days

Get Inactive Users Report for the past 60 days in a multi domain environment

I had a request recently to provide an inactive user report for the past 60 days. Basically, find out which accounts have not logged in for the past 60 days so action can be taken against them.

The request was for a multi domain forest which queries every domain controller and gets the latest lastlogon value by comparing value from each. I wrote a script and wanted to share as other might find it handy too.

<#
.SYNOPSIS
  Get the last logon report of users that have not logged for the past XX (Default 60) days from multiple domain controllers.
.DESCRIPTION
  Get details of users that have not logged on or are inactive for the past 60 days across the domain and get the latest value from multiple domain controllers
.INPUTS
  None. Script captures Forest and Domain details when run in the environment. 
.OUTPUTS
  Generated output CSV file will be in the created in the same path from where the script was executed.
.NOTES
  Version:        2.0
  Author:         Mohammed Wasay
  Email:          hello@mowasay.com
  Web:            www.mowasay.com
  Creation Date:  02/14/2020
.EXAMPLE
  Get-LastLogonReport.ps1 
#>

#Get Logged on user details
$cuser = $env:USERDOMAIN + "\" + $env:USERNAME
Write-Host -ForegroundColor Gray "Running script as: $cuser authenticated on $env:LOGONSERVER"

#Get the Forest Domain
$forest = (Get-ADForest).RootDomain

#Get all the Domains in the Forest
$domains = (Get-ADForest).Domains

#Time format for report naming
$timer = (Get-Date -Format MM-dd-yyyy)

Write-Host -ForegroundColor Magenta "Your Forest is: $forest"

#Loop through each domain
foreach ($domain in $domains) {
  Write-Host -ForegroundColor Yellow "Working on Domain: $domain"

  #Get all the domain controllers in the domain
  $dcs = Get-ADDomainController -Filter * -Server $domain

  #Storing all the users in an array for comparison later
  $users = @()

  foreach ($dc in $dcs.Hostname) {
    Write-Host -ForegroundColor Cyan "Working on Domain Controller: $dc"
 
    #Days Inactive - Modify the value to the number of days (1,30,45,60,90,120)
    $DaysInactive = "60"
    $time = (Get-Date).Adddays( - ($DaysInactive))

    #Get all AD Users with lastLogonTimestamp less than our time
    $users += Get-ADUser -Filter { lastlogondate -le $time } -Properties * -Server $dc | `
      Select-Object Enabled, `
    @{Name = "Domain"; Expression = { $domain } }, `
      samAccountName, `
      displayName, `
      lastlogondate, `
      lastlogon, `
    @{Name = 'DC'; Expression = { $dc } }, `
      whenCreated, `
      description, `
      distinguishedName, `
      department, `
      company, `
      office 
  }
  Write-Host -ForegroundColor Yellow "Sorting for most recent lastlogons"
   
  #Get the last logon from each server for every filtered user and used the last entry available
  $LatestLogOn = @()
  $users | Group-Object -Property samAccountName | ForEach-Object { 
          
    $LatestLogOn += ($_.Group | Sort-Object -Property lastlogon -Descending)[0] 
              
    $users.Clear() 
  }
  
  #Export the results to a single file per forest/multidomain
  $LatestLogOn | Select-Object Enabled, `
    Domain, `
    samAccountName, `
    displayName, `
  @{Name = 'lastlogondatetime'; Expression = { [datetime]::FromFileTime($_.lastlogon) -replace '12/31/1600 7:00:00 PM', 'Never' -replace '1/1/1601 12:00:00 AM', 'Never' } }, `
    lastlogon, `
    DC, `
    whenCreated, `
    description, `
    distinguishedName, `
    department, `
    company, `
    office `
  | Sort-Object lastlogondatetime -Descending | Export-Csv ./$forest-InactiveUserReport-$timer.csv -NoTypeInformation -Append

  #Uncomment below if exported results need to be multiple files seperated per domain
  #Export the results to a seperate file per domain
  <#
  $LatestLogOn | Select-Object Enabled, `
    Domain, `
    samAccountName, `
    displayName, `
  @{Name = 'lastlogondatetime'; Expression = { [datetime]::FromFileTime($_.lastlogon) -replace '12/31/1600 7:00:00 PM', 'Never' -replace '1/1/1601 12:00:00 AM', 'Never' } }, `
    lastlogon, `
    DC, `
    whenCreated, `
    description, `
    distinguishedName, `
    department, `
    company, `
    office `
  | Sort-Object lastlogondatetime -Descending | Export-Csv ./$domain-InactiveUserReport-$timer.csv -NoTypeInformation -Append
  #>
    
  Write-Host -ForegroundColor Green "Report for $domain generated!"
}
Write-Host -ForegroundColor Green "------======= Done! =======------"

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

.SYNOPSIS

Get the last logon report of users that have not logged for the past XX (Default 60) days from multiple domain controllers.

