Re: Last Logon Information
- From: "Victor Pereira" <taintmode@xxxxxxxxxxxx>
- Date: Fri, 20 May 2005 16:17:52 -0300
That's it!
My Domain Functional Leve is Windows 2000 native.
Thanks for all,
Victor Pereira
"Jody Flett" <news@xxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:e0zUtqWXFHA.228@xxxxxxxxxxxxxxxxxxxxxxx
>
> Victor
>
> Check the Domain functional level. Go into AD Users and computers and
> right click on the domain and select Domain Functional level.
>
> Thanks
>
> Jody
>
> "Victor Pereira" <taintmode@xxxxxxxxxxxx> wrote in message
> news:ezONrnUXFHA.1468@xxxxxxxxxxxxxxxxxxxxxxx
>>
>> Hi Al,
>> I didn't understand your question. I had migrated my domain to 2003 in
>> april.
>>
>> Thanks,
>>
>> Victor
>> "Al Mulnick" <amulnick_No_SPAM@xxxxxxxxxxx> wrote in message
>> news:%23DKOKfUXFHA.2600@xxxxxxxxxxxxxxxxxxxxxxx
>>> Did you switch to forest functional level of 2003? If not, then it won't
>>> be present. You'll also have to wait about 8 days before you'll see
>>> that information populated.
>>>
>>> Al
>>>
>>>
>>>
>>>
>>>
>>> "Victor Pereira" <taintmode@xxxxxxxxxxxx> wrote in message
>>> news:%23mvX$RUXFHA.2080@xxxxxxxxxxxxxxxxxxxxxxx
>>>> Hi,
>>>> firstly Jody and Jim, thanks for your reply i will install this tool
>>>> ASAP.
>>>>
>>>> Now, i'm getting the attribute lastLogontimestamp, but i'm reciving the
>>>> following error : " Active Directory: The directory property cannot be
>>>> found in the cache". I'm in a win2k3 domain. What could it be ? I
>>>> migrated my w2k domain to a w2k3 domains.. in the kb i found this link:
>>>> http://support.microsoft.com/default.aspx?scid=kb;en-us;886705 .
>>>>
>>>> Thanks in advance,
>>>>
>>>> Victor
>>>>
>>>>
>>>> "Jody Flett, JMF Computers" <news@xxxxxxxxxxxxxxxxxxxxxx> wrote in
>>>> message news:e2EIccRXFHA.1040@xxxxxxxxxxxxxxxxxxxxxxx
>>>>>I could not find the KB article 204718, but for further information in
>>>>>2003 the attribute replicated is lastLogonTimestamp. The LastLogon
>>>>>attribute is still not replicated in 2003. By default the
>>>>>lastlogontimestamp is updated with a date if the lastlogon time is a
>>>>>week older than the time currently stamped in lastLogontimestamp. i.e
>>>>>the lastlogontimestamp is accurate to within a week.
>>>>>
>>>>> You can't really use lastlogon to detect simultaneous logon, as you
>>>>> have no way of knowing if a user has logged out since their last
>>>>> logon. The tool that Jim mentions can be used for that, or
>>>>> alternatively some other means of logging the users logon and logoff
>>>>> actions.
>>>>>
>>>>> The lastlogon value is a good indication of account inactivity,
>>>>> however as Jim mentions it is not a definative source for determining
>>>>> if an account is in use or not.... in Domains I have managed where
>>>>> there are host accounts for unix based access or accounts that do not
>>>>> do a proper interactive logon to the domain, I have found that the
>>>>> lastlogon value is not updated in all cases.
>>>>>
>>>>> Thanks
>>>>>
>>>>> Jody
>>>>>
>>>>> "Jim McBee (MVP)" <jmcbee@xxxxxxxxxxxxxxxxxx> wrote in message
>>>>> news:uotJjVNXFHA.828@xxxxxxxxxxxxxxxxxxxxxxx
>>>>>> Victor:
>>>>>> The last logon information is replicated once you switch to
>>>>>> Windows 2003 forest functional mode in your forest. At least is is
>>>>>> supposed to. I have noticed some inconsistent results in large ADs.
>>>>>> See KB 204718 for information about this feature. Search on "Last
>>>>>> Logon" in that KB article.
>>>>>>
>>>>>> If you are looking to limit simultaneous logons, take a look at
>>>>>> this:
>>>>>> http://mostlyexchange.blogspot.com/2005/03/limiting-simultaneous-logins-to-active.html
>>>>>>
>>>>>> --
>>>>>> Jim McBee
>>>>>> Blog: http://mostlyexchange.blogspot.com
>>>>>> Stuff: http://geekbargains.blogspot.com
>>>>>>
>>>>>>
>>>>>>
>>>>>> "Victor Pereira" <taintmode@xxxxxxxxxxxx> wrote in message
>>>>>> news:OyrJcqKXFHA.1152@xxxxxxxxxxxxxxxxxxxxxxx
>>>>>>> Hi, i wrote a tool to get an user's lastlogon. I know that last
>>>>>>> logon isn't replicated so i'm getting this information from all dcs
>>>>>>> until here, no problems.
>>>>>>>
>>>>>>> But i want to know: When the lastLogon is replicated ? When i try to
>>>>>>> access my Exchange account lastLogon is changed, when i access a
>>>>>>> network share lastLogon is changed.. so is almost impossible to
>>>>>>> detect a simultaneous login, right ?
>>>>>>>
>>>>>>> Thanks in advance,
>>>>>>>
>>>>>>> Victor
>>>>>>>
>>>>>>>
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>>
>
>
>
.
- References:
- Last Logon Information
- From: Victor Pereira
- Re: Last Logon Information
- From: Jim McBee \(MVP\)
- Re: Last Logon Information
- From: Jody Flett, JMF Computers
- Re: Last Logon Information
- From: Victor Pereira
- Re: Last Logon Information
- From: Al Mulnick
- Re: Last Logon Information
- From: Victor Pereira
- Re: Last Logon Information
- From: Jody Flett
- Last Logon Information
- Prev by Date: Re: Hiding Telephone number from AD search
- Next by Date: Existing roaming profiles and folder redirection.
- Previous by thread: Re: Last Logon Information
- Next by thread: Re: Last Logon Information
- Index(es):
Relevant Pages
|
