USER ID

There are a lot of them out there. If you have the Windows Resource Kit, there is USRSTAT.EXE
This command-line app will give you the last logon date the user accounts in your domain last logged on. If an account has never logged on, it says NEVER.

You can also download a copy of Dameware NT Utilities. It has the same feature, but in a wonderful GUI. www.dameware.com

USRSTAT can take weeks on a large estate.

If all profiles are non-mandatory just write a batch file to look at the user.dat last modified date for all users. Its much quicker.

Using USRSTAT.EXE how can i generate the report. When i run the file in dos mode it only display few user and i am having difficulties. can anybody help me. If possible please provide the steps that i need to follow up.

Without other software you can built your own tool:
1. Enable Audit for Logon/Logoff in UserManager
2. Use ?dumpel.exe? from Resource kit to export NT Events to a text file. Make a batch file like this:
C:\program files\rksupport\dumpel.exe -f securityevents.txt -s \\ComputerName -l security -t -d 30
3. After you run this batch file you will obtain the securityevents.txt file.
3. Now you can import this file in Excel or Access and apply filters or queries.
Also you can automate this job with task scheduler and you must change the Event Log Settings: Maximum Log Size and Overwrite Events

This question was auto closed due to inactivity