SeaborneClink fucked around with this message at 05:45 on Sep 15, 2017

=========
#
#This script will check which Active Directory accounts have been disabled for more than 90 days 
#and will delete the homedirectory, e-mail and the Account itself."

add-pssnapin Microsoft.Exchange.Management.PowerShell.E2010
 
Add-PSSnapin Quest.ActiveRoles.ADManagement 
 
$Today = get-date
$OU = "company.com/Accounts/Disabled Accounts" #company DC OU Location
$Path = "E:\Scripts\Log\InactiveUserAccounts.csv"
 
$users = Get-QADUser  -InactiveFor 90 -Disabled -SizeLimit 0 -searchroot $OU |  
where {$_.WhenChanged.Adddays(90) -lt $Today } 
 
ForEach ($user in $users) 
{
 
Write-host -ForegroundColor green "the following user's homedirectory will be deleted" 
write-host -foregroundcolor red $user.homedirectory
          
            remove-item $user.Homedirectory -Recurse -Force 
Write-Host -foregroundcolor green "The user's homedirectory has been deleted"
 
Write-Host -foregroundcolor green "the following active directory account wil be deleted"
Write-Host -foregroundcolor red $user.SamAccountName
 
            Remove-QADObject -identity $user.SamAccountName -force -DeleteTree
Write-Host -foregroundcolor green "The user's  Active Directory Account has been deleted" 
 
      
             
           
 }
 
Get-QADUser -searchroot $OU | Set-QADUser -ObjectAttributes @{extensionAttribute1=$null} 
 $users | Select-Object DisplayName, email, homedirectory | Export-csv -path $Path -Delimiter ";" -NoTypeInformation
 
Write-Host -foregroundcolor yellow  " A list of the deleted accounts, homedirectory and e-mail will be sent via e-mail"
 
 
$SmtpServer = "mail.company.com" # smtp adress of company email
$From = " Company Domain Controller <noreply-dc.company.coml>" #no reply adress of company dc
$To = ""; #shared email box of company for the it department 
$Subject = "Lijst van verwijderde AD gebruikers "
$Body ="Bijgesloten de lijst met verwijderde Active Directory User Accounts, Homedirectory's en e-mails."
 
Send-mailmessage -from $From -to $To -subject $Subject -body $Body -Attachments $path -smtpServer $SmtpServer
Write-host -ForegroundColor Yellow "All accounts in Disabled Accounts OU will be hidden from the address list"
Get-Mailbox -OrganizationalUnit "Disabled Accounts" | Set-Mailbox -HiddenFromAddressListsEnabled $TRUE 

 
# Dit script wordt gebruikt om automatisch accounts die expired zijn te disablen en in de disabled ou te plaatsen. 
 
Add-PSSnapin Quest.ActiveRoles.ADManagement 
 
$OU = "company.com/Accounts/"
$OU2= "company.com/Accounts/childou1"
$OU3= "company.com/Accounts/childou2/grandchild1"
$path = "e:\scripts\log\test.csv"
$doelou = "company.com/accounts/disabled accounts"
 
# met de volgende commando creeer je een lijst met accounts die zijn expired. 
 
$users = get-qaduser -SearchRoot $ou, $ou2, $ou3 -SizeLimit 0 -IncludedProperties 'accountExpires' | where-object -filterScript {($_.accountExpires -gt [System.DateTime]"1/1/1970") -and ($_.accountExpires -lt (get-date).adddays(-30))} 
 
$Dusers =  get-qaduser -SearchRoot $OU, $OU2, $OU3 -disabled
 
# met "for each" wordt elke account die aan de  criteria van $users voldoet, disabled en verplaats naar de OU "disabled accounts
 foreach ($user in $users)
{
Write-host -ForegroundColor green "the following user will be disabled" 
write-host -foregroundcolor red $user.name
       
       $User.MemberOf | Remove-QADGroupMember -Member $User -Confirm:$false 
       
       Disable-qaduser $user 
 
       Write-host -ForegroundColor green "the following user will be moved to the disabled ou" 
       write-host -foregroundcolor red $user.name
       Move-QADObject $user -newparentcontainer $doelou 
 
 
 
  }
 
 
 
  #Hier verplaatsen we alle disabled users in de OU die in de eerste regels zijn gespecificeerd naar de disabled ou.
  foreach ($user in $dusers)
    {
 
    $User.MemberOf | Remove-QADGroupMember -Member $User -Confirm:$false 
    Write-host -ForegroundColor green "the following user who was disabled will be moved to the disabled ou" 
       write-host -foregroundcolor red $user.name
       Move-QADObject $user -newparentcontainer $doelou 
 
 
 
 
         }
 
$users | Select-object  displayname, accountexpires, samaccountname, lastlogon    | Export-Csv -Path $path -Delimiter ";" -NoTypeInformation

$SmtpServer = "mail.company.com" # smtp adress of company email
$From = " Company Domain Controller <noreply-dc.company.coml>" #no reply adress of company dc
$To = ""; #shared email box of company for the it department 
$Subject = "Lijst van disabled gebruikers "
$Body ="Bijgesloten de lijst met disabled Active Directory User Accounts"
Send-mailmessage -from $From -to $To -subject $Subject -body $Body -Attachments $path -smtpServer $SmtpServer

Sefal fucked around with this message at 12:05 on Sep 15, 2017

SlowBloke fucked around with this message at 12:24 on Sep 15, 2017

Japanese Dating Sim fucked around with this message at 18:44 on Sep 15, 2017

Methanar fucked around with this message at 20:53 on Sep 15, 2017