locked
Looking for last on time or logged into report? RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote
    I'm looking for a report that can help me in showing pc's that have been either turned off for more than 90 day's or if thay have been sitting at a log on promt and not logged into older then 90 days?  I'm not sure if I can get that from Config Man or not? 


    Thanks

    Jeff
    Friday, September 11, 2009 12:44 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote
    To create the report follow the steps below:

    1. Edit the SMS_DEF.mof file to enable the following class:

    Network Login Profile

    Also enable the sub class:

    LastLogon

    2. Create a report with the below query:

    Select
    V_GS_SYSTEM.Name0 as [ComputerName],
    V_GS_NETWORK_LOGIN_PROFILE.TimeStamp as [Last Login Time],
    V_GS_NETWORK_LOGIN_PROFILE.Name0 as [Logon User],
    V_GS_SYSTEM.Domain0 as [Logon Domain],
    V_GS_SYSTEM.SystemRole0 as [System Role],
    V_GS_SYSTEM.SystemType0 as [System Type]
    from V_GS_NETWORK_LOGIN_PROFILE
    left JOIN v_GS_SYSTEM ON V_GS_NETWORK_LOGIN_PROFILE.ResourceID =
    v_GS_SYSTEM.ResourceID
    where V_GS_NETWORK_LOGIN_PROFILE.LastLogon0 is not NULL

    Thursday, September 17, 2009 10:28 AM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    This should help : http://blogs.technet.com/configurationmgr/archive/2009/09/09/report-to-find-last-logon-details-of-each-computer-using-configmgr-2007.aspx

    Friday, September 11, 2009 1:43 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    To create the report follow the steps below:

    1. Edit the SMS_DEF.mof file to enable the following class:

    Network Login Profile

    Also enable the sub class:

    LastLogon

    2. Create a report with the below query:

    Select
    V_GS_SYSTEM.Name0 as [ComputerName],
    V_GS_NETWORK_LOGIN_PROFILE.TimeStamp as [Last Login Time],
    V_GS_NETWORK_LOGIN_PROFILE.Name0 as [Logon User],
    V_GS_SYSTEM.Domain0 as [Logon Domain],
    V_GS_SYSTEM.SystemRole0 as [System Role],
    V_GS_SYSTEM.SystemType0 as [System Type]
    from V_GS_NETWORK_LOGIN_PROFILE
    left JOIN v_GS_SYSTEM ON V_GS_NETWORK_LOGIN_PROFILE.ResourceID =
    v_GS_SYSTEM.ResourceID
    where V_GS_NETWORK_LOGIN_PROFILE.LastLogon0 is not NULL

    Thursday, September 17, 2009 10:28 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Does this work without changing any polices to audit logon events?
    John Marcum | http://www.TrueSec.com/en/Training.htm | http://myitforum.com/cs2/blogs/jmarcum
    Thursday, September 17, 2009 5:46 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    No it does not requires any Group Policy changes. It collects the login details from WMI with the classes we enabled in SMS_DEF.MOF file.
    Thursday, September 24, 2009 2:49 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Since there has been no additional activity in this thread, marking Eric's answer as correct.
    Standardize. Simplify. Automate.
    Tuesday, December 22, 2009 1:59 PM