Simple script that pulls all groups with no members and is not a member of any group. Then look at msDS-ReplValueMetaData attribute to validate it is null. msDS-ReplValueMetaData can be used to view the changes that occur to a groups membership. The age is pulled from the whencreated date of the group. The activedirectory module is required.