Bash Script User Last Login Date and Time

In this post, I'1000 going to show you 3 simple methods for finding active directory users last logon date and time.

Every time you lot log into a estimator that is connected to Active Directory it stores that users concluding logon engagement and time into a user attribute called lastlogon.

Let's check out some examples!

TIP: The lastlogon attribute is the nigh accurate way to check agile directory users terminal logon time. In that location is besides the LastLogonTimeStamp attribute but will be 9-fourteen days behind the current date. The intended purpose of the LastLogonTimeStamp is to assistance place dried user and computer accounts. The lastlogon attribute is not replicated to other DCs so you will demand to cheque this attribute on each DC to notice the well-nigh recent time. The tool in example 3 will practice this for y'all.

Method 1: Find last logon time using the Aspect Editor

These get-go two examples work well for checking a unmarried user. If you want to run a report for all users then bank check out case 3.

Step1: Open Active Directory Users and Computers and make certain Avant-garde features is turned on.

Pace 2: Browse and open up the user account

Step three: Click on Aspect Editor

Step 4: Coil down to view the last Logon fourth dimension

If you have multiple domain controllers you will demand to bank check this value on each one to find the most recent fourth dimension.

Related: Detect all Disabled Advertizing User Accounts

Method 2: Using PowerShell to find terminal logon time

Stride 1: Log into a Domain Controller

If you don't run this from a DC, you may need to import the Agile Directory PowerShell modules.

Step two: Open PowerShell

Step three: Run the following command

Become-ADUser -Identity "username" -Properties "LastLogonDate"

Replace "username" with the user you want to written report on.

Video demonstrating both methods.

The built in Microsoft tools does not provide an like shooting fish in a barrel way to study the terminal logon time for all users that'south why I created the Advertising Concluding Logon Reporter Tool.

This tool allows you to observe the terminal logon time for all users in your domain. Optionally yous tin limit the scope to an OU or group.

Step 1: Download and launch tool

Yous can download the tool here

Information technology only takes 3 uncomplicated steps to run this tool. It's very like shooting fish in a barrel!

i. Open Tool

ii. Select search options

3. Click run

Y'all can see in the screenshot beneath the tool returns the users name, business relationship name, domain controller proper noun, and the last logon date. Y'all tin can click on any column to sort the results in ascending or descending club.

Footstep 2: Export results to CSV

To consign the results only click on the export button, select your format and click export all rows.

You will be prompted for a location to salvage the file, once saved the file will automatically open.

Here is a screenshot of the report exported to CSV

The Advert terminal logon Reporter eliminates all the manual piece of work of checking the lastlogon attribute for all users across all domain controllers. It would be very time consuming and difficult to render the real last logon time without this tool.

I have but shown you 3 very simple and quick methods for finding when a user last logged on to the domain.

Bash Script User Last Login Date and Time Updated FREE