RE: [ActiveDir] LastLogon timestamp
Part legacy. It didn't replicate in NT4, it would be a a serious change in functionality if it all of a sudden started replicating. Some people used that attribute to determine which DCs were being "used" the most and processing the most auths. Also it told you where customers were authing at for most of the time. Part replication traffic. Consider an environment with hundreds of thousands of users and workstations. Also consider that the lastLogon attribute is updated multiple times, every time an auth occurs which could occur multiple times in a single interactive auth if NTLM is being used. That is a considerable amount of traffic for something that isn't really regularly needed by most users or even admins. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kamlesh ParmarSent: Friday, October 28, 2005 4:23 PMTo: ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] LastLogon timestamp I am just curious, what was the issue for that "old attribute" i.e. lastlogon not replicated.was it plain simple, "too-much-replication-for-a-single-attribute" ? or anything else? On 10/28/05, Almeida Pinto, Jorge de [EMAIL PROTECTED] wrote: Hi Russ,For that you need to query all DCs as the "old attribute" is not replicated between DCsThe new lastlogontimestamp attribute only is available in DFL W2K3 andis replicated between DCsIn both FLs you could use OLDCMP (with the users option) fromjoeware.net (http://www.joeware.net/win/free/tools/oldcmp.htm)DumpSec from SomarSoft also provides the ability to scan/query all DCssearching for the true last logon time ( http://www.somarsoft.com/)Cheers,Jorge-Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Rimmerman, RussSent: Friday, October 28, 2005 12:56To: ActiveDir@mail.activedir.orgSubject: [ActiveDir] LastLogon timestampWhat's the easiest way to find out the last logon time of a useraccount?And if you have 50 domain controllers, would you have to query each one for it, or is this replicated some how?We're in a nativewin2k domain with mostly win2k3 DCs.Thanks~~This e-mail is confidential, may contain proprietary information of the Cooper Cameron Corporation and its operating Divisions and may beconfidential or privileged.This e-mail should be read, copied, disseminated and/or used only by theaddressee. If you have received this message in error please delete it, together with any attachments, from your system.~~List info : http://www.activedir.org/List.aspxList FAQ: http://www.activedir.org/ListFAQ.aspxList archive:http://www.mail-archive.com/activedir%40mail.activedir.org/ This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.List info : http://www.activedir.org/List.aspxList FAQ: http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir%40mail.activedir.org/-- ~~~"Fortune and Love befriend the bold"~~~
RE: [ActiveDir] LastLogon timestamp
' This code prints the last logon timestamp for a user. ' -- SCRIPT CONFIGURATION -- strUserDN = UserDN ' e.g. cn=rallen,ou=Sales,dc=rallencorp,dc=com ' -- END CONFIGURATION - set objUser = GetObject(LDAP:// strUserDN) set objLogon = objUser.Get(lastLogonTimestamp) intLogonTime = objLogon.HighPart * (2^32) + objLogon.LowPart intLogonTime = intLogonTime / (60 * 1000) intLogonTime = intLogonTime / 1440 WScript.Echo Approx last logon timestamp: intLogonTime + #1/1/1601# Discussion Trying to determine when a user last logged on has always been a challenge in the Microsoft NOS environment. In Windows NT, you could retrieve a user's last logon timestamp from a PDC or BDC, but this timestamp was the last time the user logged on to the PDC or BDC. That means in order to determine the actual last logon, you'd have to query every domain controller in the domain. In large environments, this wasn't practical. With Windows 2000 Active Directory, things did not improve much. A lastLogon attribute is used to store the last logon timestamp, but unfortunately, this attribute isn't replicated. So again, to get an accurate picture, you'd have to query every domain controller in the domain for the user's last logon attribute and keep track of the most recent one. Now with Windows Server 2003, we finally have a viable solution. A new attribute was added to the schema for user objects called lastLogonTimestamp. This attribute is similar to the lastLogon attribute that was available previously, with two distinct differences. First, and most importantly, this attribute is replicated. That means when a user logs in, the lastLogonTimestamp attribute will get populated and then replicate to all domain controllers in the domain. The second difference is that since lastLogonTimestamp is replicated, special safeguards needed to be put in place so that users that logged in repeatedly over a short period of time did not cause unnecessary replication traffic. For this reason, the lastLogonTimestamp is updated only if the last update occurred a week or more ago. This means that the lastLogonTimestamp attribute could be up to a week off in terms of accuracy with a user's actual last logon. Ultimately, this shouldn't be a problem for most situations because lastLogonTimestamp is intended to address the common problem where administrators want to run a query and determine which users have not logged in over the past month or more. