Re: Re: Question about Active Directory and last time user has logged on

[gjgowey () tmo blackberry net]

A little vbscript that does an adsi query to get all the controllers then queries each one preserving the newest date 
can solve this.  15 lines of code maybe.

Sent from my BlackBerry wireless handheld.

-----Original Message-----
From: "Roger A. Grimes" <roger () banneretcs com>

Date: Fri, 31 Aug 2007 16:31:57 
To:<jasonr_22 () hotmail co uk>, <security-basics () securityfocus com>
Subject: RE: Re: Question about Active Directory and last time user has logged on


Of course you still have to find the domain controller the person last
logged on to collect the event. 

Roger

*****************************************************************
*Roger A. Grimes, InfoWorld, Security Columnist 
*CPA, CISSP, CISA, MCSE: Security (2000/2003), CEH, yada...yada...
*email: roger_grimes () infoworld com or roger () banneretcs com
*Author of Windows Vista Security: Securing Vista Against Malicious
Attacks (Wiley)
*http://www.amazon.com/Windows-Vista-Security-Securing-Malicious/dp/0470
101555
*****************************************************************


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of jasonr_22 () hotmail co uk
Sent: Friday, August 31, 2007 7:32 AM
To: security-basics () securityfocus com
Subject: Re: Re: Question about Active Directory and last time user has
logged on


Or enable auditing in Group policy for sucessful logins and you dont
have to spend a penny.

Regards,

Jason