Last login date/time for users in Active Directory

Hi Experts,
Is there a way to get a list of the last login date and time for the users of a specific OU. I have made some changes to login script and need to know what users (Ihave about 400) have not get the changes because they have not logout/login their account.

Thank you,
dguandiqueAsked:
Who is Participating?
 
pitchfordConnect With a Mentor Commented:
There are a couple of options for you. I highly recommend DoveStones True Last Logon; it costs $100 but it is WELL worth it. I run this periodically because we never find out when people quit or are terminated! It also scans computers.
http://www.dovestones.com/ 

If you're looking for a script method you can refer to:

http://www.windowsitpro.com/article/vbscript/how-can-i-generate-a-list-of-last-user-logon-times-for-a-domain-.aspx
0
 
KenMcFCommented:
There are two attributes you can look for. One is lastlogon and the other is lastlogontimestamp. The difference is that lastlogon is not replicated between DCs and the lastlogontimestamp is replicated every 9-14 days. To get these I like to use either powershell with the quest ad cmdlets or ADFind. The reason I like these is becuase it does the conversion for you.

Get-qaduser USERNAME | FL Name, Lastlogontimestamp

adfind -default -f "(samaccountname=USERNAME)" name lastlogontimestamp -tdcs

0
 
Felix LevenSenior System and DatabaseadministratorCommented:
What about Active Directory Users and Computers go to the OU -> View -> add/remove column -> add modified

with every domain logon a user is "modified"
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.