User lastlogon reporting

[Guest]

I have been using Hyena for more than a month to captured users last logon from all DC in the company. But for past couple of days some of the DC are giving errors and I am not getting the true last logon info from all DC. Also it is taking me hours just to get couple of users last logon info. Is it possible to bypass some DC which are failing.

[kstanush]

Re: User lastlogon reporting

Are you using Hyena or Exporter Pro to get the last logon information ?

[Guest]

Re: User lastlogon reporting

I am using Hyena V7.02 which we bought a month ago. Under Hyena Tools ->Exporter Pro -> Export From Selected Objects.

[kstanush]

Re: User lastlogon reporting

I assume you know why some of the DCs are failing as if users are logging onto them, the last logon information won't be accurate.

But...on the options button for AD user exports, where the last logon options are specified, there is a new checkbox for skipping domain controllers. This was added in the last update, so you should have it.

This option directs you to the 'General' settings, where you can specify a 'skip' file of computer names. The DCs need to be entered in either Netbios or DNS format depending on how you see the names listed now in the output.

[Guest]

Re: User lastlogon reporting

I have completed the following steps
1- In Set User Export Options I select Skip any domain controllers listed in computer....

2- In Export Properties I select Skip Computers Listed in file and specified the file as file.dat.

3- Under file/dat I listed the DC name per line e.g.

Domain1.abc.xyz.com
Domain2.abc.xyz.com

Now when I run the report it still showing those DC's mentioned in the file with error.

Is it possible that you can type one line to show how the skip file format should be.

Thanks in Advance

[kstanush]

Re: User lastlogon reporting

When the export runs, each domain controller should be listed in the progress window. You should use that format. The usual format would be a DNS name, so that would be dns_computername.domainname. In your case, it might be something like:

abc.xyz.com

...assuming 'abc' is the controller name, and xyz.com is the dns name of your domain.

[Guest]

Re: User lastlogon reporting

Following is the error I am receiving in Progress window

DC1.abc.xyz.com Getting last logon information from 'LDAP://DC1.abc.xyz.com/CN=John Edward,OU=Test,OU=Users,OU=NJ,,DC=abc,DC=xyz,DC=co m'...Unable to open directory object 'LDAP://DC1.abc.xyz.com/CN=John Edward,OU=Test,OU=Users,OU=NJ,,DC=abc,DC=xyz,DC=co m'. The server is not operational.

Now in skip file ( skipfile.dat ) I have one line which look like the following

DC1.abc.xyz.com

As you mentioned put the DC namr in the file as it looks like in Progress Window. I tried multiple times but the DC mentioned in skipfile.dat still showing in progress window with the error I mentioned above.

[kstanush]

Re: User lastlogon reporting

I am unable to reproduce this problem when I put a DC into the skip file, it gets skipped. I did find a bug that requires you to restart Exporter Pro each time you run any exports, as the 'skip' file information is not reset from one export to the next. But this should not affect you, but to be sure, make sure you restart Exporter Pro between exports when using a skip file.

Note that if there is any question on the format of the DC, you can put multiple entries in the file (one per line), like:

dcname.mydomain.com
dcname

I tried this with a domain and an individual computer entry, so let me know exactly what the object is you are exporting against, ie a domain, an OU/container, individual user, etc.

[Guest]

Re: User lastlogon reporting

I am running a customize query against all users . Once I am getting a result I am trying to select some users and running Export from Selected Objects.

In Export Proerties Active Directory Tab I have Detailed User checked.

In General Tab I have Skip computers.. Checked with the file skipfile.dat and DC name per line.

In Directory Query Properties , I have Object Type Filter as User and under setting option i have check for all domain controllers and Sky any domain...

So at this point I don't know what I am doing wrong .

[kstanush]

Re: User lastlogon reporting

I was able to run what I assume is the same thing you are doing.

Verify for version of Exporter Pro you have. Also, on the Options dialog there are two options on how to show the last logon information. Let me know which option you have selected and then try the other option. I assume you are using the first one "export combined..."