asked on

logon report in server 2008

hi
i want to know how can i generate report on how many computers do i have and how many loged on in to the domain in the last month

You can use a tool called adfind by MVP Joe Richards to get a report

http://www.joeware.net/freetools/tools/adfind/index.htm

adfind -default -binenc -f "&(objectcategory=computer)(lastlogontimestamp>={{UTC:2010/2/28}})" name lastlogontimestamp -tdc

so the attribute I'm keying off there is lastlogontimestamp and that attribute is accurate up to 9-14 days, much more on that attribute here:

http://blogs.technet.com/askds/archive/2009/04/15/the-lastlogontimestamp-attribute-what-it-was-designed-for-and-how-it-works.aspx

another great joeware tool to find old computers is the tool old computer

http://www.joeware.net/freetools/tools/oldcmp/index.htm

You can use that to identify, move, disable, and even delete old machines.

One strategy many people use is to first disable them then after the delete them.

Thanks

Mike

You can also take a look at the one we use from scriptlogic http://www.scriptlogic.com/products/enterprisesecurityreporter/windows/
Here is a capture of the reports you can run
ESR.bmp

ASKER CERTIFIED SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.