Re: Get User Last Logon Information

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Not unless you are tracking this information. AD is used to authenticate your credentials on behalf of the LSA of the machine you are authenticating with. Once your credentials are verified the computer processes the logon. Therefore, AD doesn't track which machine you logon to. It has no idea, nor does it care. There are two main ways of getting the info. you want:

1. Auditing logon events and pulling this info. into a central database. Filtering the info. and then reporting against it.
2. Logging the logon and logoff events via logon and logoff scripts by writing this info. to a database, and the reporting against that.


You can get the last logon time with a bit of work -there's 3rd party scripts.

Systems Management tools, such as SMS or LANDesk also track this info. as part of their hardware inventory.

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net

.



Relevant Pages

  • Re: Child Domain access
    ... should be able to authenticate in the child domain with domain / ent admin ... account which exists in the TRUSTED parent domain? ... >You can be authenticated by any domain that you have credentials in. ... >So you logon TO A PC - using a set of credentials from a particular domain ...
    (microsoft.public.windows.server.active_directory)
  • Re: Native Mode possible problems...help!
    ... their password will still be able to logon to an NT 4.0 - but using their ... Windows 2003/2000/NT ... > They NT 4.0 domain controllers will still be able to authenticate users, ... > Why not just upgrade the BDCs to Windows 2000 Server? ...
    (microsoft.public.windows.server.general)
  • Re: Child Domain access
    ... > You wrote...."So you logon TO A PC using a set of credentials from a ... > should be able to authenticate in the child domain with domain / ent admin ... > account which exists in the TRUSTED parent domain? ... So if the PC is in the child domain you can logon to IT ...
    (microsoft.public.windows.server.active_directory)
  • Outlook Anywhere with Cross Realm Trust
    ... I have the trust configured and it will allow me to authenticate using OWA. ... Task Category: Logon ... An account failed to log on. ... This event is generated when a logon request fails. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Advanced Digest Authentication Failure
    ... An IIS 6.0 server setup on a Windows Server 2003 Domain Controller is no ... authenticate clients using Advanced Digest Authentication, ... : Logon Failure: ... : Caller User Name: - ...
    (microsoft.public.inetserver.iis.security)