登录
Microsoft.com
 
IT 专业人士的资源
 
 
 
IT 专业人士的资源 > 论坛主页 > System Center Essentials - General > Find out what time computer was last found on the domain
提出问题提出问题
搜索论坛：
 

已答复Find out what time computer was last found on the domain

  • 2009年6月2日 15:01ca.xl1200n 用户奖牌用户奖牌用户奖牌用户奖牌用户奖牌
     
    登录进行投票
    0
    登录进行投票
    We recently had a laptop stolen from our office over the weekend.  I am trying to determine approximately what time the laptop was stolen.  It was on the network and powered on so there should be some active directory information for the machine.  I just don't know how to go about retrieving the info.  Any help is most appreciated.

    Thanks,
    ca
     

答案

全部回复

  • 2009年6月3日 19:42Lee Chang [MSFT]MSFT, 版主用户奖牌用户奖牌用户奖牌用户奖牌用户奖牌
     已答复
    登录进行投票
    0
    登录进行投票
    Hi ca, Was the laptop being managed by SCE? If so, you may be able to look at it in the Monitoring->Computers view, and see what time the last state change event was.
     
  • 2009年6月29日 11:15Eric Zhang - MSFTMSFT, 版主用户奖牌用户奖牌用户奖牌用户奖牌用户奖牌
     
    登录进行投票
    0
    登录进行投票
    Hi ca,

    For more information about quering last logon time ,we can get the time in AD database.

    There is an attribute named lastLogon for each computer account. However, it is in a binary format and you need to convert it to a friendly Date/Time format. There are some scripts.

    Convert binary data to decimal

    http://social.msdn.microsoft.com/forums/en-US/transactsql/thread/d34685b9-deba-464f-a977-df24f53bdcf6/