Try using the command line "net user <userid> /domain" will get you a lot of information about the user including last login.
Yeah, that too; good catch
. PowerShell tends to be my go-to, so I forget about the older stuff.
Sent from my iPhone using Tapatalk
PowerShell to get the last logon date:
(Get-ADUser -Identity $Username -server $DomainController -Properties "lastlogondate").lastlogondate
The nice thing about this is that it's just the date, in date format.
Here's something infuriating. We have a task that the T2 on the late shift is required to do once a week. We check in on all our staff who are posted overseas to make sure they've logged on within the last 30 days. If they don't, their account is automatically made inactive and it's a pain in the bum for them to get it reactivated.
So far so good. Last logon is an attribute that is tracked in Active Directory. Look them up, open their Properties, and wait! the Attribute Editor tab is missing!
We have to go to their Member Of tab, open their Role Group Properties (assigned according to their position in the org structure of the department), close the user's Properties, check the Members tab of the Group Properties, double click the user there to reopen the user's Properties and now we can see the Attribute Editor tab.
That's crazy. Any other AD users have something like this?
I had this post mostly done last week but I wasn't going to finish it over the weekend, but you could get it in PowerShell
This should get you the last logon date for a list of users:
Import-Module ActiveDirectory
$Usernames = "user1", "user2", "etc"
$Domain = "your.domain"
$DomainController = ((Get-ADDomainController -Discover -Domain $Domain).hostname).value
[System.Collections.ArrayList]$Userlist = @()
ForEach ($User in $Usernames){
$LastLogon = (Get-ADUser -Identity $User -server $DomainController -Properties lastlogondate).lastlogondate
$User = (Get-ADUser -Identity $User -server $DomainController -Properties name).name
$Tmp = [pscustomobject]@{'Name'=$User; 'Last Logon'=$LastLogon}
$Dummy = $Userlist.add($Tmp)
}
$UserList
If you just want a list of everyone who hasn't logged on in 30 days you could do this. I'm sure there must be a more efficient way, but this should still work.
Import-Module ActiveDirectory
$Domain = "shared.mbgov.ca"
$Today = Get-Date
$DomainController = ((Get-ADDomainController -Discover -Domain $Domain).hostname).value
$UserList = (Get-ADUser -filter "*" -server $DomainController -Properties Name,lastlogondate) | Where {($_.LastLogonDate -lt $Today.AddDays(-30))}
$UserList | select name,lastlogondate | ft
