EXPERT RESPONSE
Are we talking about NT or 2k? My first approach would probably be to look for the LastLogon attribute for user and computer objects if it's a 2K AD domain. I don't think that this value is replicated, so you must retrieve the value from each domain controller. If you are comfortable working with scripts check out Microsoft TechNet - Computer Management - Enumerate Computer Accounts
http://www.microsoft.com/technet/scriptcenter
There's also aftermarket software that will accomplish this task. Listed below is several for you to checkout.
http://www.advtoolware.com/t4e/ns/ns_default.htm
http://www.somarsoft.com
|