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rimmerman, Russ Sent: Friday, October 28, 2005 5:56 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] LastLogon timestamp What's the easiest way to find out the last logon time of a user account? And if you have 50 domain controllers, would you have to query each one for it, or is this replicated some how? We're in a native win2k domain with mostly win2k3 DCs. Thanks ~~ This e-mail is confidential, may contain proprietary information of the Cooper Cameron Corporation and its operating Divisions and may be confidential or privileged. This e-mail should be read, copied, disseminated and/or used only by the addressee. If you have received this message in error please delete it, together with any attachments, from your system. ~~ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] LastLogon timestamp
I used 3rd party software Hyena. Rimmerman, Russ wrote: What's the easiest way to find out the last logon time of a user account? And if you have 50 domain controllers, would you have to query each one for it, or is this replicated some how? We're in a native win2k domain with mostly win2k3 DCs. Thanks ~~ This e-mail is confidential, may contain proprietary information of the Cooper Cameron Corporation and its operating Divisions and may be confidential or privileged. This e-mail should be read, copied, disseminated and/or used only by the addressee. If you have received this message in error please delete it, together with any attachments, from your system. ~~ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] LastLogon timestamp
Hi Russ, For that you need to query all DCs as the old attribute is not replicated between DCs The new lastlogontimestamp attribute only is available in DFL W2K3 and is replicated between DCs In both FLs you could use OLDCMP (with the users option) from joeware.net (http://www.joeware.net/win/free/tools/oldcmp.htm) DumpSec from SomarSoft also provides the ability to scan/query all DCs searching for the true last logon time (http://www.somarsoft.com/) Cheers, Jorge -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rimmerman, Russ Sent: Friday, October 28, 2005 12:56 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] LastLogon timestamp What's the easiest way to find out the last logon time of a user account? And if you have 50 domain controllers, would you have to query each one for it, or is this replicated some how? We're in a native win2k domain with mostly win2k3 DCs. Thanks ~~ This e-mail is confidential, may contain proprietary information of the Cooper Cameron Corporation and its operating Divisions and may be confidential or privileged. This e-mail should be read, copied, disseminated and/or used only by the addressee. If you have received this message in error please delete it, together with any attachments, from your system. ~~ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] LastLogon timestamp
I believe Joewares oldcmp will also give you llts. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Za Vue Sent: Friday, October 28, 2005 7:19 AM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] LastLogon timestamp I used 3rd party software Hyena. Rimmerman, Russ wrote: What's the easiest way to find out the last logon time of a user account? And if you have 50 domain controllers, would you have to query each one for it, or is this replicated some how? We're in a native win2k domain with mostly win2k3 DCs. Thanks ~~ This e-mail is confidential, may contain proprietary information of the Cooper Cameron Corporation and its operating Divisions and may be confidential or privileged. This e-mail should be read, copied, disseminated and/or used only by the addressee. If you have received this message in error please delete it, together with any attachments, from your system. ~~ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] LastLogon timestamp
On Fri, 28 Oct 2005 05:55:47 -0500, you wrote: What's the easiest way to find out the last logon time of a user account? And if you have 50 domain controllers, would you have to query each one for it, or is this replicated some how? We're in a native win2k domain with mostly win2k3 DCs. Thanks The LastLogonTimeStamp attribute is replicated in a Windows Server 2003 domain, not in a W2K domain. In W2K, you must check all DCs See tip 9800 ยป How is the lastLogonTimeStamp attribute replicated in a Windows Server 2003 domain? in the 'Tips Tricks' at http://www.jsifaq.com I discussed the lastLogonTimeStamp attribute, new to a Windows Server 2003 domain, and enhanced in Windows Server 2003 Service Pack 1, in tip 7801 and tip 8080. To minimize domain wide replication for every logon, lastLogonTimeStamp is updated periodically. The default interval is a random number from about 10 to 14 days, controlled by the domain's msDS-LogonTimeSyncInterval attribute, which defaults to 14 days, and a randomizer that prevents excessive replication when the domain functional level is first raised. Actual replication does not occurs until the first successful logon after the randomized msDS-LogonTimeSyncInterval value is reached. For a more complete explanation of lastLogonTimeStamp replication, see http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/TechRef/54094485-71f6-4be8-8ebf-faa45bc5db4c.mspx from the Stale Account Detection heading through the Scripting stale account detection heading. Jerold Schulman Windows Server MVP JSI, Inc. http://www.jsiinc.com http://www.jsifaq.com List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] LastLogon timestamp
