User logon to machines

HI All,

I need to find out if a user logged to any system within these dates 14th April 2015 and 15th April 2015

Also I need to find out what machines a user logged into.

Is there any powershell scripts/software's available to find out this information?

thank you in advance,
Kay
Kelly GarciaSenior Systems AdministratorAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Ganesamoorthy STech LeadCommented:
It's not a easy one, if you have less number of desktop then search logon event from all the desktop

To get the last logon details
Check Lastlogontimestamp attribute value for the user to get the time and DC name

http://www.windowstricks.in/2015/05/active-directory-user-attributes-auditing-using-object-meta.html

And check the security event on the source DC to find the logon desktop details

www.windowstricks.in
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Will SzymkowskiSenior Solution ArchitectCommented:
The easiest way to accomplish this is to enable Active Direcotry Auditiing. Unfortunately if you do not have it enabled you will not be able to retrieve the past dates that you are looking for. I have created a HowTo for settings up Auditing of Directory Services. See the link below...

Enable Active Directory Auditing for Directory Services
http://www.wsit.ca/how-tos/active-directory/configure-active-directory-auditing/

It would also be helpful as well to use Lepide Software Active Directory Audit as well after auditing has been enabled.

http://www.lepide.com/lepideauditor/active-directory.html

Will.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.