Users who have left.

[kachbo1]

Hi,

I hope if anyone can help. I need help on a script which will give me a list of users who have not logged in for 3 months. We 6 thousand users an I am sure lots of users have left but there accounts are still active.

 

[rislejay]

Will this work for you?

original code

http://www.rlmueller.net/Last Logon.htm

modified code

'==========================================================================
'
' NAME: LastLogon.vbs
'
' AUTHOR: Mark D. MacLachlan , The Spider's Parlor
' URL: [URL unfurl="true"]http://www.thespidersparlor.com[/URL]
' DATE  : 11/18/2004
'
' COMMENT: Determines when each user in the domain last logged on
'          Modified code from Richard L Mueller
' VERSION: 1.8 - November 18, 2004 Modified code for text and Excel Output
'==========================================================================
' Copyright (c) 2002 Richard L. Mueller
' Hilltop Lab web site - [URL unfurl="true"]http://www.rlmueller.net[/URL]
' Version 1.0 - December 7, 2002
' Version 1.1 - January 17, 2003 - Account for null value for lastLogon.
' Version 1.2 - January 23, 2003 - Account for DC not available.
' Version 1.3 - February 3, 2003 - Retrieve users but not contacts.
' Version 1.4 - February 19, 2003 - Standardize Hungarian notation.
' Version 1.5 - March 11, 2003 - Remove SearchScope property.
' Version 1.6 - May 9, 2003 - Account for error in IADsLargeInteger
'                             property methods HighPart and LowPart.
' Version 1.7 - January 25, 2004 - Modify error trapping.
'
' Because the lastLogon attribute is not replicated, every Domain
' Controller in the domain must be queried to find the latest lastLogon
' date for each user. The lastest date found is kept in a dictionary
' object. The program first uses ADO to search the domain for all Domain
' Controllers. The AdsPath of each Domain Controller is saved in an
' array. Then, for each Domain Controller, ADO is used to search the
' copy of Active Directory on that Domain Controller for all user
' objects and return the lastLogon attribute. The lastLogon attribute is
' a 64-bit number representing the number of 100 nanosecond intervals
' since 12:00 am January 1, 1601. This value is converted to a date. The
' last logon date is in UTC (Coordinated Univeral Time). It must be
' adjusted by the Time Zone bias in the machine registry to convert to
' local time.
'
' You have a royalty-free right to use, modify, reproduce, and
' distribute this script file in any way you find useful, provided that
' you agree that the copyright owner above has no warranty, obligations,
' or liability for such use.

Option Explicit

Dim objRootDSE, strConfig, objConnection, objCommand, strQuery
Dim objRecordSet, objDC
Dim strDNSDomain, objShell, lngBiasKey, lngBias, k, arrstrDCs()
Dim strDN, dtmDate, objDate, lngDate, objList, strUser
Dim strBase, strFilter, strAttributes, lngHigh, lngLow
Dim outfile, Report, fso, ts, ForWriting

outfile = InputBox("Do you wish the report to be in a TEXT FILE or EXCEL" & vbCrLF & _ 
"1=TEXT" & vbCrLf & "2=EXCEL", "Specify Output Format")

Select Case outfile
    Case "1" 
        ' output will be to text
    Case "2"
        ' output will be to excel
    Case Else
        MsgBox "Type 1 or 2"
        WScript.Quit
End Select

' Use a dictionary object to track latest lastLogon for each user.
Set objList = CreateObject("Scripting.Dictionary")
objList.CompareMode = vbTextCompare

' Obtain local Time Zone bias from machine registry.
Set objShell = CreateObject("Wscript.Shell")
lngBiasKey = objShell.RegRead("HKLM\System\CurrentControlSet\Control\" _
  & "TimeZoneInformation\ActiveTimeBias")
If UCase(TypeName(lngBiasKey)) = "LONG" Then
  lngBias = lngBiasKey
ElseIf UCase(TypeName(lngBiasKey)) = "VARIANT()" Then
  lngBias = 0
  For k = 0 To UBound(lngBiasKey)
    lngBias = lngBias + (lngBiasKey(k) * 256^k)
  Next
End If

' Determine configuration context and DNS domain from RootDSE object.
Set objRootDSE = GetObject("LDAP://RootDSE")
strConfig = objRootDSE.Get("configurationNamingContext")
strDNSDomain = objRootDSE.Get("defaultNamingContext")

' Use ADO to search Active Directory for ObjectClass nTDSDSA.
' This will identify all Domain Controllers.
Set objCommand = CreateObject("ADODB.Command")
Set objConnection = CreateObject("ADODB.Connection")
objConnection.Provider = "ADsDSOObject"
objConnection.Open "Active Directory Provider"
objCommand.ActiveConnection = objConnection

strBase = "<LDAP://" & strConfig & ">"
strFilter = "(objectClass=nTDSDSA)"
strAttributes = "AdsPath"
strQuery = strBase & ";" & strFilter & ";" & strAttributes & ";subtree"

objCommand.CommandText = strQuery
objCommand.Properties("Page Size") = 100
objCommand.Properties("Timeout") = 60
objCommand.Properties("Cache Results") = False

