登入
Microsoft.com
 
Resources for IT Professionals
 
 
 
Resources for IT Professionals > 論壇首頁 > System Center Essentials - General > Find out what time computer was last found on the domain
發問發問
搜查論壇：
 

已答覆Find out what time computer was last found on the domain

  • 2009年6月2日 下午 03:01ca.xl1200n 使用者勳章使用者勳章使用者勳章使用者勳章使用者勳章
     
    登入以投票
    0
    登入以投票
    We recently had a laptop stolen from our office over the weekend.  I am trying to determine approximately what time the laptop was stolen.  It was on the network and powered on so there should be some active directory information for the machine.  I just don't know how to go about retrieving the info.  Any help is most appreciated.

    Thanks,
    ca
     

解答

所有回覆

  • 2009年6月3日 下午 07:42Lee Chang [MSFT]MSFT, 版主使用者勳章使用者勳章使用者勳章使用者勳章使用者勳章
     已答覆
    登入以投票
    0
    登入以投票
    Hi ca, Was the laptop being managed by SCE? If so, you may be able to look at it in the Monitoring->Computers view, and see what time the last state change event was.
     
  • 2009年6月29日 上午 11:15Eric Zhang - MSFTMSFT, 版主使用者勳章使用者勳章使用者勳章使用者勳章使用者勳章
     
    登入以投票
    0
    登入以投票
    Hi ca,

    For more information about quering last logon time ,we can get the time in AD database.

    There is an attribute named lastLogon for each computer account. However, it is in a binary format and you need to convert it to a friendly Date/Time format. There are some scripts.

    Convert binary data to decimal

    http://social.msdn.microsoft.com/forums/en-US/transactsql/thread/d34685b9-deba-464f-a977-df24f53bdcf6/