Script to List Expired and Expiring Active Directory Passwords (90 days forward)

expiringExpiredPassword.ps1

$maxPasswordAge = (Get-ADDefaultDomainPasswordPolicy).MaxPasswordAge.Days
$AdUsers = Get-ADUser -Filter {accountExpires -ne $false -and PasswordneverExpires -eq $false -and Enabled -eq $true} -Properties * | sort -Property name

foreach ($i in $AdUsers){
    $LastSet = $i.PasswordLastSet 
    $ExDate = $LastSet.addDays($maxPasswordAge)
    if($ExDate -lt (Get-Date).AddDays(90) -and $ExDate -ge (Get-Date) ){
       $passExpireSoon = $passExpireSoon + $i.name + ", $ExDate`n"
       
    }elseif($ExDate -lt (Get-Date)){
       $passExpired = $passExpired + $i.name + ", $ExDate`n"
    }   
}
Write-host "About to expire: `n$passExpireSoon"
Write-Host
Write-host "Password expired: `n$passExpired"