Re : Question about Active Directory and last time user has logged on

[abdelhakim aliane <hakim_al () yahoo fr>]

Hi, that's exactly what we get in our AD with a good tool known as Userlock. Download a free version and deploy it then 
you will see the results. Many questions will be solved like : Who is logged Where and When ? For how many time ? You 
can restrict machine/user access by time or by IP range etc...
Find it here : http://www.isdecisions.com (Know, Control & Act)

Aliane.

----- Message d'origine ----
De : "Ali, Saqib" <docbook.xml () gmail com>
À : Mary Hendrix <maryhendrix () gmail com>
Cc : security-basics () securityfocus com
Envoyé le : Mercredi, 29 Août 2007, 0h55mn 41s
Objet : Re: Question about Active Directory and last time user has logged on


On 8/28/07, Mary Hendrix <maryhendrix () gmail com> wrote:
> Is there a way to find out the last time a user has logged into a domain?

If you have AD, then the following LDAP attribute holds the last logon time:

{lastLogon}

You can extract that using a simple vbscript.

Note: The returned value will be the NT System time. To convert to
regular time use the following:
w32tm /ntte {returned int}

saqib
http://security-basics.blogspot.com/


      ______________________________________________________________________________ 
Stockage illimité de vos mails avec Yahoo! Mail. Changez aujourd'hui de mail !