Forum Discussion

JoeyJoeJoe222's avatar
JoeyJoeJoe222
Copper Contributor
Sep 08, 2022

Collecting last logged on user and LastLogonDate from AD

Hello,

 

I'd lake to run a search against AD in order to find stale computer accounts (that part is easy) but also to determine what was the last user account to log into the stale computer.

 

Does AD store last logged in user information with the computer account.

 

Appreciate any guidance.

 

Regards,

Joe

3 Replies

  • bdionisogr1's avatar
    bdionisogr1
    Copper Contributor
    Hello,

    You can check the following link:
    https://activedirectorypro.com/last-logon-time/
  • Don't think so, there are security events with a calling workstation on your Domain Controllers but you would need archived event logs for that... You could start with a user logon script that logs the computer name in a central place

Resources