Create Collection based on pwdLastSet

[jones.967]

Trying to make a collection of "all systems that have checked in with AD in the last 90 days" and I am not having much luck.

 

I think I need to query on the pwdLastSet AD attribute but I can not figure out how best to do it.

 

Thank

[Peter van der Woude]

What's your goal? Depending on that, it might even be easier to solve by not discovering them (via the properties of the system discovery).

[GarthMJ]

That attribute is not collected by default, so you will not be able to create a collection on it.

 

Why question is why do you want to do this?

[jones.967]

I want to create a collection of all my active systems with or without the SCCM client on them. Not discovering old systems might be what I am looking for, I'll go look at that.

 

I am sure I missed some easy way to do this.

 

Thanks!

[jones.967]

Yep. I did not have the check boxes marked in Active Directory System Discovery Properties under the Option tab to prevent it from discovering everything.

 

Thanks!

[GarthMJ]

I'm curious, why you wouldn't do this with AD directly? Why add CM07/CM12 into the mix?

[senseiTX]

I've always done this directly in AD using this Move Old Computers script as a base to start from. This script moves the machines to an OU that AD System Group Discovery doesn't discover.