Forum Discussion
JoeyJoeJoe222
Sep 08, 2022Copper Contributor
Collecting last logged on user and LastLogonDate from AD
Hello,
I'd lake to run a search against AD in order to find stale computer accounts (that part is easy) but also to determine what was the last user account to log into the stale computer.
Does AD store last logged in user information with the computer account.
Appreciate any guidance.
Regards,
Joe
- bdionisogr1Copper Contributor
- Did you try the user logon script?
- Don't think so, there are security events with a calling workstation on your Domain Controllers but you would need archived event logs for that... You could start with a user logon script that logs the computer name in a central place