Re: Domain access time

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Not accurately. You can get info. on the last logon time, via the lastLogon
attribute, however it's not replicated so you need to pull it off each DC
and calculate which is the most recent. Richard Mueller has a script that
does this, so Google for it.

You can also use the Security Event log but again that is on a per DC basis
and requires some serious filtering to get what you want.

What are you trying to achieve exactly?

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net


.

Relevant Pages

  • Re: "Last logon time" & "Last time the account was authenticated by AD
    ... We have the requirement to identify the last time that account ... the updated Last logon time. ... corresponds to the value of the lastLogon attribute. ... You must query all DC's ...
    (microsoft.public.windows.server.active_directory)
  • Re: "Last logon time" & "Last time the account was authenticated by AD
    ... the updated Last logon time. ... the last time an account authenticated in AD will be the date/time ... corresponds to the value of the lastLogon attribute. ... The login time/date is only replicated in windows 2003, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Question about Active Directory and last time user has logged on
    ... then the following LDAP attribute holds the last logon time: ... You can extract that using a simple vbscript. ...
    (Security-Basics)
  • Re: lastlogon attribute
    ... If when a use logon to the domain, the lastlogon attribute is updated, then ... how can I get the LAST logon time? ... Every 10 hours in between it is simply refreshing the TGT. ... > Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.security)