I'm using Hyena 6.5 but I guess since we arent 100% Win2k3 DCs yet, it won't show yet. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Za Vue Sent: Friday, October 28, 2005 6:19 AM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] LastLogon timestamp I used 3rd party software Hyena. Rimmerman, Russ wrote: What's the easiest way to find out the last logon time of a user account? And if you have 50 domain controllers, would you have to query each one for it, or is this replicated some how? We're in a native win2k domain with mostly win2k3 DCs. Thanks ~~ This e-mail is confidential, may contain proprietary information of the Cooper Cameron Corporation and its operating Divisions and may be confidential or privileged. This e-mail should be read, copied, disseminated and/or used only by the addressee. If you have received this message in error please delete it, together with any attachments, from your system. ~~ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ ~~ This e-mail is confidential, may contain proprietary information of the Cooper Cameron Corporation and its operating Divisions and may be confidential or privileged. This e-mail should be read, copied, disseminated and/or used only by the addressee. If you have received this message in error please delete it, together with any attachments, from your system. ~~ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] LastLogon timestamp
I am just curious, what was the issue for that old attribute i.e. lastlogon not replicated. was it plain simple, too-much-replication-for-a-single-attribute ? or anything else?On 10/28/05, Almeida Pinto, Jorge de [EMAIL PROTECTED] wrote:Hi Russ,For that you need to query all DCs as the old attribute is not replicated between DCsThe new lastlogontimestamp attribute only is available in DFL W2K3 andis replicated between DCsIn both FLs you could use OLDCMP (with the users option) from joeware.net (http://www.joeware.net/win/free/tools/oldcmp.htm)DumpSec from SomarSoft also provides the ability to scan/query all DCssearching for the true last logon time ( http://www.somarsoft.com/)Cheers,Jorge-Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Rimmerman, RussSent: Friday, October 28, 2005 12:56To: ActiveDir@mail.activedir.orgSubject: [ActiveDir] LastLogon timestampWhat's the easiest way to find out the last logon time of a useraccount?And if you have 50 domain controllers, would you have to query each one for it, or is this replicated some how?We're in a nativewin2k domain with mostly win2k3 DCs.Thanks~~This e-mail is confidential, may contain proprietary information of the Cooper Cameron Corporation and its operating Divisions and may beconfidential or privileged.This e-mail should be read, copied, disseminated and/or used only by theaddressee. If you have received this message in error please delete it, together with any attachments, from your system.~~List info : http://www.activedir.org/List.aspxList FAQ: http://www.activedir.org/ListFAQ.aspxList archive:http://www.mail-archive.com/activedir%40mail.activedir.org/ This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.List info : http://www.activedir.org/List.aspxList FAQ: http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ -- ~~~Fortune and Love befriend the bold~~~
RE: [ActiveDir] LastLogOn
Title: Message It does tell you the time you logged into the PC. Very useful tool. I have it scripted into my logon.vbs, using it to force a background out to the PCs. For reference (yeah, I know its probably ugly, I am by no means a pro vbs scripter): '= ' Copy Desktop Background File and Set It '= public sub CheckBkgFile() On Error Resume Next Dim strSrc, strDst, strSF, strDF, strSrcF, strDstF, strProg, strPrPar1 Dim strPrPar2, strPrPrms, strCommandLine, return, strServer strServer = strSysRoot \system32\server.txt strSrc = \\DC01\NETLOGON\ strSF = strSrc NBHBG.jpg strDst = strSysRoot \system32\ strDF = strDst NBHGB.jpg strProg = strSrc Bginfo.exe strPrPar1 = strSrc Bginfo.bgi strPrPar2 = /Timer:0 strPrPrms = strPrPar1 strPrPar2 If fso.FileExists (strServer) then 'Proceed else If fso.FileExists (strDF) then strDstF = fso.GetFile(strDF) strSrcF = fso.GetFile(strSF) If strDstF.DateLastModified strSrcF.DateLastModified then fso.CopyFile strSrc, strDst, true end if else fso.CopyFile strSF, strDst, true end if strCommandLine = strProg strPrPrms return = wshShell.run (strCommandLine, 0, TRUE) end if end sub Allows us to do a single change on the corporate background image and force it out to the desktops on user logon. Thank you, Mitchell D. Lawrence Director, Network Administrator ITS Department North Bay Hospital 1711 W. Wheeler Ave Aransas Pass, TX 78336 ph: (361) 758-0580 fx: (361) 758-0581 pg: (361) 270-0421 [EMAIL PROTECTED] [EMAIL PROTECTED] (home) ** Good | Cheap | Fast (Pick Two)** -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Passo, Larry Posted At: Tuesday, July 20, 2004 1:49 PM Posted To: ~AD Discussion~ Conversation: [ActiveDir] LastLogOn Subject: RE: [ActiveDir] LastLogOn Bginfo will show you the logon server but it doesnt show you the last logon value. It is still subject to the requirement that you need to query the last logon time from all of the DCs in the domain. