====== Active Directory User and Computer Audit ======

===== Users =====
  - Run the following in a **administrator Powershell:**<code>Get-ADUser -Filter * -Properties “LastLogonDate” | export-csv -path ad-user1.csv</code>
  - Open in Excel and sort by LastLogonDate Ascending
  - Consider removing accounts that are inactive for over a year
  - Make a script with the following: <code>Disable-ADAccount -Identity <SamAccountName></code>
===== Comptuers =====
  - Run the following in a **administrator Powershell:**<code>Get-ADComputer -Filter * -Properties LastLogonDate,operatingSystem,operatingSystemVersion,IPv4Address | export-csv -path ad-computers1.csv</code>
  - Open in Excel and sort by LastLogonDate Ascending
  - Consider removing accounts that are inactive for over a year
  - Make a script with the following: <code>Disable-ADAccount -Identity <SamAccountName></code>