I have a windows 2012 AD Domain. The Telecom department came to me with a list of user accounts connected to our phone system They want a list of the last time each account has logged in. In checking ADUC, it appears if I display a user name and go to the OBJECT tab, the MODIFIED tab reveals the last time an account connected. I am trying to do an advance search and search for all accounts starting with AVAYA- and the MODIFIED date of each account. Assuming this does indicate the last time an account connected, which it appears to . I do not care if I use ADUC or a Powershell script. An out put file would be nice too if possible. OR if someone has a better way to get a list of the last time all accounts starting with Avaya- logged in, that would be fine too. ALl ideas welcome
If you use the above, only give write access. This information is a goldmine for hackers