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rutherford, Robert Sent: Tuesday, July 20, 2004 10:24 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] LastLogOn Oh yeh... that's a good idea. We have it on our servers, but yeh it would also work in the clients. I'll look into it. Cheers Tim. -Original Message- From: Tim Foster [mailto:[EMAIL PROTECTED] Sent: 20 July 2004 17:06 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] LastLogOn BgInfo from http://www.sysinternals.com/ntw2k/freeware/bginfo.shtml may help. Tim Foster From: Durant, Ryan A [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 20, 2004 11:42 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] LastLogOn Query every domain controller and store those results in a database. The number of domain controllers, amount of users and link speeds will determine how fast you can collect the stats. You may only be able to collect once a day or possibly once an hour. Have a logon script query the DB for the last logon value and have it pop up on their screen. You could also query a web page to get the values if you didn't want to worry about odbc and sql calls from the client machines. But you have to be a scripter to get this done I believe. Ryan From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rutherford, Robert Sent: Tuesday, July 20, 2004 6:26 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] LastLogOn Dear All, Not in anyway being a scripter. How would I get the date and time a user last logged on to pop up on their screen at logon? I guess it would be via the 'lastlogon' attribute? Linked into a login script? Cheers, Rob This e-mail and the information it contains are confidential and may be privileged. If you have received this e-mail in error please notify the sender immediately and delete the material from any computer. Unless you are the intended recipient, you should not copy this e-mail for any purpose, or disclose its contents to any other person. The MCPS-PRS Alliance is not responsible for the completeness or accuracy of this communication as it has been transmitted over a public network. Whilst the MCPS-PRS Alliance monitors all communications for potential viruses, we accept no responsibility for any loss or damage caused by this e-mail and the information it contains. It is the recipient's responsibility to scan this e-mail and any attachments for viruses. Any e-mails sent to and from the MCPS-PRS Alliance servers may be monitored for quality control and other purposes. The MCPS-PRS Alliance Limited is a limited company registered in England under company number 03444246 whose registered office is at c/o 29-33 Berners Street
RE: [ActiveDir] LastLogOn
Title: Message Noticed a small error (wouldnt have noticed it until we changed the background image). Error shown in red below. Thank you, Mitchell D. Lawrence Director, Network Administrator ITS Department North Bay Hospital 1711 W. Wheeler Ave Aransas Pass, TX 78336 ph: (361) 758-0580 fx: (361) 758-0581 pg: (361) 270-0421 [EMAIL PROTECTED] [EMAIL PROTECTED] (home) ** Good | Cheap | Fast (Pick Two)** -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of DL.ActiveDirectory Posted At: Wednesday, July 21, 2004 9:59 AM Posted To: ~AD Discussion~ Conversation: [ActiveDir] LastLogOn Subject: RE: [ActiveDir] LastLogOn It does tell you the time you logged into the PC. Very useful tool. I have it scripted into my logon.vbs, using it to force a background out to the PCs. For reference (yeah, I know its probably ugly, I am by no means a pro vbs scripter): '= ' Copy Desktop Background File and Set It '= public sub CheckBkgFile() On Error Resume Next Dim strSrc, strDst, strSF, strDF, strSrcF, strDstF, strProg, strPrPar1 Dim strPrPar2, strPrPrms, strCommandLine, return, strServer strServer = strSysRoot \system32\server.txt strSrc = \\DC01\NETLOGON\ strSF = strSrc NBHBG.jpg strDst = strSysRoot \system32\ strDF = strDst NBHGB.jpg strProg = strSrc Bginfo.exe strPrPar1 = strSrc Bginfo.bgi strPrPar2 = /Timer:0 strPrPrms = strPrPar1 strPrPar2 If fso.FileExists (strServer) then 'Proceed else If fso.FileExists (strDF) then strDstF = fso.GetFile(strDF) strSrcF = fso.GetFile(strSF) If strDstF.DateLastModified strSrcF.DateLastModified then fso.CopyFile strSrc, strDst, true [Mitch writes: ] Should be fso.CopyFile strSF, strDst, true end if else fso.CopyFile strSF, strDst, true end if strCommandLine = strProg strPrPrms return = wshShell.run (strCommandLine, 0, TRUE) end if end sub Allows us to do a single change on the corporate background image and force it out to the desktops on user logon. Thank you, Mitchell D. Lawrence Director, Network Administrator ITS Department North Bay Hospital 1711 W. Wheeler Ave Aransas Pass, TX 78336 ph: (361) 758-0580 fx: (361) 758-0581 pg: (361) 270-0421 [EMAIL PROTECTED] [EMAIL PROTECTED] (home) ** Good | Cheap | Fast (Pick Two)** -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Passo, Larry Posted At: Tuesday, July 20, 2004 1:49 PM Posted To: ~AD Discussion~ Conversation: [ActiveDir] LastLogOn Subject: RE: [ActiveDir] LastLogOn Bginfo will show you the logon server but it doesnt show you the last logon value. It is still subject to the requirement that you need to query the last logon time from all of the DCs in the domain. