locked
access an account in active directory RRS feed

  • Question

  • How could I ensure that no one accesses a user account even if they could figure out the temporary password in Active Directory?

     Does disabling the account making any difference?

    Thursday, February 21, 2013 12:06 AM

Answers

  • Hi Libyantiger,

    If you want to check if some one has accessed AD account then check the values of the below attributes.

    Lastlogon

    lastLogontimestamp

    Both the attributes should be NULL.

    If you disable the account then no one will be able to access it.


    Ahmed Ali

    • Proposed as answer by steve siyavaya Friday, February 22, 2013 7:51 AM
    • Marked as answer by emma.yoyo Thursday, February 28, 2013 2:20 AM
    Thursday, February 21, 2013 6:53 AM

All replies

  • Hi Libyantiger,

    If you want to check if some one has accessed AD account then check the values of the below attributes.

    Lastlogon

    lastLogontimestamp

    Both the attributes should be NULL.

    If you disable the account then no one will be able to access it.


    Ahmed Ali

    • Proposed as answer by steve siyavaya Friday, February 22, 2013 7:51 AM
    • Marked as answer by emma.yoyo Thursday, February 28, 2013 2:20 AM
    Thursday, February 21, 2013 6:53 AM
  • By the way, this forum is specially for Exchange users, I think the Directory Services is a better place to seek the solution:

    http://social.technet.microsoft.com/Forums/en-US/winserverDS/threads


    Frank Wang
    TechNet Community Support

    Friday, February 22, 2013 7:51 AM