...deleting anyone who at least has posted here, for if you delete the user, then you must also delete their posts. And that, I believe, would be heresy 'round these parts. And rightly so on that point, IMHO.
As far as deleting users who've never actually logged in beyond their first day or so, I don't know that I have a problem with that (subject to the restriction on those-with-posts...)