Source code for Natalie Green's createlistenabledhosts.vbs

' http://morgansimonsen.wordpress.com/2012/02/28/script-to-find-outdated-computer-objects-in-active-directory/

' FindOutdatedComputers.vbs

' by Morgan Simonsen

' http://morgansimonsen.wordpress.com

'

' This script will search an Active Directory domain for computer accounts that have

' not logged on the domain in the specified time limit (default 60 days).

'

' 600 000 000 100-nanosecond intervals in 1 minute

' 1440 minutes in 24-hours

' 30 * 1440 * 600 000 000 = time in 100-nanosecond intervals since 1.1.1601

'

' For Windows 2000, Windows XP and Windows Server 2003, the default computer account password change is 30 days,

' on Windows NT-based computers, the machine account password automatically changes every seven days

'

' http://support.microsoft.com/kb/q154501/

' http://support.microsoft.com/default.aspx?scid=kb;en-us;q175468

'

' While lastLogon is not replicated between domain controllers, attribute 'lastLogonTimestamp' IS replicated

' between DC's, so we do NOT have to check multiple DC's any more!! However, it is ONLY replicated every 14

' days, so it's used to find stale accounts.

' http://www.microsoft.com/technet/scriptcenter/topics/win2003/lastlogon.mspx

'

' USAGE:

' cscript.exe CreateListEnabledHosts.vbs |1 only list or list and move objects, default is list only>

'

'===========================

' User changeable variables

'===========================

'Time limit in number of days

intTimeLimit = 45

Const adVarChar = 200

Const MaxCharacters = 255

Const ForReading = 1

Const ForWriting = 2

Const ADS_SCOPE_SUBTREE = 2

Const FOR_WRITING = 2

Dim count, strOld, strDomain

Set objRootDSE = GetObject("LDAP://RootDSE")

Set objArgs = WScript.arguments

If objArgs.Count = 0 Then

WScript.Echo "No arguments submitted, using default values"

	strDomain = objRootDSE.Get("defaultNamingContext")

Else

	strDomain = objArgs.item(0)

End If

WScript.Echo "strDomain=" & strDomain

strDC = objRootDSE.Get("dnsHostName")

WScript.Echo "strDC=" & strDC

strSearchFilter = "(&(objectCategory=computer)" _

                & "(operatingSystem=*)" _

                & "(!userAccountControl:1.2.840.113556.1.4.803:=2))"

strAttributes = "name,distinguishedName,operatingSystemVersion,dNSHostName,operatingSystem" 'Comma separated

strLevel = "subtree"

'Set objWSHShell = WScript.CreateObject("WScript.Shell")

set objFSO = CreateObject("Scripting.FileSystemObject")

If objFSO.FileExists("Serverlist.txt") Then

	objFSO.DeleteFile("Serverlist.txt")

End IF

Set objFile = objFSO.CreateTextFile("Serverlist.txt", FOR_WRITING)

Dim strFSMOSchemaMaster

Dim strFSMOInfrastructureMaster

Dim strFSMOPDCEmulator

Dim strFSMORIDMaster

Dim strFSMODomainNamingMaster

'WScript.Echo "time is:" & Now - #1/1/1601#

Set objADODBConnection = CreateObject("ADODB.Connection")

objADODBConnection.Provider = "ADsDSOObject"

objADODBConnection.Open

Set objADODBCommand = CreateObject("ADODB.Command")

Set objADODBCommand.ActiveConnection = objADODBConnection

objADODBCommand.Properties("Page Size") = 500

'objADODBCommand.CommandText = "<LDAP://" & strDC & "/" & strDomain & ">;" & strSearchFilter & ";" & strAttributes & ";" & strLevel

objADODBCommand.CommandText = "<LDAP://" & strDomain & ">;" & strSearchFilter & ";" & strAttributes & ";" & strLevel

Set objRecordSet = objADODBCommand.Execute

count = 0

While Not objRecordset.EOF

	'Wscript.Echo objRecordset.Fields("name")

	Call GetLastLogonTime(objRecordset.Fields("distinguishedName"))

	objRecordset.MoveNext

Wend

WScript.Echo "Total number of computers in domain: " & objRecordset.RecordCount

WScript.Echo "Number of computers that have not logged on in " & intTimeLimit & " days: " & count

objADODBConnection.Close

'***********************  Sort Server List  ****************************** 

WScript.Echo "Sorting..."

Set DataList = CreateObject("ADOR.Recordset")

DataList.Fields.Append "ComputerName", adVarChar, MaxCharacters

DataList.Open

Set objFSO = CreateObject("Scripting.FileSystemObject")

Set objFile = objFSO.OpenTextFile("serverlist.txt", ForReading)

Do Until objFile.AtEndOfStream

	strLine = objFile.ReadLine

	DataList.AddNew

	DataList("ComputerName") = strLine

	DataList.Update

Loop

objFile.Close

DataList.Sort = "ComputerName"

DataList.MoveFirst

Do Until DataList.EOF

	strText = strText & DataList.Fields.Item("ComputerName") & vbCrLf

	DataList.MoveNext

Loop

Set objFile = objFSO.OpenTextFile("serverlist.txt", ForWriting)

objFile.WriteLine strText

objFile.Close

WScript.Quit

Function GetLastLogonTime(strComputerDN)

	On Error Resume Next

	Set objComputer = GetObject("LDAP://" & strDC & "/" & strComputerDN)

	'WScript.Echo "Computer: " & objComputer.cn

	Set objLogon = objComputer.Get("lastLogonTimestamp")

	intLogonTime = objLogon.HighPart * (2^32) + objLogon.LowPart

	intLogonTime = intLogonTime / (60 * 10000000)

	intLogonTime = intLogonTime / 1440

	'WScript.Echo "Approx last logon timestamp: " & intLogonTime + #1/1/1601#

	If intLogonTime + #1/1/1601# < Now - intTimeLimit Then

		strOld = "Over" & intTimeLimit & "-Y"

		count = count + 1

	Else

		strOld = "Over" & intTimeLimit & "-N"

	End If

	'Wscript.Echo objRecordset.Fields("dnsHostName") & "," & objRecordSet.Fields("operatingSystemVersion") _

	'	& ",LOGON-" & intLogonTime + #1/1/1601# & "," & strOld

	objFile.WriteLine objRecordset.Fields("dnsHostName") & "," & objRecordSet.Fields("operatingSystemVersion") _

		& "," & objRecordSet.Fields("operatingSystem") & ",LOGON-" & intLogonTime + #1/1/1601# & "," & strOld

	'WScript.Echo " Has not logged on in " & intTimeLimit & " days"

	'WScript.Echo " Approx last logon timestamp: " & intLogonTime + #1/1/1601#

	'count = count + 1

	'End If

	Set objComputer = Nothing

End Function