Posted by: Richard Siddaway
Active Directory, PowerShell
I’ve been using Search-ADaccount a lot recently. One of the options is to input a timespan to determine for far back in time to search e.g. for accounts that have been inactive for 90 days
The cmdlet takes a string that can be turned into a timespan. if you look at the documentation the data type is a Timespan.
To search for accounts that have been inactive for 90 days
Search-ADaccount –AccountInactive –TimeSpan “90:00:00:00”
Alternatively, if you can’t remember the timespan structure
Search-ADaccount –AccountInactive –TimeSpan (New-TimeSpan -Days 90 )