? for Matjaz Ladava

[aaron]

I got your ADinactiveObjects program and ran it a few times. It worked
great. For some reason now When I run the program it won't find any of my
DC's, and it returns last logon at 146921 days for all my AD objects. I
would really like to figure out why this is not working, since this is a
very valuable tool for me. Would have some insite as to why it would return
that result for all objects?

TIA,
aaron

 

[Matjaz Ladava [MVP]]

Hi aaron,

When you run the tool an click DC's button do you see a list of DC's in your network ? The DC's are recognised by LDAP query (&(objectclass=computer)(userAccountControl=532480)). This query returns all DC's on the network and then program run's trough all DC's to query for this attribute. Value of 146921 shows that the account was not accessed yet (date 1.1.1601 in lastLogon attribute). Have you tried this tool on different PC's ? Check, that the client from which you are running this tool can resolve your domain (that is check your DNS settings).

--
Regards

Matjaz Ladava, MCSE (NT4 & 2000), MVP
(e-mail address removed)
http://ladava.com