Last logon time in Active Directory - solution

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Chris Szilagyi (chris_at_groupinfo.com)
Date: 09/09/04 

Date: 9 Sep 2004 09:01:27 -0700

Hello:

Recently we were trying to find a way to obtain the last logon
date/time for users within Active Directory. There is no native
functionality in the Active Directory Users & Computers MMC to do
this, however Microsoft has an addon (Account Lockout and Management
Tools) that will allow you to do this directly in the MMC:

http://www.microsoft.com/downloads/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en

I found this and thought I would share since it is not well known.
Other posts around Usenet mention using a script, but this is much
easier for most users. It simply adds a new tab to the Properties
page for any user, called "Additional Account Info", that gives some
info such as:

- Date of last password set
- Date of next password expiration
- Last logon and last logoff timestamp
- SID and GUID
- Last bad logon timestamp
- Logon count, bad password count

The documentation for it is scarce. Simply download the package
"ALTools.exe" from the above link, extract "acctinfo.dll" to your
%systemroot%\system32\ directory, and register this DLL by:

regsvr32 %systemroot%\system32\acctinfo.dll

Hope this helps others as well!!! ..... 

--
Chris
Quantcast