.DESCRIPTION

Get details of users that have not logged on or are inactive for the past 60 days across the domain and get the latest value from multiple domain controllers

.INPUTS

None. Script captures Forest and Domain details when run in the environment.

.OUTPUTS

Generated output CSV file will be in the created in the same path from where the script was executed.

.NOTES

Version: 2.0

Author: Mohammed Wasay

Email: [email protected]

Web: www.mowasay.com

Creation Date: 02/14/2020

.EXAMPLE

Get-LastLogonReport.ps1

#Get Logged on user details

$cuser = $env:USERDOMAIN + "\" + $env:USERNAME

Write-Host -ForegroundColor Gray "Running script as: $cuser authenticated on $env:LOGONSERVER"

#Get the Forest Domain

$forest = (Get-ADForest).RootDomain

#Get all the Domains in the Forest

$domains = (Get-ADForest).Domains

#Time format for report naming

$timer = (Get-Date -Format MM-dd-yyyy)

Write-Host -ForegroundColor Magenta "Your Forest is: $forest"

#Loop through each domain

foreach ($domain in $domains) {

Write-Host -ForegroundColor Yellow "Working on Domain: $domain"

#Get all the domain controllers in the domain

$dcs = Get-ADDomainController -Filter * -Server $domain

#Storing all the users in an array for comparison later

$users = @()

foreach ($dc in $dcs.Hostname) {

Write-Host -ForegroundColor Cyan "Working on Domain Controller: $dc"

#Days Inactive - Modify the value to the number of days (1,30,45,60,90,120)

$DaysInactive = "60"

$time = (Get-Date).Adddays( - ($DaysInactive))

#Get all AD Users with lastLogonTimestamp less than our time

$users += Get-ADUser -Filter { lastlogondate -le $time } -Properties * -Server $dc | `

Select-Object Enabled, `

@{Name = "Domain"; Expression = { $domain } }, `

samAccountName, `

displayName, `

lastlogondate, `

lastlogon, `

@{Name = 'DC'; Expression = { $dc } }, `

whenCreated, `

description, `

distinguishedName, `

department, `

company, `

office

}

Write-Host -ForegroundColor Yellow "Sorting for most recent lastlogons"

#Get the last logon from each server for every filtered user and used the last entry available

$LatestLogOn = @()

$users | Group-Object -Property samAccountName | ForEach-Object {

$LatestLogOn += ($_.Group | Sort-Object -Property lastlogon -Descending)[0]

$users.Clear()

}

#Export the results to a single file per forest/multidomain

$LatestLogOn | Select-Object Enabled, `

Domain, `

samAccountName, `

displayName, `

@{Name = 'lastlogondatetime'; Expression = { [datetime]::FromFileTime($_.lastlogon) -replace '12/31/1600 7:00:00 PM', 'Never' -replace '1/1/1601 12:00:00 AM', 'Never' } }, `

lastlogon, `

DC, `

whenCreated, `

description, `

distinguishedName, `

department, `

company, `

office `

| Sort-Object lastlogondatetime -Descending | Export-Csv ./$forest-InactiveUserReport-$timer.csv -NoTypeInformation -Append

#Uncomment below if exported results need to be multiple files seperated per domain

#Export the results to a seperate file per domain

$LatestLogOn | Select-Object Enabled, `

Domain, `

samAccountName, `

displayName, `

@{Name = 'lastlogondatetime'; Expression = { [datetime]::FromFileTime($_.lastlogon) -replace '12/31/1600 7:00:00 PM', 'Never' -replace '1/1/1601 12:00:00 AM', 'Never' } }, `

lastlogon, `

DC, `

whenCreated, `

description, `

distinguishedName, `

department, `

company, `

office `

| Sort-Object lastlogondatetime -Descending | Export-Csv ./$domain-InactiveUserReport-$timer.csv -NoTypeInformation -Append

Write-Host -ForegroundColor Green "Report for $domain generated!"

}

Write-Host -ForegroundColor Green "------======= Done! =======------"

No remote Desktop License Server available on RD Session Host server 2012 R2

Posted on April 12, 2017 by mo wasay Windows

A fully functional and activated 2012 R2 Remote Desktop Session Host server displayed the following message:

This was a simple setup on one server with the: connection broker, Session Host and Licensing server with 2012 R2 CAL’s installed.

