On 18 Oct 2001, at 13:29, George, Jason wrote: > I am looking for a tool that will tell me the last time a user has logged in > to any server in the domain
Because "any server" is more than "any domain controller" in most domains, all you can do is to enable security logging on all servers and check these logs on every server. The following comand line tool will help here: http://www.heysoft.de/nt/eventlog/ep-re.htm#r528 > and other SAM stats. Generally logging of Security events will give you much info, but if you just are interested in the last access time for some SAM subkeys, you could use RegLast as well: http://www.heysoft.de/nt/reg/ep-regd.htm#Last Frank Heyne