Re: Last logon time in Active Directory - solution

From: Mark Renoden [MSFT] (markreno_at_online.microsoft.com)
Date: 09/09/04


Date: Fri, 10 Sep 2004 09:20:25 +1000

Hi Chris

Good documentation around this toolkit and account lockout in general is
found at:

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/bpactlck.mspx

Kind regards

-- 
Mark Renoden [MSFT]
Windows Platform Support Team
Email: markreno@online.microsoft.com
Please note you'll need to strip ".online" from my email address to email 
me; I'll post a response back to the group.
This posting is provided "AS IS" with no warranties, and confers no rights.
"Chris Szilagyi" <chris@groupinfo.com> wrote in message 
news:2aab79d7.0409090801.1fca853c@posting.google.com...
> Hello:
>
> Recently we were trying to find a way to obtain the last logon
> date/time for users within Active Directory.  There is no native
> functionality in the Active Directory Users & Computers MMC to do
> this, however Microsoft has an addon (Account Lockout and Management
> Tools) that will allow you to do this directly in the MMC:
>
> http://www.microsoft.com/downloads/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en
>
> I found this and thought I would share since it is not well known.
> Other posts around Usenet mention using a script, but this is much
> easier for most users.  It simply adds a new tab to the Properties
> page for any user, called "Additional Account Info", that gives some
> info such as:
>
> - Date of last password set
> - Date of next password expiration
> - Last logon and last logoff timestamp
> - SID and GUID
> - Last bad logon timestamp
> - Logon count, bad password count
>
> The documentation for it is scarce.  Simply download the package
> "ALTools.exe" from the above link, extract "acctinfo.dll" to your
> %systemroot%\system32\ directory, and register this DLL by:
>
> regsvr32 %systemroot%\system32\acctinfo.dll
>
> Hope this helps others as well!!! .....
>
> --
> Chris 


Relevant Pages

  • RE: Event ID 537 and Kerberos
    ... a logon type of 3 translates to Network. ... Click Services tab and select Hide All Microsoft Services and Disable ... Step 4: Configure account lockout policy. ... and then click Account Lockout Policy. ...
    (microsoft.public.windows.server.sbs)
  • RE: Logon Failures
    ... logon failures from a external address. ... First, please look at the SBS security event log, and let me know the event ... Configure account lockout policy. ...
    (microsoft.public.windows.server.sbs)
  • Re: EVent ID 529- Need some interpretation
    ... password policy including password changes occur frequently. ... Account Lockout Threshhold ... login failures from other child domain. ... Logon Failure: ...
    (microsoft.public.windows.server.active_directory)
  • Re: Authentication issue
    ... troubleshooting account lockout issue is complicated. ... Please enable the user logon audit in your domain. ... If the client computer of that user is running Windows XP. ...
    (microsoft.public.win2000.networking)
  • Re: Account LOCKOUTS
    ... David C wrote: ... > We are using Active directory and have just got our users ... > are no experinecing problem with there account lockout ...
    (microsoft.public.win2000.security)