Disable computer if lastlogondate > 90 days

keebz

Feb 17th, 2015

293

Never

Add comment

Not a member of Pastebin yet? Sign Up, it unlocks many cool features!

PowerShell 0.65 KB | None | 0 0

raw download clone embed print report

$date = (get-date).AddDays(-104) #AD may not be fully up to date since lastlogondate can be off by 14 days!
$timestamp = Get-Date -Format o | foreach {$_ -replace ":", "."}
$Computers = get-adcomputer -filter { LastLogonDate -lt $date -and OperatingSystem -like "Windows 7*"} -prop LastLogonDate,OperatingSystem -SearchBase $OU | select name,lastlogondate,OperatingSystem,distinguishedname | sort lastlogondate | Export-Csv -Path "C:\scripts\lastlogon_$timestamp.csv"
foreach ($computer in $Computers) {
select name,lastlogondate,OperatingSystem,distinguishedname | sort lastlogondate | ft
Disable-ADAccount -Identity $computer.distinguishedname
}

Add Comment

Please, Sign In to add comment