RE: Question about Active Directory and last time user has logged on

Mary,

There is a "hidden" DLL in the Windows 2003 Resource Kit called Acctinfo.dll
You may be able to download this file by itself instead of the entire
resource kit.

This file needs to be registered on whichever machine you are accessing
Active Directory Users and Computers from.

Once you download it run the following at a command prompt on the machine
that you access AD Users and Computers from: regsvr32 C:\"path to the
dll"\acctinfo.dll

This should all be one line and this will register the DLL.

Once this is done go into AD Users and Computers and you'll see in the
Properties dialog for a user there is a new Tab called "Additional Account
Info".  You will see that one of the items towards the bottom is Last Logon.

Hope this helps.  I haven't tried this in a 2000 Environment.

Justin

-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com] On
Behalf Of Mary Hendrix
Sent: Tuesday, August 28, 2007 2:36 PM
To: security-basics@securityfocus.com
Subject: Question about Active Directory and last time user has logged on

Is there a way to find out the last time a user has logged into a domain?

Thanks in advance

Mary