Inactive AD accounts - Revision history

Busk at 17:39, 9 September 2024

2024-09-09T17:39:11Z

Busk at 01:35, 22 August 2024

2024-08-22T01:35:54Z

Busk at 16:41, 19 August 2024

2024-08-19T16:41:52Z

Busk at 16:29, 19 August 2024

2024-08-19T16:29:21Z

Busk at 15:43, 19 August 2024

2024-08-19T15:43:25Z

Busk at 15:14, 19 August 2024

2024-08-19T15:14:11Z

Busk at 15:13, 19 August 2024

2024-08-19T15:13:45Z

Busk at 16:41, 15 August 2024

2024-08-15T16:41:44Z

Busk at 16:29, 15 August 2024

2024-08-15T16:29:15Z

Busk at 21:30, 12 August 2024

2024-08-12T21:30:57Z

@@ Line 109: / Line 109: @@
 $usersNoPasswordReset | Export-Csv -Path "nonlower.csv" -NoTypeInformation
 # $usersNoPasswordReset | Format-Table -AutoSize
 ```

@@ Line 90: / Line 90: @@
      Write-Output "User $username not found in AD."
+}
 ```

@@ Line 31: / Line 31: @@
 # Delete account and associated resources from AD
 param (
      [Parameter(Mandatory=$true)]

@@ Line 31: / Line 31: @@
 # Delete account and associated resources from AD
-```
+param (
-# Define the username of the account to be removed
+    [Parameter(Mandatory=$true)]
-$username = "username_to_remove"
+    [string]$UserName
-# Get the user account
+Import-Module ActiveDirectory
-if ($user) {
+try {
-     $groups = $user.MemberOf
+     $user = Get-ADUser -Identity $UserName -Properties MemberOf, HomeDirectory
-     foreach ($group in $groups) {
+     if ($user) {
-        Remove-ADGroupMember -Identity $group -Members $user -Confirm:$false
+        $groups = $user.MemberOf
-−
-    # if ($user.HomeDirectory -and (Test-Path $user.HomeDirectory)) {
+        if ($user.HomeDirectory -and (Test-Path $user.HomeDirectory)) {
-    #     Remove-Item -Path $user.HomeDirectory -Recurse -Force
+            Remove-Item -Path $user.HomeDirectory -Recurse -Force
-    #     Write-Output "Home directory $($user.HomeDirectory) has been removed."
+            Write-Output "Home directory $($user.HomeDirectory) has been removed."
-    # }
-    Remove-ADUser -Identity $username -Confirm:$false
+        Remove-ADUser -Identity $UserName -Confirm:$false
-    Write-Output "User $username has been removed from all groups and deleted from AD."
+        Write-Output "User $UserName has been removed from all groups and deleted from AD."
-} else {
+    } else {
-    Write-Output "User $username not found in AD."
+        Write-Output "User $UserName not found in AD."
+}
 ```

@@ Line 13: / Line 13: @@
 ```
 ```
 Import-Module ActiveDirectory
@@ Line 28: / Line 29: @@
+}
 ```
 # Remove user and remove SID from all AD Groups

@@ Line 26: / Line 26: @@
          Write-Error "Failed to disable account: $username. Error: $_"
+     }
+}
 ```

@@ Line 11: / Line 11: @@
      Select-Object Name, SamAccountName, PasswordLastSet, LastLogonDate, Enabled
 $usersNoPasswordReset | Format-Table -AutoSize
 ```

@@ Line 1: / Line 1: @@
 # Get inactive accounts
 ```
 Import-Module ActiveDirectory
+$ouPath = "OU=Some Accounts,DC=example,DC=com"
 $usersNoPasswordReset = Get-ADUser -Filter {
-     PasswordLastSet -gt $PasswordLastSetDateThreshold -and
+     PasswordLastSet -gt "7/11/2023 00:00:00 AM" -and
      SamAccountName -like "somesvc-*" -and
      Enabled -eq $true
 } -SearchBase $ouPath -Properties PasswordLastSet, LastLogonDate, Enabled |
      Select-Object Name, SamAccountName, PasswordLastSet, LastLogonDate, Enabled
 $usersNoPasswordReset | Format-Table -AutoSize
 ```