Determine Windows2K workstation last logged on user

[Joe Murphy]

How can I remotely determine the last logged-on user for a Windows2K
workstation? Will LDIFDE help? If so, what should I be filtering for?

Thanks,
JM

 

[Matjaz Ladava [MVP]]

No ldifde is for exporting user objects. What you need is a tool that
queries lastlogon attribute on all DC's in your domain to determine last
logon time. This is due to fact that lastlogon attribute is not replicated.
One such tool can be found on www.joeware.net. Look under free utilities.
In Windows Server 2003 domain (2003 domain functionality level) there is a
lastlogontimestamp attribute, which is replicated, but it is not replicated
regularly, but every week or so, so the information there could be old. In
this case you can just use dsquery command line tool to get that
information.


--

Regards

Matjaz Ladava, MCSA, MCSE, MCT, MVP
Microsoft MVP Windows Server - Active Directory
(e-mail address removed), (e-mail address removed)

 

[Jerold Schulman]

How can I remotely determine the last logged-on user for a Windows2K
workstation? Will LDIFDE help? If so, what should I be filtering for?

Thanks,
JM

Using reg from the support tools on the W2K CD (tip 3968 in the 'Tips & Tricks'
at http://www.jsiinc.com)

reg query "\\computer\HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon" /v defaultusername

The above is one line




Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com

 

[Joe Murphy]

Ah yes. Joeware to the rescue! I forgot about that. Great utilities there.

Thanks Matjaz!