$date = (get-date).AddDays(-104) #AD may not be fully up to date since lastlogondate can be off by 14 days!
$timestamp = Get-Date -Format o | foreach {$_ -replace ":", "."}
$Computers = get-adcomputer -filter { LastLogonDate -lt $date -and OperatingSystem -like "Windows 7*"} -prop LastLogonDate,OperatingSystem -SearchBase $OU | select name,lastlogondate,OperatingSystem,distinguishedname | sort lastlogondate | Export-Csv -Path "C:\scripts\lastlogon_$timestamp.csv"
foreach ($computer in $Computers) {
select name,lastlogondate,OperatingSystem,distinguishedname | sort lastlogondate | ft
Disable-ADAccount -Identity $computer.distinguishedname
}
Comments