Determining a User’s Last Logon Time via AD

So you’re a Active Directory administrator and you need to know when a user last logged on to the domain.  If you install the AcctInfo.dll extension to Active Directory Users and Computers, you can view the last logon timestamp. You can download the “Account Lockout and Management Tools” from Microsoft here. There is also some useful tools in this pack to trace when user accounts lock out etc.
There is a good Microsoft TechNet blog here that explains exactly how the “LastLogonTimeStamp” attribute actually works and what it was designed for. I also managed to find this MSDN document that describes the Last-Logon-Timestamp attribute in more detail.

Duncan

Leave a Reply