{"id":91,"date":"2016-11-10T08:20:37","date_gmt":"2016-11-10T11:20:37","guid":{"rendered":"http:\/\/www.tonev.pro.br\/?p=91"},"modified":"2016-11-10T08:20:37","modified_gmt":"2016-11-10T11:20:37","slug":"desabilitando-contas-sem-uso-do-active-directory","status":"publish","type":"post","link":"https:\/\/www.tonev.pro.br\/?p=91","title":{"rendered":"Desabilitando contas sem uso do Active Directory"},"content":{"rendered":"<p>Segue procedimento para desabilitar automaticamente contas do seu AD que nao fizeram login nos \u00faltimos 90 dias:<\/p>\n<ul>\n<li>Crie uma conta que seja &#8220;Domain Admin&#8221;;<\/li>\n<li>Crie uma pasta para armazenar os arquivos de scripts &#8211; &#8220;C:\\Scripts&#8221;<\/li>\n<li>Crie um\u00a0arquivo &#8220;Disable_Users.bat&#8221; com o conte\u00fado abaixo:<\/li>\n<\/ul>\n<pre>@echo off\r\ncd \\Scripts\r\npowershell .\\List_Inactive_Users.ps1\r\npowershell .\\Send_Mail_Inactive_Users.ps1\r\npowershell .\\Disable_Inactive_Users.ps1\r\ndel OLD_User*.csv<\/pre>\n<ul>\n<li>Crie um arquivo &#8220;List_Inactive_Users.ps1&#8221; com o conte\u00fado abaixo. \u00a0A fun\u00e7\u00e3o dele \u00e9 de listar em um arquivo CSV todas as contas que ser\u00e3o desativadas, que ser\u00e1 enviado por email, para registro das a\u00e7\u00f5es tomadas.<\/li>\n<\/ul>\n<pre>import-module activedirectory \r\n$DateN = (Get-Date -UFormat %Y-%m-%d)\r\n$FileName = \"OLD_User-\" + $DateN + \".csv\"\r\n$DaysInactive = 90 \r\n$time = (Get-Date).Adddays(-($DaysInactive))\r\nGet-ADUser -Filter {LastLogonTimeStamp -lt $time -and enabled -eq $true} -Properties LastLogonTimeStamp | select-object Name,@{Name=\"Stamp\"; Expression={[DateTime]::FromFileTime($_.lastLogonTimestamp)}} | export-csv $FileName -notypeinformation<\/pre>\n<ul>\n<li>Crie um arquivo &#8220;Send_Mail_Inactive_Users.ps1&#8221;\u00a0com o conte\u00fado abaixo. A fun\u00e7\u00e3o dele \u00e9 de enviar o arquivo CSV gerado para a caixa postal administrativa. N\u00e3o esque\u00e7a de alterar os par\u00e2metros\u00a0 $From,\u00a0$To e\u00a0$SMTPServer.<\/li>\n<\/ul>\n<pre>$From = \"adadmin@tonev.pro.br\"\r\n$To = \"adadmin@tonev.pro.br\"\r\n$DateN = (Get-Date -UFormat %Y-%m-%d)\r\n$Attachment = \"c:\\Scripts\\OLD_User-\" + $DateN + \".csv\"\r\n$Subject = \"Usuarios que serao desativados - \" + $DateN\r\n$Body = \"Contas que foram desativadasem \" + $DateN\r\n$SMTPServer = \"smtp.empresa.com.br\"\r\n$SMTPPort = \"25\"\r\nSend-MailMessage -From $From -to $To -Subject $Subject -Body $Body -SmtpServer $SMTPServer -port $SMTPPort -Attachments $Attachment<\/pre>\n<ul>\n<li>Crie um arquivo &#8220;Disable_Inactive_Users.ps1&#8221; com o conte\u00fado abaixo. A fun\u00e7\u00e3o dele \u00e9 de efetivamente desativar as contas.<\/li>\n<\/ul>\n<pre>import-module activedirectory \r\n$DaysInactive = 90 \r\n$time = (Get-Date).Adddays(-($DaysInactive))\r\nGet-ADUser -Filter {LastLogonTimeStamp -lt $time -and enabled -eq $true} -Properties LastLogonTimeStamp | Disable-ADAccount<\/pre>\n<ul>\n<li>Por fim crie um agendamento no Windows para que o arquivo BAT seja executado com a frequ\u00eancia desejada. N\u00e3o esque\u00e7a que o agendamento deve ser executado com a conta criada no primeiro passo.