Answered Active Directory last login date

  • terça-feira, 24 de fevereiro de 2009 13:21
     
     
    I am performing an active directory/exchange clean up here at work.  I am using a program called True Last Logon 2.8 to see when these users have last logged in.  I am getting a lot of returns with the date of 12/31/1600.  I did a little research and it seems that this means it has a null value in the log in field, as if the person has never logged in before.  But I know for sure that some of these people are still here and have logged in before.

    To further explain my theory, we use OWA here on campus a lot.  If the person doesnt actually log into an exchange account and logs into OWA, could that be giving me a null in the login field?  hat is the only thing I can think of.

    If anyone can help me that would be great.

    Heather

Todas as Respostas

  • quarta-feira, 25 de fevereiro de 2009 09:07
     
     Respondido
    Hi,

    I think True Last Logon tool get info of last logon time of AD user account and not last Exchange Mailbox login time.

    You can get Last logon account & time in ESM in 2003 or with Get-MailboxStatistics cmdlet in 2007.

    If users never logged in into any workstation with their AD account then it might give you null info but you get mailbox logon info with above procedure.

    Amit Tank | MVP - Exchange | MCITP:EMA MCSA:M | http://ExchangeShare.WordPress.com
    • Marcado como Resposta Mrs. Watson quarta-feira, 25 de fevereiro de 2009 16:30
    •  
  • quarta-feira, 25 de fevereiro de 2009 16:30
     
     
    Thanks for the info.  I am just going through the Exchange System Manager now and going through the last logon time in there.  It is more work but seems to be working out ok.  Thanks for responding.

    Heather
  • segunda-feira, 27 de abril de 2009 13:00
     
     
    Can you go to HR to see who has left the company. This may help clarify the list.

    Andrew Sword, MVP
  • terça-feira, 28 de abril de 2009 21:25
     
     
    You can get the last login info if you install the 2003 Support Tools found at:
    http://download.microsoft.com/download/8/e/c/8ec3a7d8-05b4-440a-a71e-ca3ee25fe057/rktools.exe

    Then register the "Additional Account Info" DLL File by typing:
    regsvr32 %systemroot%\system32\acctinfo.dll

    Then you will see Additional info which will include the last login time of the account. 

    NOTE: For some reason it doesn't work if you "Search" for the AD account.. you have to Browse to it in ADU&C to see the Additional TAB that has the login info.

    Hope this helps.

  • quinta-feira, 14 de maio de 2009 16:57
     
     Resposta Proposta
    It shows 1600 if the value in the feild is 0
    • Sugerido como Resposta dalerks quinta-feira, 14 de maio de 2009 16:57
    •  
  • quinta-feira, 6 de agosto de 2009 17:46
     
     
    Mrs. Watson,

    You can run the query directly from AD.  Right click on the desired container and choose Find.  In the Find: "Users, Contact, and Groups" drop down, choose "Common Queries".  The bottom of the windows shows "Days since last logon" with options of 30, 60, 90, 120, and 180 days.

    John
  • quinta-feira, 27 de agosto de 2009 08:30
     
     
    hey...thanks Man. this is the way .
  • quinta-feira, 27 de agosto de 2009 08:30
     
     
    You can get the last login info if you install the 2003 Support Tools found at:
    http://download.microsoft.com/download/8/e/c/8ec3a7d8-05b4-440a-a71e-ca3ee25fe057/rktools.exe

    Then register the "Additional Account Info" DLL File by typing:
    regsvr32 %systemroot%\system32\acctinfo.dll

    Then you will see Additional info which will include the last login time of the account. 

    NOTE: For some reason it doesn't work if you "Search" for the AD account.. you have to Browse to it in ADU&C to see the Additional TAB that has the login info.

    Hope this helps.


    You know the trick.thanks man..It is correct that
    NOTE: For some reason it doesn't work if you "Search" for the AD account.. you have to Browse to it in ADU&C to see the Additional TAB that has the login info
  • quarta-feira, 11 de agosto de 2010 16:30
     
     
    Both of the methods shown here are helpful but not completely so if you have 30 domain controllers.  The "acctinfo.dll method" fetches the information but only on the DC you are connected to with ADUC.  Is there a Microsoft tool out there that will fetch the information from all of your DCs like the "Account Lockout Status" tool will do for lockouts?
  • segunda-feira, 20 de fevereiro de 2012 10:03
     
     

    Hi Watson

                     Dont need to go anywhere just try this in your exchange server

    Get-Mailboxstatistics -Server servername.domain.com | Export-csv c:\lastlogin.csv

    where servername will be your  mailbox server


    • Editado rajah r segunda-feira, 20 de fevereiro de 2012 10:06
    •