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rutherford, Robert Sent: Tuesday, July 20, 2004 10:24 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] LastLogOn Oh yeh... that's a good idea. We have it on our servers, but yeh it would also work in the clients. I'll look into it. Cheers Tim. -Original Message- From: Tim Foster [mailto:[EMAIL PROTECTED] Sent: 20 July 2004 17:06 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] LastLogOn BgInfo from http://www.sysinternals.com/ntw2k/freeware/bginfo.shtml may help. Tim Foster From: Durant, Ryan A [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 20, 2004 11:42 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] LastLogOn Query every domain controller and store those results in a database. The number of domain controllers, amount of users and link speeds will determine how fast you can collect the stats. You may only be able to collect once a day or possibly once an hour. Have a logon script query the DB for the last logon value and have it pop up on their screen. You could also query a web page to get the values if you didn't want to worry about odbc and sql calls from the client machines. But you have to be a scripter to get this done I believe. Ryan From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rutherford, Robert Sent: Tuesday, July 20, 2004 6:26 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] LastLogOn Dear All, Not in anyway being a scripter. How would I get the date and time a user last logged on to pop up on their screen at logon? I guess it would be via the 'lastlogon' attribute? Linked into a login script? Cheers, Rob This e-mail and the information it contains are confidential and may be privileged. If you have received this e-mail in error please notify the sender immediately and delete the material from any computer. Unless you are the intended recipient, you should not copy this e-mail for any purpose
Re: [ActiveDir] LastLogOn
Hi Rob The lastLogon attribute is not replicated between DCs. Even if you were able to script something to do this, you would need to query all the DCs in the site (or the entire domain if you wanted better accuracy) and then sort the results. For most implementations this is simply not practical. With Windows 2003 AD things improve slightly with the lastLogonTimeStamp attribute, which is replicated between DCs in the same domain. By default it is only accurate to the nearest week (because of the need to keep replication traffic down to a respectable level). I don't know of any good way to achieve what you want to do. Tony -- Original Message -- Wrom: CUFPEGAUTFJMVRESKPNKMBIPBARHDMNNSKVFVWRKJVZCMHVIBGDADRZFSQHYUCDD Reply-To: [EMAIL PROTECTED] Date: Tue, 20 Jul 2004 14:25:59 +0100 Dear All, Not in anyway being a scripter How would I get the date and time a user last logged on to pop up on their screen at logon? I guess it would be via the 'lastlogon' attribute? Linked into a login script? Cheers, Rob This e-mail and the information it contains are confidential and may be privileged. If you have received this e-mail in error please notify the sender immediately and delete the material from any computer. Unless you are the intended recipient, you should not copy this e-mail for any purpose, or disclose its contents to any other person. The MCPS-PRS Alliance is not responsible for the completeness or accuracy of this communication as it has been transmitted over a public network. Whilst the MCPS-PRS Alliance monitors all communications for potential viruses, we accept no responsibility for any loss or damage caused by this e-mail and the information it contains. It is the recipient's responsibility to scan this e-mail and any attachments for viruses. Any e-mails sent to and from the MCPS-PRS Alliance servers may be monitored for quality control and other purposes. The MCPS-PRS Alliance Limited is a limited company registered in England under company number 03444246 whose registered office is at c/o 29-33 Berners Street, London, W1T 3AB. Sent via the WebMail system at mail.activedir.org List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] LastLogOn