<\/li>\n<\/ul>\n<p>Se voce estiver seguindo as boas praticas de administra\u00e7\u00e3o, a conta do &#8220;Administrator&#8221; ou &#8220;Administrador&#8221; vai\u00a0ser desativada pelo script. Mas isso nao deve ser nenhum problema porque deve existir pelo menos mais uma conta com os mesmos privil\u00e9gios &#8211; a sua conta administrativa.<\/p>\n<p>Se nao precisar ou querer o email de aviso, pode ser usado apenas o ultimo script.<\/p>\n<p>Se quiser fazer a mesma coisa com as contas de maquinas:<\/p>\n<ul>\n<li>List_Inactive_Computers.ps1<\/li>\n<\/ul>\n<pre>import-module activedirectory \r\n$DateN = (Get-Date -UFormat %Y-%m-%d)\r\n$FileName = \"OLD_Computers-\" + $DateN + \".csv\"\r\n$DaysInactive = 90 \r\n$time = (Get-Date).Adddays(-($DaysInactive))\r\nGet-ADComputer -Filter {LastLogonTimeStamp -lt $time -and enabled -eq $true} -Properties LastLogonTimeStamp | select-object Name,@{Name=\"Stamp\"; Expression={[DateTime]::FromFileTime($_.lastLogonTimestamp)}} | export-csv $FileName -notypeinformation<\/pre>\n<ul>\n<li>Send_Mail_Inactive_Computers.ps1<\/li>\n<\/ul>\n<pre>$From = \"adadmin@tonev.pro.br\"\r\n$To = \"adadmin@tonev.pro.br\"\r\n$DateN = (Get-Date -UFormat %Y-%m-%d)\r\n$Attachment = \"c:\\Scripts\\OLD_Computers-\" + $DateN + \".csv\"\r\n$Subject = \"Contas de computadores que serao desativados - \" + $DateN\r\n$Body = \"Contas que foram desativadasem \" + $DateN\r\n$SMTPServer = \"smtp.empresa.com.br\"\r\n$SMTPPort = \"25\"\r\nSend-MailMessage -From $From -to $To -Subject $Subject -Body $Body -SmtpServer $SMTPServer -port $SMTPPort -Attachments $Attachment<\/pre>\n<ul>\n<li>Disable_Inactive_Computers.ps1<\/li>\n<\/ul>\n<pre>import-module activedirectory \r\n$DaysInactive = 90 \r\n$time = (Get-Date).Adddays(-($DaysInactive))\r\nGet-ADComputer -Filter {LastLogonTimeStamp -lt $time} -Properties LastLogonTimeStamp | Disable-ADAccount<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>Segue procedimento para desabilitar automaticamente contas do seu AD que nao fizeram login nos \u00faltimos 90 dias: Crie uma conta que seja &#8220;Domain Admin&#8221;; Crie uma pasta para armazenar os arquivos de scripts &#8211; &#8220;C:\\Scripts&#8221;&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-91","post","type-post","status-publish","format-standard","hentry","category-windows"],"_links":{"self":[{"href":"https:\/\/www.tonev.pro.br\/index.php?rest_route=\/wp\/v2\/posts\/91","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tonev.pro.br\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.tonev.pro.br\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.tonev.pro.br\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tonev.pro.br\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=91"}],"version-history":[{"count":3,"href":"https:\/\/www.tonev.pro.br\/index.php?rest_route=\/wp\/v2\/posts\/91\/revisions"}],"predecessor-version":[{"id":94,"href":"https:\/\/www.tonev.pro.br\/index.php?rest_route=\/wp\/v2\/posts\/91\/revisions\/94"}],"wp:attachment":[{"href":"https:\/\/www.tonev.pro.br\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=91"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.tonev.pro.br\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=91"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.tonev.pro.br\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=91"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}