second part of the question is if there should be any special method for removing them? Is just using AD U&C and deleting the accounts sufficient or should I also check DNS, etc. as some of them were (very) old servers. I want to prevent there from being orphaned data which I need to cleanup with ADSI Edit or something like that down the line.
Thanks!