Passwortablauf im AD reporten

Import-Module ActiveDirectory
Get-ADUser -Filter {Enabled -eq $true} -Properties PasswordNeverExpires,msDS-UserPasswordExpiryTimeComputed |
  Select-Object SamAccountName,Name,PasswordNeverExpires,@{N='PasswordExpires';E={
    if ($_.PasswordNeverExpires -or -not $_.'msDS-UserPasswordExpiryTimeComputed') { $null }
    else { [datetime]::FromFileTime($_.'msDS-UserPasswordExpiryTimeComputed') }
  }} |
  Sort-Object PasswordExpires