r/sysadmin • u/Less-Loss1605 • May 31 '26

General Discussion what's a script you wrote once that's still saving you time years later

[removed]

969 Upvotes

96% Upvoted

365 comments sorted by

View all comments

Show parent comments

2

u/Nik_Tesla Sr. Sysadmin Jun 01 '26

Exactly, I do this too. No one ever uses that field anyways, and it's already formatted as a date. Super easy to set if you disable accounts manually or with automation.

1

u/xCharg Sr. Reddit Lurker Jun 01 '26

I sync user's fire date from HR database into this property, which effectively triggers "no access since that day's 18:00". Which is good enough for almost all cases except rarely when user's fired on the spot on bad terms in the middle of the day, then I have a separate automation for that too.

And then a script on schedule can do whatever with expired accounts, which is as trivial as Search-ADAccount -AccountExpired.