Re : Question about Active Directory and last time user has logged on

Hi, that's exactly what we get in our AD with a good tool known as Userlock. 
Download a free version and deploy it then you will see the results. Many 
questions will be solved like : Who is logged Where and When ? For how many 
time ? You can restrict machine/user access by time or by IP range etc...
Find it here : http://www.isdecisions.com (Know, Control & Act)

Aliane.

----- Message d'origine ----
De : "Ali, Saqib" <docbook.xml@gmail.com>
À : Mary Hendrix <maryhendrix@gmail.com>
Cc : security-basics@securityfocus.com
Envoyé le : Mercredi, 29 Août 2007, 0h55mn 41s
Objet : Re: Question about Active Directory and last time user has logged on


On 8/28/07, Mary Hendrix <maryhendrix@gmail.com> wrote:
> Is there a way to find out the last time a user has logged into a domain?

If you have AD, then the following LDAP attribute holds the last logon time:

{lastLogon}

You can extract that using a simple vbscript.

Note: The returned value will be the NT System time. To convert to
regular time use the following:
w32tm /ntte {returned int}

saqib
http://security-basics.blogspot.com/


      
______________________________________________________________________________ 
Stockage illimité de vos mails avec Yahoo! Mail. Changez aujourd'hui de mail !