• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1597
  • Last Modified:

Last login date/time for users in Active Directory

Hi Experts,
Is there a way to get a list of the last login date and time for the users of a specific OU. I have made some changes to login script and need to know what users (Ihave about 400) have not get the changes because they have not logout/login their account.

Thank you,
0
dguandique
Asked:
dguandique
  • 2
1 Solution
 
pitchfordCommented:
There are a couple of options for you. I highly recommend DoveStones True Last Logon; it costs $100 but it is WELL worth it. I run this periodically because we never find out when people quit or are terminated! It also scans computers.
http://www.dovestones.com/ 

If you're looking for a script method you can refer to:

http://www.windowsitpro.com/article/vbscript/how-can-i-generate-a-list-of-last-user-logon-times-for-a-domain-.aspx
0
 
KenMcFCommented:
There are two attributes you can look for. One is lastlogon and the other is lastlogontimestamp. The difference is that lastlogon is not replicated between DCs and the lastlogontimestamp is replicated every 9-14 days. To get these I like to use either powershell with the quest ad cmdlets or ADFind. The reason I like these is becuase it does the conversion for you.

Get-qaduser USERNAME | FL Name, Lastlogontimestamp

adfind -default -f "(samaccountname=USERNAME)" name lastlogontimestamp -tdcs

0
 
Felix LevenCommented:
What about Active Directory Users and Computers go to the OU -> View -> add/remove column -> add modified

with every domain logon a user is "modified"
0

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now