User who haven't recently logged on

[Charles]

I'd like to get a list of users who haven't logged on to
the domain in say 90 days
Anyone know how I can do this
Charles.

 

[Chriss3]

You can script or query against the attributes below I suppose.Last-Logoff
Last-Logon

 

[Jimmy Andersson [MVP]]

Do you have Win2K or Win2K3 DCs?

This is on top of my head:

Win2K:
The lastLogon attribute is not replicated, which means that you have to loop
through all your DCs to find the time a user last logged on. This means that
if you ask a specific DC for information when a user last logged on it
will answer with the info stored on the local DC, but the user could have
been authenticated by another DC but the DC you're asking don't know that.

Win2K3:
Update logon timestamp attribute is replicated, if you ask a DC when a user
last logged on you will get an accurate respond within the replication
latency. What it means is that you don't need to loop through all your DCs
anymore. If memory serves you need to be in Windows Server 2003 Domain
Functional Level.

Regards,
/Jimmy