Thanks for the info Tony It was a desire rather than a necessity but would have been useful. BR Rob -Original Message- From: Tony Murray [mailto:[EMAIL PROTECTED] Sent: 20 July 2004 16:13 To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] LastLogOn Hi Rob The lastLogon attribute is not replicated between DCs. Even if you were able to script something to do this, you would need to query all the DCs in the site (or the entire domain if you wanted better accuracy) and then sort the results. For most implementations this is simply not practical. With Windows 2003 AD things improve slightly with the lastLogonTimeStamp attribute, which is replicated between DCs in the same domain. By default it is only accurate to the nearest week (because of the need to keep replication traffic down to a respectable level). I don't know of any good way to achieve what you want to do. Tony -- Original Message -- Wrom: CUFPEGAUTFJMVRESKPNKMBIPBARHDMNNSKVFVWRKJVZCMHVIBGDADRZFSQHYUCDD Reply-To: [EMAIL PROTECTED] Date: Tue, 20 Jul 2004 14:25:59 +0100 Dear All, Not in anyway being a scripter How would I get the date and time a user last logged on to pop up on their screen at logon? I guess it would be via the 'lastlogon' attribute? Linked into a login script? Cheers, Rob This e-mail and the information it contains are confidential and may be privileged. If you have received this e-mail in error please notify the sender immediately and delete the material from any computer. Unless you are the intended recipient, you should not copy this e-mail for any purpose, or disclose its contents to any other person. The MCPS-PRS Alliance is not responsible for the completeness or accuracy of this communication as it has been transmitted over a public network. Whilst the MCPS-PRS Alliance monitors all communications for potential viruses, we accept no responsibility for any loss or damage caused by this e-mail and the information it contains. It is the recipient's responsibility to scan this e-mail and any attachments for viruses. Any e-mails sent to and from the MCPS-PRS Alliance servers may be monitored for quality control and other purposes. The MCPS-PRS Alliance Limited is a limited company registered in England under company number 03444246 whose registered office is at c/o 29-33 Berners Street, London, W1T 3AB. Sent via the WebMail system at mail.activedir.org List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ This e-mail and the information it contains are confidential and may be privileged. If you have received this e-mail in error please notify the sender immediately and delete the material from any computer. Unless you are the intended recipient, you should not copy this e-mail for any purpose, or disclose its contents to any other person. The MCPS-PRS Alliance is not responsible for the completeness or accuracy of this communication as it has been transmitted over a public network. Whilst the MCPS-PRS Alliance monitors all communications for potential viruses, we accept no responsibility for any loss or damage caused by this e-mail and the information it contains. It is the recipient's responsibility to scan this e-mail and any attachments for viruses. Any e-mails sent to and from the MCPS-PRS Alliance servers may be monitored for quality control and other purposes. The MCPS-PRS Alliance Limited is a limited company registered in England under company number 03444246 whose registered office is at c/o 29-33 Berners Street, London, W1T 3AB. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] LastLogOn
Title: LastLogOn Query every domain controller and store those results in a database. The number of domain controllers, amount of users and link speeds will determine how fast you can collect the stats. You may only be able to collect once a day or possibly once an hour. Have a logon script query the DB for the last logon value and have it pop up on their screen. You could also query a web page to get the values if you didn't want to worry about odbc and sql calls from the client machines. But you have to be a scripter to get this done I believe. Ryan From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rutherford, RobertSent: Tuesday, July 20, 2004 6:26 AMTo: [EMAIL PROTECTED]Subject: [ActiveDir] LastLogOn Dear All, Not in anyway being a scripter. How would I get the date and time a user last logged on to pop up on their screen at logon? I guess it would be via the 'lastlogon' attribute? Linked into a login script? Cheers, Rob This e-mail and the information it contains are confidential and may be privileged. If you have received this e-mail in error please notify the sender immediately and delete the material from any computer. Unless you are the intended recipient, you should not copy this e-mail for any purpose, or disclose its contents to any other person. The MCPS-PRS Alliance is not responsible for the completeness or accuracy of this communication as it has been transmitted over a public network. Whilst the MCPS-PRS Alliance monitors all communications for potential viruses, we accept no responsibility for any loss or damage caused by this e-mail and the information it contains.It is the recipient's responsibility to scan this e-mail and any attachments for viruses. Any e-mails sent to and from the MCPS-PRS Alliance servers may be monitored for quality control and other purposes.The MCPS-PRS Alliance Limited is a limited company registered in England under company number 03444246 whose registered office is at c/o 29-33 Berners Street, London, W1T 3AB.
