Re: Question about Active Directory and last time user has logged on

On 8/28/07, Mary Hendrix <maryhendrix@xxxxxxxxx> wrote:
Is there a way to find out the last time a user has logged into a domain?

If you have AD, then the following LDAP attribute holds the last logon time:

{lastLogon}

You can extract that using a simple vbscript.

Note: The returned value will be the NT System time. To convert to
regular time use the following:
w32tm /ntte {returned int}

saqib
http://security-basics.blogspot.com/

Relevant Pages

  • Re: "Last logon time" & "Last time the account was authenticated by AD
    ... We have the requirement to identify the last time that account ... the updated Last logon time. ... corresponds to the value of the lastLogon attribute. ... You must query all DC's ...
    (microsoft.public.windows.server.active_directory)
  • Re: "Last logon time" & "Last time the account was authenticated by AD
    ... the updated Last logon time. ... the last time an account authenticated in AD will be the date/time ... corresponds to the value of the lastLogon attribute. ... The login time/date is only replicated in windows 2003, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Extracting Text
    ... > extract text from a text file and placed into a new file. ... A scripting language, such as Ruby or Python, with regular expressions ... Regular expressions were invented as a miniature language that specifies how ... And regular expressions are not built-into VBScript. ...
    (comp.programming)
  • Re: Domain access time
    ... You can get info. on the last logon time, via the lastLogon ... however it's not replicated so you need to pull it off each DC ... Microsoft MVP - Windows Server - Directory Services ...
    (microsoft.public.windows.server.active_directory)
  • Re: JPG EXIF Properties
    ... I converted the code in the VBScript to work in ... I can extract the information I need. ... an image object and this way is about 40% faster based on my tests. ... the file header should be fairly small. ...
    (microsoft.public.dotnet.languages.vb)