Desktop

vbscript, I used to do as follows in our Windows 2003 domain. I used an LDAP query on each DC but you probably won't need to do that. I used ADO:

Set objCommand = CreateObject("ADODB.Command")
Set objConnection = CreateObject("ADODB.Connection")
objConnection.Provider = "ADsDSOObject"
objConnection.Open "Active Directory Provider"
objCommand.ActiveConnection = oConnection
objCommand.CommandText = sQuery
objCommand.Properties("Page Size") = 100
objCommand.Properties("Timeout") = 60
objCommand.Properties("Cache Results") = False

strDC = "YourDCname"
strDomain = "Your domain name"
strBase = "LDAP://" & strDC & "/" & strDomain & ">"
strFilter = "(objectClass=computer)"
strAttributes = "distinguishedName,lastLogon,Name"
strQuery = strBase & ";" & strFilter & ";" & strAttributes & ";subtree"

objCommand.CommandText = sQuery
Set objRecordSet = objCommand.Execute

That gets all of the computers into a recordset that you can loop through and list out the lastlogondate.

I use PowerShell these days. Far, far easier. I know that it won't run on Windows 2000 but you can access Windows 2000 from a Windows 2003 or XP PowerShell install. You're on your own with this because I can't test it but it's worth installing PS and getting hold of Quest Active Directory Tools for PS. That will let you pull out what you want in seconds. The Quest blurb seems to suggest that it will give you access.

The reason I push PS is for vb you'll have the job of converting the "ticks since 1/1/1601" into something useful! If you reckon you might want to go down this route, post again and I'll set that out.

There is a property "LastLogonTimeStamp" that might do. It's not as accurate.

Neil :)

Because of the way that this page deals with stuff, I've had to remove the "less than", "<" from in front of "LDAP", above, so you could see it.

Hi, thanks a lot. I'll give that a shot later.

Will PowerShell run on a Win 2003 DC server in domain 2000 functional level?

If it does then I'll just install that then.

I also need to up our functional level soon anyway.

PowerShell will run since it is dependent on the OS not he AD version. It should return any results that you would get from a windows 2000 domain, but it may be able to get the same results that you would get from a 2003 AD domain. I think the functional level just has to do with communication and replication but I am not 100% on that.

Bill

And be sure to add the Quest AD tools. Add PowerGUI as well. Native PS 1.0 is appalling when dealing with AD.

:)

Thanks!

I see PS2 for server 2003 is available for download from the MS website. Which version would be better to use?

Still get the Quest tools, though. I'm using PS2 on 2003 without any problems.

http://www.quest.com/powershell/activeroles-server.aspx

If I got it right, then this site will allow some basic html in the posts. On the other hand, this means that the character "less than" < will be seen as the beginning of a long strange tag, thus hiding everything after it, (until you reach a ">").
So you need to enter it as an html-entity: "&lt"

Edit: I just noted that if you edit a post, then you have to re-escape everything again!

Couldn't POSSIBLY be the site.

:)