Announcement

Collapse
No announcement yet.

Dsquery question

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Dsquery question

    Hi there,

    Im trying to find all user accounts in our domain that have been inactive for at least 8 weeks.

    I know the following command works so far ::

    dsquery user -inactive 8

    however, im wondering if this command should be ran on all Domain Controllers or if the dsquery does an enterprise wide search.

    Please let me know and if for some reason it differs from one Domain Controller to the other, can you guys bring any suggestion on how to properly approach this?

    Thanks in advance

  • #2
    Re: Dsquery question

    im wondering if this command should be ran on all Domain Controllers
    No, Dsquery.exe's 'inactive' paramameter use the lastLogonTimeStamp attribute. And this attribute (unlike the lastLogon attribute) is replicated in active directory.
    notes,
    • The lastLogonTimeStamp attribute is available only when the Domain Functional Level is 'Windows Server 2003'
    • The lastLogonTimeStamp attribute is (unlike the lastLogon attribute) not up to the minute, it is only updated when the user logs-on if the old value is more than 14 days in the past.
    Additionally,
    http://forums.petri.com/showpost.php...58&postcount=5


    \Rems

    This posting is provided "AS IS" with no warranties, and confers no rights.

    __________________

    ** Remember to give credit where credit's due **
    and leave Reputation Points for meaningful posts

    Comment

    Working...
    X