Powershell Script to query a OU with users and update the Last password reset date and Last used date.

cls
# Create a selector and start searching from the Root of AD
$selector = New-Object DirectoryServices.DirectorySearcher
$selector.SearchRoot = "LDAP://cn=users,DC=soap,DC=com"
# Filter the users with -like "CN=Person*". Note the ForEach loop
$adobj= $selector.findall() | where {
$_.properties.objectcategory -like "CN=Person*"
}
foreach ($person in $adobj)
{
$prop=$person.properties
$username=$($prop.cn)
Get-QADComputer -ComputerRole DomainController | foreach {(Get-QADUser -Service $_.Name -SamAccountName $username) | select DisplayName, LastLogon, PasswordLastSet } | sort DisplayName
}

Select allOpen in new window

$Users = @{}
Get-QADComputer -ComputerRole DomainController | ForEach-Object {
  Get-QADUser -SearchRoot "domain.com/Offices" -Enabled -Service $_.Name -SizeLimit 0 | `
    Select-Object DN, LastLogon, PasswordLastSet | ForEach-Object { 
      If ($Users.$($_.DN)) {
        $Users.$($_.DN) = $_ | Select-Object DN, PasswordLastSet, `
          @{n='LastLogon';e={ 
            If ($_.LastLogon -gt $Users.$($_.DN).LastLogon) { 
              $_.LastLogon 
            } Else { 
              $Users.$($_.DN).LastLogon 
            } }}
      } Else {
        $Users.Add($_.DN, $_)
      }
    }
}

$Users.Values | ForEach-Object {
  $PasswordReset = (New-TimeSpan $_.PasswordLastSet).Days
  $LastLogon = (New-TimeSpan $_.LastLogon).Days

  Set-QADUser $_.DN -Description "(Password reset : $PasswordReset days) (Last logged in : $LastLogon days)
}

Select allOpen in new window

$DomainControllers = "dc1", "dc2", "dc3", "dc4"

$Users = @{}
$DomainControllers | ForEach-Object {
  Get-QADUser -SearchRoot "domain.com/Offices" -Enabled -Service $_ -SizeLimit 0 | `
    Select-Object DN, LastLogon, PasswordLastSet | ForEach-Object { 
      If ($Users.$($_.DN)) {
        $Users.$($_.DN) = $_ | Select-Object DN, PasswordLastSet, `
          @{n='LastLogon';e={ 
            If ($_.LastLogon -gt $Users.$($_.DN).LastLogon) { 
              $_.LastLogon 
            } Else { 
              $Users.$($_.DN).LastLogon 
            } }}
      } Else {
        $Users.Add($_.DN, $_)
      }
    }
}

$Users.Values | ForEach-Object {
  $PasswordReset = (New-TimeSpan $_.PasswordLastSet).Days
  $LastLogon = (New-TimeSpan $_.LastLogon).Days

  Set-QADUser $_.DN -Description "(Password reset : $PasswordReset days) (Last logged in : $LastLogon days)
}

Select allOpen in new window