Deans Blog

Add-PSSnapin Quest.ActiveRoles.ADManagement

$maxPassAge = (Get-QADObject (Get-QADRootDSE).defaultNamingContextDN).MaximumPasswordAge.days

$enabledUsers = Get-QADUser  -Enabled -PasswordNeverExpires:$false -size 0 -ldap “(mailNickName=*)”

$expiredUsers = $enabledUsers | where {$_.passwordAge -gt 0 -AND ($maxPassAge-$_.passwordAge.days) -lt 7}

$expiredUsers | foreach { Insert Action Here}