how to get last logon user details of a particular computer from active directory. Note computer is not online, we have to get it from the ad logs , how? please

-

how last logon user details of particular computer active directory. note computer not online, have ad logs , how? please 

you check logon information in event log. u can enable auditing account logon events. these events (including workstation unlock) stored in dc's security log.

https://technet.microsoft.com/en-us/library/cc787567%28ws.10%29.aspx?f=255&mspperror=-2147217396

 you can record log on activity through group policy well.. follow below page..

http://social.technet.microsoft.com/wiki/contents/articles/20422.record-logon-logoff-activities-on-domain-servers-and-workstations-using-group-policy.aspx

here similar thread discussed before. maybe refer to.

https://social.technet.microsoft.com/forums/en-us/859384b1-6ec0-449c-bb2e-ad1f22e8e912/get-last-logon-timecomputer-and-username-together-with-powershell?forum=winserverpowershell



http://stackoverflow.com/questions/19983085/using-powershell-to-gather-logged-on-user-names-on-remote-computers

best regards,
jitendra



Windows Server  >  Directory Services



Comments

Post a Comment

Popular posts from this blog

Top N or Bottom N filter based on a parameter

-
i have report parameter selection filtering data, either "highest" or "lowest".  if pick "highest" want top n, if "lowest" want bottom n.  how can set in filter ? j. way there many ways set report accomplish this. e.g asuming "n" fixed, you'll set report parameter has 2 hard-coded values "top" , "bottom" , based on user selects, can write report dataset query if (parameter value = "top") select top n ...... else if (parameter value = "bottom") select top n ......order <ordered column name> desc (again there other ways of doing too) else (whatever business logic needs go here, if @ all) if wanted keep n input parameter well, in addition above top/bottom filter, you'll add input filter (preferably free-text input) accept n , build dynamic sql string concatenating input parameter value in logic above. hope gets on right track. cheers! -muqadder. ...
Read more

Motherboard replacement

-
running windows 10 technical preview, need replace motherboard can run the  sysprep  command restoring pc ? or there easier  or more preferred way ? thanks if replace motherboard within same family of chipsets (i.e. intel > intel or amd > amd), should okay restarting pc twice. carey frisch Windows 10 Insider Preview  >  Windows 10 Insider Preview General
Read more

Security ID 6281 l3codeca.asm

-
on new windows 2008 r2 terminal server, seeing event id 6281 source microsoft windows security. "code integrity determined page hashes of image file not valid. file improperly signed without page hashes or corrupt due unauthorized modification. invalid hashes indicate potential disk device error. file name: \device\harddiskvolume3\windows\system32\l3codeca.acm" http://social.technet.microsoft.com/forums/en-ca/winservergen/thread/009c3e66-f99e-40b6-97ca-05f33ad26239  pointed to  http://msdn.microsoft.com/en-us/windows/hardware/gg487338.aspx which describes vista file dated 2006/08/25. 1 on server dated 2009-07-13. kb891122 lists l3codeeca.acm older version. won't install on w2k8-r2 anyway. i don't want see security errors in event log. ignoring event not solution. there current fix this? thanks, bob. on tue, 21 feb 2012 00:29:04 +0000, bobh2 wrote: gopi, said, ignoring problem not solution. not want see errors in event logs...
Read more