re: Hey, Scripting Guy! How Can I Find Old Computer Accounts?

ScriptingGuy1 — Tue, 29 Sep 2009 21:05:19 GMT

Thanks for the comment, I have updated the code.

Did you test this code?

cking2 — Fri, 31 Jul 2009 19:23:52 GMT

Really? Were you underwater when you wrote this or is it a test?

incorrect syntax, missing Writes, datemath issues...?

I am trying to learn Powershell and you actually did me a favor while I tried to figure out if I am stupid or the snippet was full of holes.

$maxOldLogonDays = 60

$query = New-Object system.directoryservices.directorysearcher

$root = [adsi]"LDAP://-your path-,DC=COM"

$query.SearchRoot = $root

$query.filter = "(objectCategory=computer)"

$query.SearchScope = "subtree"

$result = $query.findAll() |

ForEach-Object -process `

{

if ($_.properties.item("lastlogon") -gt 0)

#I get alot of lastlogons that are not null but not empty either

#-gt 0 seems to work best as test for valid datestamp

{

$rawLogon = $_.properties.item("lastlogon")

$convertedLogOn = [datetime]::FromFileTime([int64]::Parse($rawLogon))

Write-Host $convertedLogOn

$passwordage = ((get-date) - $convertedLogOn)

Write-Host $passwordage.Days

If($passwordage.Days -gt $maxOldLogonDays)

{

Write-Host "$($_.properties.item('distinguishedName'))

has not logged on for more than $maxOldLogonDays days"

}