Re: Last logged in for user accounts

From: Joe Richards [MVP] (humorexpress_at_hotmail.com)
Date: 07/10/04


Date: Fri, 09 Jul 2004 22:10:00 -0400

As for the machine, you will need to look at the security log assuming you have
auditing enabled for logon events.

As for when the last logon occurred, the concept of logons is a bit different in
  Windows, such that you will have to query every DC for the lastlogon attribute
and then sort them out.

In K3, there is a new attribute available called lastLogonTimeStamp that has the
a time stamp that is up to 10 days old. It is simply to help find out what IDs
are still being used. You can adjust the latency but it isn't good to crank it
up to say daily as that adds considerable replication if you have a large
environment of a couple of hundred thousand users or people over slow wan links.

   joe

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net
Jason Hurley wrote:
> Trying to find out last time user logged in to the system.
> 
> NOS: Windows 2000 Active Directory
> 
> I'm a born and raised Novell guy from the past and 
> features I'm used to having availible to me though Netware 
> I wish I had in Windows. Nonetheless, I do believe the MS 
> does have the same type of features as Novell just in 
> different places and under different names. What I'm 
> looking for is how to tell the last time a user logged in 
> the domain and what was the last computer that user 
> accessed. If I just use the security log it may be over-
> written prior the the users last login.  Can anyone help 
> me here?
> 
> Thanks,
> Novell Trader


Relevant Pages

  • Re: Last logged in for user accounts
    ... >auditing enabled for logon events. ... >Joe Richards Microsoft MVP Windows Server Directory ... >> features I'm used to having availible to me though ... >> does have the same type of features as Novell just in ...
    (microsoft.public.win2000.active_directory)
  • Re: Login to Novell NetWare from my own GINA DLL
    ... We have our own GINA.DLL library for Windows logon. ... connect to the Novell Netware server we successfully execute NWDSLogin, ... there's a connection created called the "monitored" ...
    (microsoft.public.win32.programmer.kernel)
  • Re: Logon to Novell at the same time as TS (same credentials)?
    ... Vera Noest wrote: ... Trying to logon to a Novell server with Windows 2003R2 ...
    (microsoft.public.windows.terminal_services)
  • Re: Logon to Novell at the same time as TS (same credentials)?
    ... Thanks, that was already unchecked, but in the same area I found the "always prompt for password" setting and checked that. ... Now users do get the opportunity to log in to Novell but it looks like they will have to enter name and password at two prompts. ... Trying to logon to a Novell server with Windows 2003R2 terminal ...
    (microsoft.public.windows.terminal_services)
  • Re: How to force a logoff in a logon script?
    ... Windows has a registry key that governs which UI will be presented ... the unauthorized user cancels the logon dialog and goes away ... system, but complains that there was no cancel button, only an OK ...
    (microsoft.public.windows.server.scripting)

Loading