Windows Forum

Ask something
Discussion Locked

Active Directory Last Logon Time

0 helpful
5 replies

by rkelly

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I want a quick and simple way to find the LastLogon user attribute for all users in my AD domain. I don't want any third party utilities and I would rather not update the schema if I have to.

5 replies

by terminator

If you go to active directory users and computers snap in, select your domann, right click and go to properties, then group policy, then edit, then under computer configuration, under windows settings, under security settings, local policies, security options and change policy "do not display last user name in logon screen"

Hope it helps

by shanghai sam

Not looking for this - I can do this with a GPO or with a login script. I need to find some stuff from AD. If you want another go look at my comment

by rkelly

Maybe I didn't state this a well as I could have. The LastLogon user attribute is contained witin the schema and pertains to the Last Logon Time of every individual user on the network. I need a simple way to get this information out of AD (I do notwant to use auditing of user logon) so I can tell who hasn't logged on for several days.

This discussion is closed to new replies.