Announcement

Collapse
No announcement yet.

Last Logon Stamp of VPN users

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Last Logon Stamp of VPN users

    Hi,


    We have around 500 users who authenticate using VPN, we are auditing the AD & found that users those who are suing VPN are not updating their last logon stamp in AD,

    users those who use VPN and access objects in AD without any issue where this users are authenticating & why last logon stamp for VPN users are not updating in AD.

    How to find out last logon stamp for VPN users in AD.

    Regards
    Muneer

  • #2
    Re: Last Logon Stamp of VPN users

    Hi,

    All my DC are win2k3 but the functional level is windows 2000 native.

    few users are using vpn to access email(using OWA & outlook) and files.

    in this case users lastlogon will get update or not.

    if not then is there a solution/procedure/teps to find out those(VPN users) lastlogontimestamp in AD.

    Regards
    Muneer

    Comment


    • #3
      Re: Last Logon Stamp of VPN users

      This will find the last logon for the user

      http://www.rlmueller.net/Last%20Logon.htm

      Comment


      • #4
        Re: Last Logon Stamp of VPN users

        Hi,

        Thanks for the reply,

        My question is, when VPN users loggedin and access file in domain or email what will happen to lastlogonstamp...

        will it update in AD or NOT..

        regards
        Muneer

        Comment


        • #5
          Re: Last Logon Stamp of VPN users

          As I understand it, are they logging on to the domain from the login screen via VPN or logging on locally to their machines and then VPN'ing in?

          If its the latter, then i would say it would not update their logon stamp as they have not logged in and authenticated directly, however they are using cache credentials to access their network resources.

          Also how is your VPN client/server set up? is it via software such as VPN Secure Remote / ACE or directly with RRAS/IAS?

          Andy
          Last edited by madman045; 17th April 2008, 16:38.

          Comment


          • #6
            Re: Last Logon Stamp of VPN users

            [Hi,

            We are using Cisco Concentrator with Radius server.

            Domain Role : Windows 2000 Native
            Forest : Window 2000(Default)

            Regards
            Muneer

            Comment


            • #7
              Re: Last Logon Stamp of VPN users

              Yes but do your users actually logon properly or do they logon then connect via VPN software as i'm presuming they do??

              If it is the latter then they will NOT update the lastlogon timestamp as they are in fact not logging onto the network.

              Comment

              Working...
              X