Get-InactiveDesktops.ps1

# Gets time stamps for all computers in the domain that have NOT logged in since after specified date
# Created by Mike Kanakos 2016-20-04


# Create variables
# import-module activedirectory 
# $DaysInactive = 90 
# $time = (Get-Date).Adddays(-($DaysInactive))
 
# Get AD computers that are not disabled AND haven't logged into domain in 90+ days AND have the word "server" in OperingSystem name
# Get-ADComputer -Filter {(enabled -eq "true") -and (LastLogonTimeStamp -lt $time) -and (OperatingSystem -notlike "*Server*")} -Properties LastLogonTimeStamp, Description, OperatingSystem, CanonicalName |
 
# Output hostname and lastLogonTimestamp into CSV
# select-object Name, Description, OperatingSystem, @{Name="Stamp"; Expression={[DateTime]::FromFileTime($_.lastLogonTimestamp)}}, CanonicalName | Sort-Object Name


$lastSetdate = [DateTime]::Now - [TimeSpan]::Parse("90")
$a = Get-ADComputer -Filter {(PasswordLastSet -le $lastSetdate)  -and (enabled -eq "true") -and (OperatingSystem -notlike "*Server*")} -Properties PasswordLastSet, Description, OperatingSystem -ResultSetSize $null | FT Name, Description, OperatingSystem, PasswordLastSet