1. 獲取AD用戶相關信息(用戶名、創建日期、最后修改密碼日期、最后登錄日期)
Get AD users, Name/Created Date/Last change passwd Date/Last logon Date
Get-ADuser -filter * -Properties * | Select-Object Name,SID, Created,PasswordLastSet,@{n="lastLogonDate";e={[datetime]::FromFileTime($_.lastLogonTimestamp)}} | Export-CSV Accountlist.csv -NoTypeInformation -Encoding UTF8
2. 獲取AD中計算機相關信息(計算機名、系統、最后登錄日期、系統版本)
Get AD Computers,Name/OS/LastlogonDate/OS Version
Get-ADComputer -Filter * -Property * | Select-Object Name,OperatingSystem,LastLogonDate,OperatingSystemServicePack,OperatingSystemVersion | Export-CSV AllWindows.csv -NoTypeInformation -Encoding UTF8
3. 遷移域中90天沒有登錄的計算機到新的OU
Move Computers which not logon for 90 days to a new OU
dsquery computer -stalepwd 90 -limit 0 | Move-Adobject -TargetPath "OU=OldComputors,DC=netbrain,DC=com"
參考: