![]() ![]() (I think he knows something about auditing) ![]() See this blog post by Eric Fitzgerald for more info. 528 –Windows XP2003 and earlier or 4624 Windows Vista2008. If you are looking for more “real-time” logon tracking you will need to query the Security Event log on your DC’s for the desired logon events i.e. With default settings in place the lastLogontimeStamp will be 9-14 days behind the current date. The lastLogon attribute is not designed to provide real time logon information. It is important to note that the intended purpose of the lastLogontimeStamp attribute to help identify inactive computer and user accounts. LastLogon isn't real time, it's only accurate to +/- 14 days, so I'd pad your date range with that in mind. Research Triangle Powershell User Group remote-capable.Philadelphia PowerShell User Group remote-capable.Madison Power Users Group remote-capable.Denver Microsoft Enterprise Management User Group.NET, POSH is a full-featured task automation framework for distributed Microsoft platforms and solutions. Windows PowerShell (POSH) is a command-line shell and associated scripting language created by Microsoft. Submission Guidelines | Link Flair - How To ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |