Forum Discussion

Brass Contributor

Oct 26, 2021

Solved

Disable \ Remove old computer accounts

Hi, I have a script for disabling & removing old computer accounts. Import-Module ActiveDirectory # Set the Parameters since last logon $ForDisable = "C:\Logs\Computers Accounts\Disable-$((Ge...

Windows Server

AharonBensadoun

Nov 02, 2021

dannytveria

Ok , test it and let me know if this help:

$Computers_For_Action = Search-ADAccount -AccountInactive -DateTime $InactiveDate -ComputersOnly -SearchBase "DC=staff ,DC=local" | Where-Object {($_.Enabled -eq $true) -and ($_.distinguishedname -notlike "*,OU=Servers,*")  -and ($_.distinguishedname -notlike "*,OU=Test,*") -and ($_.distinguishedname -notlike "*,OU=IT,*") -and ($_.distinguishedname -notlike "*,OU=Laptops,*") -and ($_.distinguishedname -notlike "*,CN=Computers,*") -and ($_.distinguishedname -notlike "*,CN=Managed Service Accounts,*") }

farismalaeb

Iron Contributor

Oct 27, 2021

Search-ADAccount -AccountInactive -DateTime $InactiveDate -ComputersOnly -SearchBase "DC=staff ,DC=local" | Where-Object {($_.whenChanged -lt (Get-Date).AddDays(-1)) -and ($_.distinguishedname -notlike "*,OU=Servers,*") -and ($_.distinguishedname -notlike "*,OU=Test,*") -and ($_.distinguishedname -notlike "*,OU=IT,*") -and ($_.distinguishedname -notlike "*,OU=Laptops,*") -and ($_.distinguishedname -notlike "*,CN=Computers,*") -and ($_.distinguishedname -notlike "*,CN=Managed Service Accounts,*") }

dannytveria So the following what you need to add

($_.whenChanged -lt (Get-Date).AddDays(-1)

dannytveria

Brass Contributor

Oct 29, 2021

farismalaeb

Hi Faris,
I changed as you said, it didn`t help.

$Computers_For_Action = Search-ADAccount -AccountInactive -DateTime $InactiveDate -ComputersOnly -SearchBase "DC=student ,DC=local" | Where-Object {($_.whenChanged -lt (Get-Date).AddDays(-1)) -and ($_.distinguishedname -notlike "*,OU=Servers,*") -and ($_.distinguishedname -notlike "*,OU=Test,*") -and ($_.distinguishedname -notlike "*,OU=IT,*") -and ($_.distinguishedname -notlike "*,OU=Laptops,*") -and ($_.distinguishedname -notlike "*,CN=Computers,*") -and ($_.distinguishedname -notlike "*,CN=Managed Service Accounts,*") -and ($_.distinguishedname -notlike "*,OU=Classes,*") -and ($_.distinguishedname -notlike "*,OU=Teacher Standing,*") -and ($_.distinguishedname -notlike "*,OU=WVD,*") -and ($_.distinguishedname -notlike "*,OU=Margolin and Chativa Teachers and Workers,*") }

I still get in the report the same computers from the first day I runed the script

dannytveria
Brass Contributor
Nov 01, 2021
Do you have any idea?
- AharonBensadoun
  Copper Contributor
  Nov 01, 2021
  dannytveria
  When you use the command:
  Search-ADAccount -AccountInactive -DateTime $ InactiveDate -ComputersOnly
  This does not mean that the Enabled property is False, it only means that no one has logged in for a long time
  To have only the computers which are still activated add a filter to your command:
  $Computers_For_Action = Search-ADAccount -AccountInactive -DateTime $InactiveDate -ComputersOnly -SearchBase "DC=staff ,DC=local" | Where-Object {($_.Enabled -eq $true) -and ($_.distinguishedname -notlike "*,OU=Servers,*") -and ($_.distinguishedname -notlike "*,OU=Test,*") -and ($_.distinguishedname -notlike "*,OU=IT,*") -and ($_.distinguishedname -notlike "*,OU=Laptops,*") -and ($_.distinguishedname -notlike "*,CN=Computers,*") -and ($_.distinguishedname -notlike "*,CN=Managed Service Accounts,*") }
  - dannytveria
    Brass Contributor
    Nov 01, 2021
    Hi Aharon,
    I didn't understand your all explain.
    My final goal is to get a csv report with only the computer accounts that disabled or deleted on the same day.
    Thanks