Collecting last logged on user and LastLogonDate from AD

Copper Contributor



I'd lake to run a search against AD in order to find stale computer accounts (that part is easy) but also to determine what was the last user account to log into the stale computer.


Does AD store last logged in user information with the computer account.


Appreciate any guidance.




3 Replies
Don't think so, there are security events with a calling workstation on your Domain Controllers but you would need archived event logs for that... You could start with a user logon script that logs the computer name in a central place
Did you try the user logon script?