Solved

Last logon date/time of disabled Windows & Linux accounts

Posted on 2014-07-22
5
409 Views
Last Modified: 2014-08-05
For our User accounts audit, audit requested for last logon / used
date and time of disabled accounts (for both local & domain accounts).

We have mainly Windows 2008 R2 & Linux (RHEL 5.x/6.x and Suse).

Without enabling back the accounts, I can't get the last logon date/time
of disabled accounts  using Windows wmic and Linux "last" & "lastlog"
commands.

Q1:
Is there any other way to get this last logon information?

Q2:
For accounts that are used by services/apps like Oracle
& VMWare SA converter as well as Linux accounts that
we 'sudo' only, I also can't get last logon/used info?
Any way to get it?
0
Comment
Question by:sunhux
  • 2
  • 2
5 Comments
 
LVL 16

Accepted Solution

by:
Emmanuel Adebayo earned 250 total points
Comment Utility
For Windows, you can use the powershell  Get-ADuser as in the assist I provided earlier from the link below.

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/Q_28468668.html

I'm not Linux based, I know as expert will respond shortly.

Regards
0
 

Author Comment

by:sunhux
Comment Utility
That's for AD/domain account.  What about Windows local accounts.

To the Linux experts, do reply on Linux accounts, thanks
0
 
LVL 34

Assisted Solution

by:Seth Simmons
Seth Simmons earned 250 total points
Comment Utility
why can't you use last or lastlog?
any errors?

doing sudo /usr/bin/last or sudo /usr/bin/lastlog yields what?
0
 

Author Comment

by:sunhux
Comment Utility
It just says "*** Logon information not available ***"
(even when issued using sudo or root)
0
 
LVL 34

Assisted Solution

by:Seth Simmons
Seth Simmons earned 250 total points
Comment Utility
maybe someone overwrote the file?
what you are doing is correct; message means there is nothing there in the log to show
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Suggested Solutions

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Container Orchestration platforms empower organizations to scale their apps at an exceptional rate. This is the reason numerous innovation-driven companies are moving apps to an appropriated datacenter wide platform that empowers them to scale at a …
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now