Audit_DormantAccounts

List accounts that haven't been logged into in X months.

Audit_DormantAccounts

Enter a number and this component will output any accounts that haven’t been used in that many months. If ran on an AD server, it will check domain accounts, if ran on a workstation or member server it will check local accounts.

Technical Info

First we use Get-CimInstance for Win32_OperatingSystem to figure out if the component is running on an AD server or not. We then use either Get-ADUser or Get-Localuser and filter based on last login time.

Required Variables or UDFs

Level	Name	Value	Notes
Component	AccountAge	12	Months since last login

Security Checks

If this component downloads any external files other then grabbing the script from our repository, they will be listed here so you can do your own due diligence if needed.

Filename	URL	Path	Notes
			This component does not download anything else

Changelog

11/26/2022 – Initial Release