locked
access an account in active directory RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    How could I ensure that no one accesses a user account even if they could figure out the temporary password in Active Directory?

     Does disabling the account making any difference?

    Thursday, February 21, 2013 12:06 AM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Libyantiger,

    If you want to check if some one has accessed AD account then check the values of the below attributes.

    Lastlogon

    lastLogontimestamp

    Both the attributes should be NULL.

    If you disable the account then no one will be able to access it.

    Ahmed Ali

    • Proposed as answer by steve siyavaya Friday, February 22, 2013 7:51 AM
    • Marked as answer by emma.yoyo Thursday, February 28, 2013 2:20 AM
    Thursday, February 21, 2013 6:53 AM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Libyantiger,

    If you want to check if some one has accessed AD account then check the values of the below attributes.

    Lastlogon

    lastLogontimestamp

    Both the attributes should be NULL.

    If you disable the account then no one will be able to access it.

    Ahmed Ali

    • Proposed as answer by steve siyavaya Friday, February 22, 2013 7:51 AM
    • Marked as answer by emma.yoyo Thursday, February 28, 2013 2:20 AM
    Thursday, February 21, 2013 6:53 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    By the way, this forum is specially for Exchange users, I think the Directory Services is a better place to seek the solution:

    http://social.technet.microsoft.com/Forums/en-US/winserverDS/threads

    Frank Wang
    TechNet Community Support

    Friday, February 22, 2013 7:51 AM