RE: [ActiveDir] LastLogOn
Title: LastLogOn BgInfo from http://www.sysinternals.com/ntw2k/freeware/bginfo.shtml may help. Tim Foster From: Durant, Ryan A [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 20, 2004 11:42 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] LastLogOn Query every domain controller and store those results in a database. The number of domain controllers, amount of users and link speeds will determine how fast you can collect the stats. You may only be able to collect once a day or possibly once an hour. Have a logon script query the DB for the last logon value and have it pop up on their screen. You could also query a web page to get the values if you didn't want to worry about odbc and sql calls from the client machines. But you have to be a scripter to get this done I believe. Ryan From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rutherford, Robert Sent: Tuesday, July 20, 2004 6:26 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] LastLogOn Dear All, Not in anyway being a scripter. How would I get the date and time a user last logged on to pop up on their screen at logon? I guess it would be via the 'lastlogon' attribute? Linked into a login script? Cheers, Rob This e-mail and the information it contains are confidential and may be privileged. If you have received this e-mail in error please notify the sender immediately and delete the material from any computer. Unless you are the intended recipient, you should not copy this e-mail for any purpose, or disclose its contents to any other person. The MCPS-PRS Alliance is not responsible for the completeness or accuracy of this communication as it has been transmitted over a public network. Whilst the MCPS-PRS Alliance monitors all communications for potential viruses, we accept no responsibility for any loss or damage caused by this e-mail and the information it contains. It is the recipient's responsibility to scan this e-mail and any attachments for viruses. Any e-mails sent to and from the MCPS-PRS Alliance servers may be monitored for quality control and other purposes. The MCPS-PRS Alliance Limited is a limited company registered in England under company number 03444246 whose registered office is at c/o 29-33 Berners Street, London, W1T 3AB.
RE: [ActiveDir] LastLogOn
Title: Message Oh yeh... that's a good idea. We have it on our servers, but yeh it would also work in the clients. I'll look into it. Cheers Tim. -Original Message-From: Tim Foster [mailto:[EMAIL PROTECTED] Sent: 20 July 2004 17:06To: [EMAIL PROTECTED]Subject: RE: [ActiveDir] LastLogOn BgInfo from http://www.sysinternals.com/ntw2k/freeware/bginfo.shtml may help. Tim Foster From: Durant, Ryan A [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 20, 2004 11:42 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] LastLogOn Query every domain controller and store those results in a database. The number of domain controllers, amount of users and link speeds will determine how fast you can collect the stats. You may only be able to collect once a day or possibly once an hour. Have a logon script query the DB for the last logon value and have it pop up on their screen. You could also query a web page to get the values if you didn't want to worry about odbc and sql calls from the client machines. But you have to be a scripter to get this done I believe. Ryan From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rutherford, RobertSent: Tuesday, July 20, 2004 6:26 AMTo: [EMAIL PROTECTED]Subject: [ActiveDir] LastLogOn Dear All, Not in anyway being a scripter. How would I get the date and time a user last logged on to pop up on their screen at logon? I guess it would be via the 'lastlogon' attribute? Linked into a login script? Cheers, Rob This e-mail and the information it contains are confidential and may be privileged. If you have received this e-mail in error please notify the sender immediately and delete the material from any computer. Unless you are the intended recipient, you should not copy this e-mail for any purpose, or disclose its contents to any other person. The MCPS-PRS Alliance is not responsible for the completeness or accuracy of this communication as it has been transmitted over a public network. Whilst the MCPS-PRS Alliance monitors all communications for potential viruses, we accept no responsibility for any loss or damage caused by this e-mail and the information it contains.It is the recipient's responsibility to scan this e-mail and any attachments for viruses. Any e-mails sent to and from the MCPS-PRS Alliance servers may be monitored for quality control and other purposes.The MCPS-PRS Alliance Limited is a limited company registered in England under company number 03444246 whose registered office is at c/o 29-33 Berners Street, London, W1T 3AB.This e-mail and the information it contains are confidential and may be privileged. If you have received this e-mail in error please notify the sender immediately and delete the material from any computer. Unless you are the intended recipient, you should not copy this e-mail for any purpose, or disclose its contents to any other person. The MCPS-PRS Alliance is not responsible for the completeness or accuracy of this communication as it has been transmitted over a public network. Whilst the MCPS-PRS Alliance monitors all communications for potential viruses, we accept no responsibility for any loss or damage caused by this e-mail and the information it contains.It is the recipient's responsibility to scan this e-mail and any attachments for viruses. Any e-mails sent to and from the MCPS-PRS Alliance servers may be monitored for quality control and other purposes.The MCPS-PRS Alliance Limited is a limited company registered in England under company number 03444246 whose registered office is at c/o 29-33 Berners Street, London, W1T 3AB.
