SharedScripts/Get-Inactive_AD_Objects.ps1 at shared · alfwro13/SharedScripts · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
<#
.SYNOPSIS
    Lists inactive Active Directory user or computer accounts based on last logon date.

.DESCRIPTION
    This script queries Active Directory for user or computer accounts that have not logged on
    in a specified number of days, including accounts with no LastLogonDate. You can choose
    between user or computer accounts and output the results to the console, a graphical
    Out-GridView window, or export them to a CSV file.

.PARAMETER DaysInactive
    Number of days since the last logon. Defaults to 180.

.PARAMETER AccountType
    Type of accounts to check. Accepts 'User' or 'Computer'. Defaults to 'User'.

.PARAMETER GridView
    Optional switch to output results in an Out-GridView window. If not specified, output is sent to the console.

.PARAMETER ExportCSV
    Optional switch to export the results to a CSV file. Requires a valid file path.

.EXAMPLE
    .\Get-Inactive_AD_Objects.ps1 -DaysInactive 90 -ExportCSV "C:\Reports\InactiveUsers.csv"
    Shows user accounts inactive for 90 days or more (or never logged on) and exports them to a CSV file.

.EXAMPLE
    .\Get-Inactive_AD_Objects.ps1
    Shows user accounts inactive for 180 days or more in the console.

.EXAMPLE
    .\Get-Inactive_AD_Objects.ps1 -DaysInactive 90
    Shows user accounts inactive for 90 days or more in the console.

.EXAMPLE
    .\Get-Inactive_AD_Objects.ps1 -AccountType Computer -DaysInactive 120 -GridView
    Shows computer accounts inactive for 120 days or more in an Out-GridView window.

.EXAMPLE
    Get-Help .\Get-Inactive_AD_Objects.ps1 -Full
    Displays full help for the script.

.NOTES
    Author: Andre Wroblewski
    Created: 2025-08-04
    Requires: ActiveDirectory module (RSAT)
    Updated: 04-Nov-2025 (Added check for null LastLogonDate and -ExportCSV option)
#>


param (
    [int]$DaysInactive = 180,
    [ValidateSet("User", "Computer")]
    [string]$AccountType = "User",
    [switch]$GridView,
    [string]$ExportCSV
)

Import-Module ActiveDirectory

# Calculate the date threshold
$then = (Get-Date).AddDays(-$DaysInactive)

# Get accounts based on type
if ($AccountType -eq "User") {
    $accounts = Get-ADUser -Property SamAccountName, LastLogonDate, DisplayName, Description, ModifyTimeStamp, Enabled, CanonicalName -Filter {(LastLogonDate -lt $then) -or (LastLogonDate -notlike "*")} |
        Select-Object SamAccountName, LastLogonDate, Description, ModifyTimeStamp, Enabled, DisplayName, CanonicalName
}
elseif ($AccountType -eq "Computer") {
    $accounts = Get-ADComputer -Property Name, LastLogonDate, OperatingSystem, Description, Modified, Enabled, CanonicalName -Filter {(LastLogonDate -lt $then) -or (LastLogonDate -notlike "*")} |
        Select-Object Name, LastLogonDate, OperatingSystem, Description, Modified, Enabled, CanonicalName
}

# Output results
# 1. Export to CSV if specified
if ($ExportCSV) {
    Write-Host "Exporting $($accounts.Count) inactive $AccountType accounts to '$ExportCSV'..." -ForegroundColor Yellow
    $accounts | Export-Csv -Path $ExportCSV -NoTypeInformation

    if (-not $GridView) {
        return
    }
}
# 2. Output to Out-GridView
if ($GridView) {
    $accounts | Out-GridView -Title "$AccountType Accounts Inactive for $DaysInactive+ Days"
}
# 3. Output to Console (default)
else {
    $accounts | Format-Table -AutoSize
}