Last Logon Time

[Guest]

Hi, I was hoping someone could help me out with this one. I'm trying to clean up my AD. I figure around 40% of accounts in my domain have not been used for a long period of time. The problem is that the last login date is domain controller specific and I have four domains controllers.

I was wondering A) Can Hyena query a specific domain controller? If so how? B) Can Hyena consolidate the results from a query on all the domain controllers to give me the last login date for all user objects.

Also, just out of interest how to you guys deal with stale accounts? I’d like to get some kind of system going by were I scan accounts on a monthly bases and disable any accounts that have not been used in 1 month. After 1 year I will delete the accounts however it looks like I will have to manually delete the users file store and Roaming profile.

Any advice will be much appreciated.

Regards

Andrew

[cmccullough]

Re: Last Logon Time

Exporter Pro is your best solution for this one. The user exports have an option to query all domain controllers and return only the latest date found. There should be some instructions elsewhere on this board if you do a quick search. If not, and if you can't figure it out, post back and I'll post the steps.

[Guest]

Re: Last Logon Time

How??

You can r. click <span style="font-weight: bold">one user at a time</span> to select "check all domain controllers".

<span style="font-weight: bold">How can you select all users, all domain controllers??</span>

[cmccullough]

Re: Last Logon Time

You'll have to use Exporter Pro. In Hyena you can click on your domain, or on the OU containing the users you want, then go to Tools->Exporter Pro->Export From Selected Objects. Click the Settings button then double-click on Detailed User under Active Directory. Enable it, enter an output filename, then click the Set Options button to configure it to export from all domain controllers.

[Guest]

Re: Last Logon Time

Thanks!
(I am obviously new to the product.)