Powershell: Get Inactive Computer objects in AD

I made a new Powershell script to retrieve all inactive and “non used” computer accounts for a specific organizational unit in Active Directory. You need to use the attribute “lastLogonTimestamp” from AD like you can see in the screenshot below. There is also a “lastlogon” attribute present but this an old attribute which is not replicated among the domain controllers. This attribute is only updated on the domain controller you are currently using therefor we use “lastLogonTimestamp” which is replicated. I have also used the  Quest Active Roles which is free to download.

The script below will display first the inactive computer objects that not have been signed-in in the last 3 Months, afterward are the “never used” computer accounts displayed. Modify the $Days & $OU variable to change the number of inactive days and the specified Organizational unit.

Script:

#Display inactive and "non used" workstations of a specific Organizational Unit
#More info: https://jthys.wordpress.com

cls
$Currentdate = get-date
$Days = 90
$OU = "RSRC.int/Managed Computers"

$inactive = Get-QADComputer -SearchRoot $OU -SizeLimit 0 -IncludedProperties LastLogonTimeStamp | where { $_.LastLogonTimeStamp -ne $null -and ($Currentdate-$_.LastLogonTimeStamp).Days -gt $Days }
$neverused = Get-QADComputer -SearchRoot $OU -SizeLimit 0 -IncludedProperties LastLogonTimeStamp | where { $_.LastLogonTimeStamp -eq $null }

Write-Host "Inactive Workstations:"
$inactive | format-table name, lastlogonTimeStamp -autosize

write-host "Never used Worksations:"
$neverused  | format-table name -autosize

Output:

note: I have changed the variable $days to 5 to generate some output on my test domain controller.