?
Solved

check user logon date and time.

Posted on 2011-03-25
5
Medium Priority
?
1,336 Views
Last Modified: 2012-05-11
We have a Windows 2003 server which also running Citrix.  Is there a way/tool to check if a user logon during a specific date and time?  I have checked my domain controllers but do not see that information.  

Please advice.  
0
Comment
Question by:nav2567
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 35216439
Are you trying to see if that user logged on to that citrix box or if they logged into the domain?  If it is the domain we can key off lastlongtimestamp (accurate between 9-14 days).

Thanks

Mike
0
 

Author Comment

by:nav2567
ID: 35216947
I think you are right.  I have to look at this at the domain level.

Can "lastlongtimestamp" show let's say whether or not the user login last Sunday even the user login during every working day?  

Can you give an example of how to show this attribute?  

Thanks.  
0
 
LVL 57

Assisted Solution

by:Mike Kline
Mike Kline earned 600 total points
ID: 35217051
So lastlogontimestamp is "fairly accurate" the MS AD team did a great job explaining this here:

http://blogs.technet.com/b/askds/archive/2009/04/15/the-lastlogontimestamp-attribute-what-it-was-designed-for-and-how-it-works.aspx

I like a tool called adfind from Joe Richards  http://www.joeware.net/freetools/tools/adfind/index.htm

adfind -default -f samaccountname=Username  lastlogontimestamp -tdc

You could also register the acctinfo.dll to add a tab in ADUC, more info on that here:  http://www.computerperformance.co.uk/w2k3/utilities/acctinfo.htm

Thanks

Mike
0
 
LVL 21

Accepted Solution

by:
snusgubben earned 900 total points
ID: 35218442
As an additional info for future use, since you are using Citrix you can set up Citrix Resource Manager to see user activity (present and historical).

http://www.virtualizationadmin.com/articles-tutorials/terminal-services/management-tools/using-citrix-resource-manager.html


Or you can setup/include in you logon/log off script user activity logging. (can be comprimised by authenticated users)

http://support.microsoft.com/kb/556015

This will not give you any historical data today if that was what you where looking for. (Data will be collected once you set it in play).


0
 

Author Closing Comment

by:nav2567
ID: 35362729
Thanks.
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
A hard and fast method for reducing Active Directory Administrators members.
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses
Course of the Month13 days, 17 hours left to enroll

800 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question