keebz icon

Disable computer if lastlogondate > 90 days

keebz | PRO | 02/17/15 04:27:58 PM UTC | 0 ⭐ | 621 👁️ | Never ⏰ | []
PowerShell |

650 B

|

None

|

0 👍

/

0 👎

$date = (get-date).AddDays(-104) #AD may not be fully up to date since lastlogondate can be off by 14 days!
$timestamp = Get-Date -Format o | foreach {$_ -replace ":", "."}
$Computers = get-adcomputer -filter { LastLogonDate -lt $date -and OperatingSystem -like "Windows 7*"} -prop LastLogonDate,OperatingSystem -SearchBase $OU | select name,lastlogondate,OperatingSystem,distinguishedname | sort lastlogondate | Export-Csv -Path "C:\scripts\lastlogon_$timestamp.csv"
foreach ($computer in $Computers) {
    select name,lastlogondate,OperatingSystem,distinguishedname | sort lastlogondate | ft
    Disable-ADAccount -Identity $computer.distinguishedname
}

Comments