Resources for IT Professionals > 포럼 홈 > System Center Essentials - General > Find out what time computer was last found on the domain
질문하기질문하기
 

답변됨Find out what time computer was last found on the domain

  • 2009년 6월 2일 화요일 오후 3:01ca.xl1200n 사용자 메달사용자 메달사용자 메달사용자 메달사용자 메달
     
    We recently had a laptop stolen from our office over the weekend.  I am trying to determine approximately what time the laptop was stolen.  It was on the network and powered on so there should be some active directory information for the machine.  I just don't know how to go about retrieving the info.  Any help is most appreciated.

    Thanks,
    ca

답변

모든 응답

  • 2009년 6월 3일 수요일 오후 7:42Lee Chang [MSFT]MSFT, 중재자사용자 메달사용자 메달사용자 메달사용자 메달사용자 메달
     답변됨
    Hi ca, Was the laptop being managed by SCE? If so, you may be able to look at it in the Monitoring->Computers view, and see what time the last state change event was.
  • 2009년 6월 29일 월요일 오전 11:15Eric Zhang - MSFTMSFT, 중재자사용자 메달사용자 메달사용자 메달사용자 메달사용자 메달
     
    Hi ca,

    For more information about quering last logon time ,we can get the time in AD database.

    There is an attribute named lastLogon for each computer account. However, it is in a binary format and you need to convert it to a friendly Date/Time format. There are some scripts.

    Convert binary data to decimal

    http://social.msdn.microsoft.com/forums/en-US/transactsql/thread/d34685b9-deba-464f-a977-df24f53bdcf6/