RE: [ActiveDir] LastLogOn
Title: Message Bginfo will show you the logon server but it doesnt show you the last logon value. It is still subject to the requirement that you need to query the last logon time from all of the DCs in the domain. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rutherford, Robert Sent: Tuesday, July 20, 2004 10:24 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] LastLogOn Oh yeh... that's a good idea. We have it on our servers, but yeh it would also work in the clients. I'll look into it. Cheers Tim. -Original Message- From: Tim Foster [mailto:[EMAIL PROTECTED] Sent: 20 July 2004 17:06 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] LastLogOn BgInfo from http://www.sysinternals.com/ntw2k/freeware/bginfo.shtml may help. Tim Foster From: Durant, Ryan A [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 20, 2004 11:42 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] LastLogOn Query every domain controller and store those results in a database. The number of domain controllers, amount of users and link speeds will determine how fast you can collect the stats. You may only be able to collect once a day or possibly once an hour. Have a logon script query the DB for the last logon value and have it pop up on their screen. You could also query a web page to get the values if you didn't want to worry about odbc and sql calls from the client machines. But you have to be a scripter to get this done I believe. Ryan From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rutherford, Robert Sent: Tuesday, July 20, 2004 6:26 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] LastLogOn Dear All, Not in anyway being a scripter. How would I get the date and time a user last logged on to pop up on their screen at logon? I guess it would be via the 'lastlogon' attribute? Linked into a login script? Cheers, Rob This e-mail and the information it contains are confidential and may be privileged. If you have received this e-mail in error please notify the sender immediately and delete the material from any computer. Unless you are the intended recipient, you should not copy this e-mail for any purpose, or disclose its contents to any other person. The MCPS-PRS Alliance is not responsible for the completeness or accuracy of this communication as it has been transmitted over a public network. Whilst the MCPS-PRS Alliance monitors all communications for potential viruses, we accept no responsibility for any loss or damage caused by this e-mail and the information it contains. It is the recipient's responsibility to scan this e-mail and any attachments for viruses. Any e-mails sent to and from the MCPS-PRS Alliance servers may be monitored for quality control and other purposes. The MCPS-PRS Alliance Limited is a limited company registered in England under company number 03444246 whose registered office is at c/o 29-33 Berners Street, London, W1T 3AB. This e-mail and the information it contains are confidential and may be privileged. If you have received this e-mail in error please notify the sender immediately and delete the material from any computer. Unless you are the intended recipient, you should not copy this e-mail for any purpose, or disclose its contents to any other person. The MCPS-PRS Alliance is not responsible for the completeness or accuracy of this communication as it has been transmitted over a public network. Whilst the MCPS-PRS Alliance monitors all communications for potential viruses, we accept no responsibility for any loss or damage caused by this e-mail and the information it contains. It is the recipient's responsibility to scan this e-mail and any attachments for viruses. Any e-mails sent to and from the MCPS-PRS Alliance servers may be monitored for quality control and other purposes. The MCPS-PRS Alliance Limited is a limited company registered in England under company number 03444246 whose registered office is at c/o 29-33 Berners Street, London, W1T 3AB.
