Exam 70-742 topic 1 question 63 discussion

use Set-AdUser to modify the expiration date to end account access in 90 days

https://technet.microsoft.com/en-us/library/ee617256.aspx You can identify an account by its distinguished name, GUID, security identifier (SID), or Security Accounts Manager (SAM) account name. You can also set the Identity parameter to an object variable such as $<localADAccountObject>, or you can pass an account object through the pipeline to the Identity parameter. For example, you can use the Search-ADAccount cmdlet to retrieve an account object and then pass the object through the pipeline to the Set- ADAccountExpiration cmdlet. Similarly, you can use Get-ADUser, Get-ADComputer, or Get-ADServiceAccount cmdlets to retrieve account objects that you can pass through the pipeline to this cmdlet. For example, the complete command for this question is: Get-ADUser -Filter * -SearchBase "OU=Temp,DC=contoso,DC=com" | Set-ADAccountExpiration -TimeSpan 90.0:0 -TimeSpan<TimeSpan> Specifies a time interval that begins at the current time. The account expires at the end of the time interval. Specify the time interval in the following format: [-]D.H:M:S.F where: D = Days (0 to 10675199) H = Hours (0 to 23) M = Minutes (0 to 59) S = Seconds (0 to 59)