No announcement yet.

last lgon on server 2003

  • Filter
  • Time
  • Show
Clear All
new posts

  • last lgon on server 2003


    how can i see on active directory 2000 the last logon to the domain(for exemple i want to see which users didnt logon to the domain the last 60 days)
    in active directory 2003 i can do this task with query but this option does not exist in active directory 2000

    thanks for your help


  • #2
    Re: last lgon on server 2003

    If your domain is at Windows Server 2003 functional level, there is a new attribute called lastLogonTimeStamp you can use.

    Otherwise, you can use the lastLogon attribute which is stored in Active Directory.
    However the lastLogon attribute is not replicated, a different value can be stored in the copy of Active Directory on each Domain Controller. Therefore you must query every DC, and check for duplicate userDN names afterwards.
    This article by Richard Mueller give a good description and sample of how you can make use of the lastLogon attribute in a multi DC environment:


    This posting is provided "AS IS" with no warranties, and confers no rights.


    ** Remember to give credit where credit's due **
    and leave Reputation Points for meaningful posts