Even though the licensing seems to be configured correctly, in server manager:

and PowerShell:

Licensing diagnostics:

everywhere you look, everything seems to be OK. But the license manager shows something odd:

No licenses are being used? This server was used since late 2012. Some interesting things could also be found in the event logs, the following events appear:

EventID: 1130
Source: TerminalServices-RemoteConnectionManager

The Remote Desktop Session Host server does not have a Remote Desktop license server specified. To specify a license server for the Remote Desktop Session Host server, use the Remote Desktop Session Host Configuration tool.

and:

EventID: 1128
Source: TerminalServices-RemoteConnectionManager

The RD Licensing grace period has expired and the service has not registered with a license server with installed licenses. A RD Licensing server is required for continuous operation. A Remote Desktop Session Host server can operate without a license server for 120 days after initial start up.

The solution was to delete the REG_BINARY in

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\RCM\GracePeriod

Only leaving the default.

Note: you must take ownership and give admin users full control to be able to delete this key.

After a reboot the server should be working again, licenses are now being used:

Although everything seemed to be OK and configured correctly with valid licenses, it seems that the setup was still in a 180 day grace period, even though it was correctly configured.

Delete Files and Folders Older Than X Days

Posted on January 4, 2017 by mo wasay Windows

Often times admin have to creates tasks like removing log files or some other files on a regular schedule. Here is an automated way of removing files / folders older than X days.

Create a Batch file or Powershell script and add it to scheduled task.

Batch File:

@echo off
:: set folder path
set dump_path=c:\shares\dump

:: set min age of files and folders to delete
set max_days=7

:: remove files from %dump_path%
forfiles -p %dump_path% -m *.* -d -%max_days% -c "cmd  /c del /q @path"

:: remove sub directories from %dump_path%
forfiles -p %dump_path% -d -%max_days% -c "cmd /c IF @isdir == TRUE rd /S /Q @path"

@echo off

:: set folder path

set dump_path=c:\shares\dump

:: set min age of files and folders to delete

set max_days=7

:: remove files from %dump_path%

forfiles -p %dump_path% -m *.* -d -%max_days% -c "cmd /c del /q @path"

:: remove sub directories from %dump_path%

forfiles -p %dump_path% -d -%max_days% -c "cmd /c IF @isdir == TRUE rd /S /Q @path"

Powershell:

# set folder path
$dump_path = "C:\shares\dump"

# set min age of files
$max_days = "-7"
 
# get the current date
$curr_date = Get-Date

# determine how far back we go based on current date
$del_date = $curr_date.AddDays($max_days)

# delete the files
Get-ChildItem $dump_path -Recurse | Where-Object { $_.LastWriteTime -lt $del_date } | Remove-Item

# set folder path

$dump_path = "C:\shares\dump"

# set min age of files

$max_days = "-7"

# get the current date

$curr_date = Get-Date

# determine how far back we go based on current date

$del_date = $curr_date.AddDays($max_days)

# delete the files

Get-ChildItem $dump_path -Recurse | Where-Object { $_.LastWriteTime -lt $del_date } | Remove-Item

Extending the Booking days for Conference Room Calendar (Resource)

Posted on October 13, 2016 by mo wasay Office 365

By default Office365 limits Resource booking days to just 180 days. The maximum days it can be booked for 1080 days.

I like to make resource booking days 1 year from the day of making the reservation/ appointment. Now instead of visiting each calendar and making the change, powershell can help us out.

#Connect to Office365 
$cred = Get-Credential
Import-Module MSOnline
Connect-MsolService -Credential $cred
$s = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/powershell -Credential $cred -Authentication Basic -AllowRedirection
$importresults = Import-PSSession $s

#Get all the Rooms and make the booking days to 365
Get-MailBox | Where {$_.ResourceType -eq "Room"} | Set-CalendarProcessing -BookingWindowInDays 365

#Connect to Office365

$cred = Get-Credential

Import-Module MSOnline

Connect-MsolService -Credential $cred

$s = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/powershell -Credential $cred -Authentication Basic -AllowRedirection

$importresults = Import-PSSession $s

#Get all the Rooms and make the booking days to 365

Get-MailBox | Where {$_.ResourceType -eq "Room"} | Set-CalendarProcessing -BookingWindowInDays 365

Happy Booking!

days

Get Inactive Users Report for the past 60 days in a multi domain environment

No remote Desktop License Server available on RD Session Host server 2012 R2

Delete Files and Folders Older Than X Days

Batch File:

Powershell:

Extending the Booking days for Conference Room Calendar (Resource)

Categories

Archives

Meta

days

Batch File:

Powershell:

Categories

Archives

Tags

Meta