Powershell - Remove user accounts that haven't been logged into in 90 days
Budget: $15 – $25 USD
Hello,
I'm looking for a Powershell script to be created that can remove all evidence of user accounts (both local users and domain users) from a Windows computer that haven't been logged into after 90 days.
If a local user account is included in any other group, built-in group or custom group, *except* the Users group, then evidence of these accounts should NOT be deleted after 90 days.
If a domain user account is part of the Domain Admin account, evidence of these accounts should NOT be deleted after 90 days.
Examples:
> If a user account is in the Users group, this WOULD be deleted after 90 days not being logged into.
> If a user account is in the Remote Desktop Users group, this would NOT be deleted after 90 days of not being logged into.
> If a domain user account is not logged into after 90 days, then it WOULD be removed from the computer after 90 days.
> If a domain user account that's part of the Domain Admin group is not logged into after 90 days, this user would NOT be deleted after 90 days.
The following accounts should be included in the script as explicitly NOT to be deleted after 90 days:
> Match: Administrator
> Match: DefaultAccount
> Match: Guest
> Match: WDAGUtilityAccount
> Match: Public
> Match: NetworkService
> Match: Localservice
> Match: systemprofile
> Like: LocalAdmin*
> Like: SID *500
I need all evidence of user accounts (local and domain) that fit the above removal criteria to be removed in Windows, after 90 days of not being logged into, from the following areas:
> Computer Management > Local Users and Groups > Users
> C:\Users\
> Settings > Accounts > Other Users
> HKLM:\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\
This script should be able to successfully run in the Windows 8, Windows 8.1, Windows 10, and Windows 11 environments.
My intention for this script is to run it automatically on a schedule to automate cleaning and freeing up storage space by removing unused user accounts on Windows computers that are, or are not, part of a domain.
Thank you!
I'm looking for a Powershell script to be created that can remove all evidence of user accounts (both local users and domain users) from a Windows computer that haven't been logged into after 90 days.
If a local user account is included in any other group, built-in group or custom group, *except* the Users group, then evidence of these accounts should NOT be deleted after 90 days.
If a domain user account is part of the Domain Admin account, evidence of these accounts should NOT be deleted after 90 days.
Examples:
> If a user account is in the Users group, this WOULD be deleted after 90 days not being logged into.
> If a user account is in the Remote Desktop Users group, this would NOT be deleted after 90 days of not being logged into.
> If a domain user account is not logged into after 90 days, then it WOULD be removed from the computer after 90 days.
> If a domain user account that's part of the Domain Admin group is not logged into after 90 days, this user would NOT be deleted after 90 days.
The following accounts should be included in the script as explicitly NOT to be deleted after 90 days:
> Match: Administrator
> Match: DefaultAccount
> Match: Guest
> Match: WDAGUtilityAccount
> Match: Public
> Match: NetworkService
> Match: Localservice
> Match: systemprofile
> Like: LocalAdmin*
> Like: SID *500
I need all evidence of user accounts (local and domain) that fit the above removal criteria to be removed in Windows, after 90 days of not being logged into, from the following areas:
> Computer Management > Local Users and Groups > Users
> C:\Users\
> Settings > Accounts > Other Users
> HKLM:\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\
This script should be able to successfully run in the Windows 8, Windows 8.1, Windows 10, and Windows 11 environments.
My intention for this script is to run it automatically on a schedule to automate cleaning and freeing up storage space by removing unused user accounts on Windows computers that are, or are not, part of a domain.
Thank you!