AD Tidy – search your Active Directory domain for user/computer accounts that are no longer in use by filtering based on last logon time, DNS record timestamp, and much more. You can then perform a number of actions on the accounts that were found – such as moving them to another OU, disabling them, setting a random password, removing them from all groups, and much more