This PowerShell script will provide an overview and count of all computer objects in a domain based on Operating System and Service Pack. It helps an organisation to understand the number of stale and active computers against the different types of operating systems deployed in their environment.
Computer objects are filtered into 4 categories:
- Windows Servers
- Windows Workstations
- Other non-Windows (Linux, Mac, etc)
- Windows Cluster Name Objects (CNOs) and Virtual Computer Objects (VCOs)
A Stale object is derived from 2 values ANDed together:
- PasswordLastChanged > $MaxPasswordLastChanged days ago
- LastLogonDate > $MaxLastLogonDate days ago
By default the script variable for $MaxPasswordLastChanged is set to 90 and the variable for $MaxLastLogonDate is set to 30. These can easily be adjusted to suite your definition of a stale object.
The Active objects column is calculated by subtracting the Enabled_Stale value from the Enabled value. This gives us an accurate number of active objects against each Operating System.