Way to track inactive users 1

[pgaliardo]

Is there a way through AD Users and Computers, or any other method in which we can tell when a user last logged onto the domain? Just something quick and dirty so we can disable inactive accounts.

Thanks,
Phil

 

[captaincrunch00]

http://www.petri.co.il/view_additional_user_information_in_aduc.htm

That article will show you how to get another tab in the users properties that will show you the last login time.

From there I'm stumped. I dont know of a way other than clicking on every user to see the last login time from that tab.

Hopefully someone smarter than me comes along.

 

[pgaliardo]

This is excellent. It's fine that we have to click on each user, because I want to use it to spot check individual users here and there. Thanks for the post. If anyone knows of a script that might return results based on for instance "show me a list of users whose last login time is older than 365 days" I'd be interested in something like that also. But for now, this is perfect.

Thanks.

 

[kmkeshav]

You can retrieve a list of inactive user accounts using the "dsquery user" Windows Server 2003 command-line tool. Please refer to the following URL for help on this tool:

http://technet2.microsoft.com/Windo...43fd-4985-b429-cd53d3046f011033.mspx?mfr=true

Hope this will be useful.

-Keshav / IT Consultant

 

[kmkeshav]

dsquery" tool is a part of Windows Server 2003 Admin Pack. For system requirements and download details, refer the following URL:

http://www.microsoft.com/downloads/...15-c8f4-47ef-a1e4-a8dcbacff8e3&displaylang=en

-Keshav / IT Consultant

 

[pgaliardo]

Thanks kmkeshav, but all our DC's are Windows 2000. Is there a similar tool for Windows 2000 or will the Windows 2003 Admin Pack access Windows 2000 domains?