Hello Guys,
Just wanted to know is it possible to disabled the user account older then 90 days but skip those users who's passwordnever expired is set.
DONT_EXPIRE_PASSWORD | 0x10000 | 65536 |
I am using below script
Get-ADUser -Filter * -SearchBase "OU=Users,DC=Testlab,DC=com" -Properties whenCreated,whenChanged | Where-Object {$_.whenCreated -le ((Get-Date).AddDays(-90)).Date} | Where-Object {$_.whenChanged -le ((Get-Date).AddDays(-90)).Date} | Disable-ADAccount