listing AD accounts that been inactive for more than 90 days, or that shows the last used date

Hi, I am trying to get information about more than 90 days, could someone verify script below, is it fine or I should add anything else

$90Days = (get-date).adddays(-90)

Get-ADUser -properties * -filter {(lastlogondate -notlike "*" -OR lastlogondate -le $90days) -AND (passwordlastset -le $90days) -AND (enabled -eq $True) -and (PasswordNeverExpires -eq $false) -and (whencreated -le $90days)} | select-object name, SAMaccountname, passwordExpired, PasswordNeverExpires, logoncount, whenCreated, lastlogondate, PasswordLastSet, lastlogontimestamp

AG