forked from 12Knocksinna/Office365itpros
-
Notifications
You must be signed in to change notification settings - Fork 0
/
FindOldGuestUsers.ps1
45 lines (45 loc) · 2.46 KB
/
FindOldGuestUsers.ps1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
# FindOldGuestUsers.PS1
# Script to find Guest User Accounts in an Office 365 Tenant that are older than 365 days and the groups they belong to
# Script needs to connect to Azure Active Directory and Exchange Online PowerShell.
# https://github.com/12Knocksinna/Office365itpros/blob/master/FindOldGuestUsers.ps1
Write-Host "Finding Guest Users..."
$GuestUsers = Get-AzureADUser -All $true -Filter "UserType eq 'Guest'"
$Today = (Get-Date); $StaleGuests = 0
$Report = [System.Collections.Generic.List[Object]]::new()
CLS
$ProgressDelta = 100/($GuestUsers.Count); $PercentComplete = 0; $GuestNumber = 0
# Check each account and find those over 365 days old
ForEach ($Guest in $GuestUsers) {
$CreatedDate = ((Get-AzureADUser -ObjectId $Guest.UserPrincipalName).ExtensionProperty.createdDateTime)
$AccountAge = ($CreatedDate | New-TimeSpan).Days
If ($AccountAge -gt 365) {
$StaleGuests++; $GuestNumber++
$CurrentStatus = $Guest.DisplayName + " ["+ $GuestNumber +"/" + $GuestUsers.Count + "]"
Write-Progress -Activity "Extracting information for guest account" -Status $CurrentStatus -PercentComplete $PercentComplete
$PercentComplete += $ProgressDelta
$i = 0; $GroupNames = $Null
# Find what Office 365 Groups the guest belongs to... if any
$DN = (Get-Recipient -Identity $Guest.UserPrincipalName).DistinguishedName
$GuestGroups = (Get-Recipient -Filter "Members -eq '$Dn'" -RecipientTypeDetails GroupMailbox | Select DisplayName, ExternalDirectoryObjectId)
If ($GuestGroups -ne $Null) {
ForEach ($G in $GuestGroups) {
If ($i -eq 0) { $GroupNames = $G.DisplayName; $i++ }
Else
{$GroupNames = $GroupNames + "; " + $G.DisplayName }
}}
$ReportLine = [PSCustomObject]@{
UPN = $Guest.UserPrincipalName
Name = $Guest.DisplayName
Age = $AccountAge
Created = $CreatedDate
Groups = $GroupNames
DN = $DN}
$Report.Add($ReportLine) }
Else { # Update the number of guests processed so our progress bar looks good
$GuestNumber++
$CurrentStatus = $Guest.DisplayName + " ["+ $GuestNumber +"/" + $GuestUsers.Count + "]"
Write-Progress -Activity "Extracting information for guest account" -Status $CurrentStatus -PercentComplete $PercentComplete
$PercentComplete += $ProgressDelta}
}
$Report | Out-GridView
$Report | Sort Name | Export-CSV -NoTypeInformation c:\Temp\OldGuestAccounts.csv