Determine Last Date of Computer Logon in AD Domain

[Landon]

I am on a Windows 2003 server and Windows XP clients in AD Domain. Can anyone tell me a way to check when a computer and not a user, last logged into the domain? I have got many inactive computer accounts in the AD that I am on and I want to remove them. Thanks

[Actionguy]

Have you tried to check the value of the lastLogon property of the computer object?

[Anywhere]

You should also note taht lastLogon attribute is not replicated, so you will have to check its value on all DCs in the domain. Also, you may consider using lastLogonTimestamp attribute, which is replicated, but keep in mind that its not updated at every logon, this depends on the value of msDS-LogonTimeSyncInterval attribute normally.

[Landon]

Thank you, but where can I find that value?

[Dr.Jones]

You can get the proper tool for finding and dealing with old computer accounts from joeware website, download from there a free tool called oldcmp. Also, there are 2 example VBScript programs that find the last logon dates for all users in the domain linked on rlmueller website.

[Landon]

Thanks for the simple answer, I am going to try that in sometime and let you know the results.