Get-ADUser -Filter * -SearchBase "DC=lala,DC=local" -Properties msDS-UserPasswordExpiryTimeComputed | ?{ (Get-Date).adddays(2) -gt [datetime]::FromFileTime($_."msDS-UserPasswordExpiryTimeComputed")} | select name | sort name
PermitRootLogin no
AllowUsers vasya