1

Hello All,

I am working on a script, but stuck at a step where I am unable to figure out how to perform an action

$E3sku = "domain:ENTERPRISEPACK"
$csv = Import-Csv -Path "C:\Users\Desktop\upn.csv"
foreach ($name in $csv.userprincipalname)
{
$user =Get-MsolUser -UserPrincipalName $name
[string]$apuser = $name

foreach ($Licenses in $user.Licenses)
{
if ($E3sku -eq $Licenses.AccountSkuId)
{$date= (Get-Date).AddDays(-30)
$AADDevice = Get-AzureADUserRegisteredDevice -ObjectId $name | where { $_.deviceOstype -eq 'Windows'} | select deviceostype, displayname, @{n='UPN';E={$apuser}}, @{N='Status';E={if ($_.ApproximateLastLogonTimeStamp -le $date){'Not Active'} ELSE{"active"}}},@{N='LastLogindays';E={(New-TimeSpan -Start  $_.ApproximateLastLogonTimeStamp -End (Get-Date)).Days}}
#$AADDevice
}

}
if (!($AADDevice))
{
Write-Host -ForegroundColor Yellow "$name- no Device Assigned"
}
else
{

#$AADdevice  | sort lastlogindays | select -First 1
$lld =($AADdevice  | sort lastlogindays | select -First 1)
$lastlogon = $lld.lastlogindays
$status = $lld.status
#Write-Host   $status + $lastlogon
if (($status -eq "Not Active") -and ($lastlogon -ge "140"))
{ $lld}

}
}

Now, I am unable to act on condition when the $last logon is greater than 140 for any user, set the OOF message using Set-MailboxAutoReplyConfiguration.

Any leads would be very helpful…thank you in advance

@alexw

2 Spice ups
2

What data type is $lastlogon? You can check by running this:

$lastlogon.gettype()

My guess is that $lastlogon is a DateTime object, and comparing it to an integer with -gt will not produce the expected results. DateTime values may be converted to ticks in order to compare to an integer, and ticks are typically large integers.

PS > $Date = Get-Date
PS > $Date -gt 140
True
PS > $Date.Ticks
637401552502484191
PS > $Date.Ticks.gettype()

IsPublic IsSerial Name                                     BaseType
-------- -------- ----                                     --------
True     True     Int64                                    System.ValueType
1 Spice up
3

What exactly is the issue?

As Evan said, i’d double check your types.

4

Take off the “”. varible type of lastlogon should be int you can check to make sure

$lastlogon.gettype()

if (($status -eq “Not Active”) -and ($lastlogon -ge 140))

5

Also you could just

$AADdevice | sort lastlogindays | where {$_.status -eq ‘Not Active’ -and $lastlogon -ge 140 } | select -First 1

6

You could clean this up by adding the $date command at the top so it doesn’t have to run for each user. You could also filter out any accounts that don’t have the Sku you are looking for then you don’t need a foreach to check the License. Because $name is already the UPN you can just keep the rest.

$AADDevice = Get-MsolUser -UserPrincipalName $name | where {$_.Licenses.AccountSkuID -eq $E3sku } | select -ExpandProperty UserPrincipalName | Get-AzureADUserRegisteredDevice | where { $_.deviceOstype -eq 'Windows'} | select deviceostype, displayname, @{n='UPN';E={$name}}, @{N='Status';E={if ($_.ApproximateLastLogonTimeStamp -le $date){'Not Active'} ELSE{"active"}}},@{N='LastLogindays';E={ $_.ApproximateLastLogonTimeStamp }}