Set objRecordSet = objCommand.Execute

' Enumerate parent objects of class nTDSDSA. Save Domain Controller
' AdsPaths in dynamic array arrstrDCs.
k = 0
Do Until objRecordSet.EOF
  Set objDC = _
    GetObject(GetObject(objRecordSet.Fields("AdsPath")).Parent)
  ReDim Preserve arrstrDCs(k)
  arrstrDCs(k) = objDC.DNSHostName
  k = k + 1
  objRecordSet.MoveNext
Loop

' Retrieve lastLogon attribute for each user on each Domain Controller.
For k = 0 To Ubound(arrstrDCs)
  strBase = "<LDAP://" & arrstrDCs(k) & "/" & strDNSDomain & ">"
  strFilter = "(&(objectCategory=person)(objectClass=user))"
  strAttributes = "distinguishedName,lastLogon"
  strQuery = strBase & ";" & strFilter & ";" & strAttributes _
    & ";subtree"
  objCommand.CommandText = strQuery
  On Error Resume Next
  Set objRecordSet = objCommand.Execute
  If Err.Number <> 0 Then
    On Error GoTo 0
    Wscript.Echo "Domain Controller not available: " & arrstrDCs(k)
  Else
    On Error GoTo 0
    Do Until objRecordSet.EOF
      strDN = objRecordSet.Fields("distinguishedName")
      lngDate = objRecordSet.Fields("lastLogon")
      On Error Resume Next
      Set objDate = lngDate
      If Err.Number <> 0 Then
        On Error GoTo 0
        dtmDate = #1/1/1601#
      Else
        On Error GoTo 0
        lngHigh = objDate.HighPart
        lngLow = objDate.LowPart
        If lngLow < 0 Then
          lngHigh = lngHigh + 1
        End If
        If (lngHigh = 0) And (lngLow = 0 ) Then
          dtmDate = #1/1/1601#
        Else
          dtmDate = #1/1/1601# + (((lngHigh * (2 ^ 32)) _
            + lngLow)/600000000 - lngBias)/1440
        End If
      End If
      If objList.Exists(strDN) Then
        If dtmDate > objList(strDN) Then
          objList(strDN) = dtmDate
        End If
      Else
        objList.Add strDN, dtmDate
      End If
      objRecordSet.MoveNext
    Loop
  End If
Next
If outfile = "1" Then 
    ' Output latest lastLogon date for each user.
    For Each strUser In objList
      lnameArray = split(strUser,",")
      nameLength = Len(lnameArray(0)) - 3
      lname = Right(lnameArray(0),nameLength)
      Report = Report & lname & vbTab & " ; " & objList(strUser) & vbTab & " ; "  & strUser & vbCrLf
    Next
    Set fso = CreateObject("Scripting.FileSystemObject")
    Set ts = fso.CreateTextFile ("LogonReport.txt", ForWriting)
    ts.write Report
    set ts = Nothing
    set fso = nothing
    MsgBox "Report saved to file LogonReport.txt"
End If

If outfile = "2" Then 
    On Error Resume Next
    Dim objexcel, r, lnameArray, lname, nameLength
    Set objExcel = createobject("Excel.application")   
    objexcel.Workbooks.add
    objexcel.Cells(1, 1).Value = "Logon Name"
    objexcel.Cells(1, 2).Value = "Last Logon Date/Time"
    objexcel.Cells(1, 3).Value = "LDAP Path"
    objexcel.Visible = True
    Wscript.Sleep 300
    r=2
    For Each strUser In objList
          lnameArray = split(strUser,",")
          nameLength = Len(lnameArray(0)) - 3
          lname = Right(lnameArray(0),nameLength)
          objexcel.Cells(r, 1).Value = lname
          objexcel.Cells(r, 2).Value = objList(strUser)
           objexcel.Cells(r, 3).Value = strUser
          r = r+1
    Next
    
    objexcel.ActiveWorkbook.SaveAs("LogonReport.xls")
    objexcel.Quit
    MsgBox "Report Saved As LogonReport.xls"
End If

' Clean up.
objConnection.Close
Set objRootDSE = Nothing
Set objConnection = Nothing
Set objCommand = Nothing
Set objRecordSet = Nothing
Set objDC = Nothing
Set objDate = Nothing
Set objList = Nothing
Set objShell = Nothing

 

[kachbo1]

Thanks. Tried it but getting an error.

Line 121
Char 7
Error: This operation rteurned because the timeout period expired

Code 800705B4
Source Provider

 

[gjconely]

Do you have Microsoft Excel installed? This script creates a new excel spreadsheet and populates it with the info. If you don't have excel installed, the script won't work. It shouldn't be too difficult to change it to dump to a CSV instead.

Greg Conely

http://www.ImageMentor.net

http://www.seo-position-plus.com

 

[kachbo1]

Yes I have excel installed, however it doesn't work for a txt file as well.

Any assistance appreciated.

 

[mrmovie]

which line is 121?