Collecting last logged on user and LastLogonDate from AD

[JoeyJoeJoe222]

Hello,

I'd lake to run a search against AD in order to find stale computer accounts (that part is easy) but also to determine what was the last user account to log into the stale computer.

Does AD store last logged in user information with the computer account.

Appreciate any guidance.

Regards,

Joe

[#2]

Don't think so, there are security events with a calling workstation on your Domain Controllers but you would need archived event logs for that... You could start with a user logon script that logs the computer name in a central place

[#3]

Did you try the user logon script?

[#4]

Hello,

You can check the following link:
https://activedirectorypro.com/last-logon-time/