ADScripts/Disable-OldPC.ps1

import-module ActiveDirectory

if (!($cred)) {
    $cred = Get-Credential -Message "Enter your domain admin login:"
} 

$AgedOutDays = -270 #store this as a negative number. How many days back should the PC have changed its password
$CSVPATH = "C:\Users\eeckert\OneDrive - MPE Engineering Ltd\Documents\Downloads\Blah.csv"
$computers = get-adcomputer -filter { (Enabled -eq $True) } -properties passwordlastset | where passwordlastset -le (get-date).adddays($AgedOutDays)

foreach ($computer in $computers) {
    $Output = 'Moving ' + $computer.name + ' to disabled OU.'
    Write-Output $Output
    $DescText = 'Disabled: ' + (get-date)
    $computer | set-adcomputer -Enabled $false -Credential $cred -Description $DescText
    $computer | move-adobject -TargetPath "OU=Computers,OU=Disabled Objects,DC=mpe,DC=ca" -Credential $cred
}

$CSVList = import-csv $CSVPATH -ErrorAction SilentlyContinue #get list of hostnames

foreach ($computer in $csvlist) {
    $Output = 'Moving ' + $computer.hostname + ' to disabled OU.'
    Write-Output $Output
    $computer = Get-ADComputer $computer.hostname  
    $DescText = 'Disabled: ' + (get-date)
    $computer | set-adcomputer -Enabled $false -Credential $cred -Description $DescText
    $computer | move-adobject -TargetPath "OU=Computers,OU=Disabled Objects,DC=mpe,DC=ca" -Credential $cred
}