Kann man inactive nach 100 Tagen automatisch disablen

# number of days an account can stay inactive
$daysinactive = 100
# OU of the users
$OU = 'OU=BlaBla,DC=testlab,dc=intern'  
# excluded users
$excludedusers = 'User1','User2','User3'  
# ------
$dcs = Get-ADDomainController -Filter *
$users = Get-ADUser -SearchBase $OU -Filter * | ?{$_.SamAccountName -notin $excludedusers}
foreach($user in $users){
    $cdt = $null
    foreach($dc in $dcs){
        try{
            $dt = (Get-ADUser $user.SamAccountName -Server $dc.HostName -Properties LastLogonDate -EA Stop).LastLogonDate
            if ($dt -ne $null -and $dt -gt $cdt){$cdt = $dt}
        }catch{}
    }
    if($cdt -ne $null -and $cdt -lt (get-date).AddDays(-$daysinactive)){
        $user | Set-ADUser -Enabled $false
    }
}