RE: Re: Question about Active Directory and last time user has logged on

["Roger A. Grimes" <roger () banneretcs com>]

Dumpsec's an oldie but a goodie. Now called dumpacls.

Dumpsec's not from Sysinternals.com, it's from SomarSoft.

Available here.
http://www.systemtools.com/cgi-bin/download.pl?DumpAcl 

If I remember correctly there is an option you may have to check to make
sure it queries all DC's.

Roger

*****************************************************************
*Roger A. Grimes, InfoWorld, Security Columnist 
*CPA, CISSP, CISA, MCSE: Security (2000/2003), CEH, yada...yada...
*email: roger_grimes () infoworld com or roger () banneretcs com
*Author of Windows Vista Security: Securing Vista Against Malicious
Attacks (Wiley)
*http://www.amazon.com/Windows-Vista-Security-Securing-Malicious/dp/0470
101555
*****************************************************************


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of jacques.itmagic () gmail com
Sent: Wednesday, August 29, 2007 5:11 AM
To: security-basics () securityfocus com
Subject: Re: Re: Question about Active Directory and last time user has
logged on

Dumpsec from Systeminternals.com, will also check the true last logon
accross all DC's in AD.