how to get last logon user details of a particular computer from active directory. Note computer is not online, we have to get it from the ad logs , how? please

how last logon user details of particular computer active directory. note computer not online, have ad logs , how? please 

you check logon information in event log. u can enable auditing account logon events. these events (including workstation unlock) stored in dc's security log.

https://technet.microsoft.com/en-us/library/cc787567%28ws.10%29.aspx?f=255&mspperror=-2147217396

 you can record log on activity through group policy well.. follow below page..

http://social.technet.microsoft.com/wiki/contents/articles/20422.record-logon-logoff-activities-on-domain-servers-and-workstations-using-group-policy.aspx

here similar thread discussed before. maybe refer to.

https://social.technet.microsoft.com/forums/en-us/859384b1-6ec0-449c-bb2e-ad1f22e8e912/get-last-logon-timecomputer-and-username-together-with-powershell?forum=winserverpowershell

http://stackoverflow.com/questions/19983085/using-powershell-to-gather-logged-on-user-names-on-remote-computers

best regards,
jitendra

Windows Server  >  Directory Services