|
I don't mean to pull a shameless plug for a different list here but there has been some discussion and work abounds on another ADSI list, it would make this mail WAY to long to post so if any of you want it just mail me off list.
Tony if this is not appropriate please let me know I will not do this again.
Regards, Carlos Magalhaes
-----Original
Message-----
Rick
That's a tricky one.� There are two attributes (pwdLastSet and lastLogon) that could help you.� The unfortunate thing is that these attributes are not replicated between DCs.� This means that in order to get up-to-date information you need to query every DC in the domain.� This may be ok for small environments, but is impractical for organisations with larger infrastructures.
Things improve with Windows Server 2003 AD with the introduction of the lastLogonTimestamp attribute which *is* replicated and gives an approximate time of the last logon.� It's approximate because it is only updated at 1 week intervals (to cut down on replication traffic).� This feature requires the Windows Server 2003 domain functional level.
Some further info here.
http://www.microsoft.com/technet/treeview/default.asp?url="">
http://msdn.microsoft.com/library/default.asp?url="">
Tony -----Original Message----- From: Jones, Rick J.(Desktop Engineering) [mailto:[EMAIL PROTECTED] Sent: Freitag, 28. M�rz 2003 00:18 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Last Logon Details
Hi;
I am trying to retrieve the last logon account information for a specific computer account from Active Directory.
Does anyone have a script to do this?
Or...
If you have another way to determine when the system last logged onto the network.� This is so we can verify that the account is an active entry.
Rick J. Jones
List info�� : http://www.activedir.org/mail_list.htm List FAQ��� : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info�� : http://www.activedir.org/mail_list.htm List FAQ��� : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ |
------------------------------------------------------------- This email and any files transmitted are confidential and intended solely for the use of the individual or entity to which they are addressed, whose privacy should be respected. Any views or opinions are solely those of the author and do not necessarily represent those of the Trencor Group, or any of its representatives, unless specifically stated.
Email transmission cannot be guaranteed to be secure, error free or without virus contamination. The sender therefore accepts no liability for any errors or omissions in the contents of this message, nor for any virus infection that might result from opening this message. Trencor is not responsible in the event of any third party interception of this email. If you have received this email in error please notify [EMAIL PROTECTED] For more information about Trencor, visit www.trencor.net <http://www.trencor.net>
