\u0413\u0434\u0435-\u0442\u043e \u043d\u0430\u0448\u0435\u043b \u0441\u043a\u0440\u0438\u043f\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u0432 – \u043f\u0435\u0440\u0435\u0434\u0435\u043b\u0430\u043b \u043f\u043e\u0434 \u0441\u0435\u0431\u044f + \u0434\u043e\u0431\u0430\u0432\u0438\u043b \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u043f\u043e \u043f\u043e\u0447\u0442\u0435 (\u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u0432 \u0437\u0430\u0434\u0438\u0441\u044d\u0439\u0431\u043b\u0435\u043d\u043e).<\/p>\n
# Read the input parameters $Subtree and $NbDays<\/p>\n
param([string] $Subtree, [string] $NbDays)<\/p>\n
# Get the current date<\/p>\n
$currentDate = [System.DateTime]::Now<\/p>\n
# Convert the local time to UTC format because all dates are expressed in UTC (GMT) format in Active Directory<\/p>\n
$currentDateUtc = $currentDate.ToUniversalTime()<\/p>\n
# Set the LDAP URL to the container DN specified on the command line<\/p>\n
#$LdapURL = “LDAP:\/\/” + $Subtree
\n$LdapURL = “LDAP:\/\/192.168.100.2:389\/dc=my,dc=domain,dc=com”
\n$NbDays = 90
\n# Initialize a DirectorySearcher object<\/p>\n$searcher = New-Object System.DirectoryServices.DirectorySearcher([ADSI]$LdapURL)<\/p>\n
# Set the attributes that you want to be returned from AD<\/p>\n
$searcher.PropertiesToLoad.Add(“displayName”) >$null<\/p>\n
$searcher.PropertiesToLoad.Add(“sAMAccountName”) >$null<\/p>\n
$searcher.PropertiesToLoad.Add(“lastLogonTimeStamp”) >$null<\/p>\n
# Calculate the time stamp in Large Integer\/Interval format using the $NbDays specified on the command line<\/p>\n
$lastLogonTimeStampLimit = $currentDateUtc.AddDays(- $NbDays)<\/p>\n
$lastLogonIntervalLimit = $lastLogonTimeStampLimit.ToFileTime()<\/p>\n
#Write-Host “Looking for all users that have not logged on since “$lastLogonTimeStampLimit” (“$lastLogonIntervalLimit”)”
\n$body = “Looking for all users that have not logged on since $lastLogonTimeStampLimit”<\/p>\n$searcher.Filter = “(&(objectCategory=person)(objectClass=user)(!(userAccountControl:1.2.840.113556.1.4.803:=2))(lastLogonTimeStamp<=” + $lastLogonIntervalLimit + “))”<\/p>\n
# Run the LDAP Search request against AD<\/p>\n
$users = $searcher.FindAll()<\/p>\n
if ($users.Count -eq 0)<\/p>\n
{<\/p>\n
Write-Host ”\u00a0 No account needs to be disabled.\u201d<\/p>\n
}<\/p>\n
else<\/p>\n
{<\/p>\n
foreach ($user in $users)<\/p>\n
{<\/p>\n
# Read the user properties<\/p>\n
[string]$adsPath = $user.Properties.adspath<\/p>\n
[string]$displayName = $user.Properties.displayname<\/p>\n
[string]$samAccountName = $user.Properties.samaccountname<\/p>\n
[string]$lastLogonInterval = $user.Properties.lastlogontimestamp<\/p>\n
# Disable the user<\/p>\n
#$account=[ADSI]$adsPath<\/p>\n
#$account.psbase.invokeset(“AccountDisabled”, “True”)<\/p>\n
#$account.setinfo()<\/p>\n
# Convert the date and time to the local time zone<\/p>\n
$lastLogon = [System.DateTime]::FromFileTime($lastLogonInterval)<\/p>\n
#\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Write-Host ”\u00a0 Disabled user “$displayName” (“$samAccountName”) who last logged on “$lastLogon” (“$lastLogonInterval”)”
\n#\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Write-Host ”\u00a0 —> “$displayName” (“$samAccountName”) who last logged on “$lastLogon””
\n$body = $body + ” $displayName ($samAccountName) who last logged on $lastLogon ” | out-string<\/p>\n}<\/p>\n
}<\/p>\n
### Send mail
\n$FromAddress = “admin@domain.com”
\n$ToAddress = “ya@domain.com”
\n$MessageSubject = “Inactive Accounts Report”
\n$SendingServer = “MailServer”<\/p>\n$SMTPMessage = New-Object System.Net.Mail.MailMessage $FromAddress,$ToAddress,$MessageSubject,$body
\n$SMTPClient = New-Object System.Net.Mail.SMTPClient $SendingServer
\n$SMTPClient.Send($SMTPMessage)<\/p><\/blockquote>\n\u0427\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0438\u0437 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0430 \u0441\u043a\u0440\u0438\u043f\u0442, \u043d\u0443\u0436\u043d\u043e \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u0438\u043c\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b:<\/p>\n
C:WindowsSystem32WindowsPowerShellv1.0powershell.exe<\/p><\/blockquote>\n
\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438:<\/p>\n
-command “& ‘C:Backuplast_logon.ps1’ “<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"
\u0413\u0434\u0435-\u0442\u043e \u043d\u0430\u0448\u0435\u043b \u0441\u043a\u0440\u0438\u043f\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u0432 – \u043f\u0435\u0440\u0435\u0434\u0435\u043b\u0430\u043b \u043f\u043e\u0434 \u0441\u0435\u0431\u044f + \u0434\u043e\u0431\u0430\u0432\u0438\u043b \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u043f\u043e \u043f\u043e\u0447\u0442\u0435 (\u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u0432 \u0437\u0430\u0434\u0438\u0441\u044d\u0439\u0431\u043b\u0435\u043d\u043e). # Read the input parameters $Subtree and $NbDays param([string] $Subtree, [string] $NbDays) # Get the current date $currentDate = [System.DateTime]::Now # Convert the local time to UTC format because all dates are expressed in UTC […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13,12],"tags":[],"class_list":["post-189","post","type-post","status-publish","format-standard","hentry","category-novosti","category-windows"],"_links":{"self":[{"href":"https:\/\/dety.net.ua\/index.php?rest_route=\/wp\/v2\/posts\/189","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dety.net.ua\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dety.net.ua\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dety.net.ua\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dety.net.ua\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=189"}],"version-history":[{"count":0,"href":"https:\/\/dety.net.ua\/index.php?rest_route=\/wp\/v2\/posts\/189\/revisions"}],"wp:attachment":[{"href":"https:\/\/dety.net.ua\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=189"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dety.net.ua\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=189"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dety.net.ua\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=189"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}