Is there a tool that is available that would allow me to see when a computer last logged on to the domain? When I look in Server Manager, the computer name is displayed but the computer icon is grey, which means that it is currently not connected to the domain. I'm trying to do a cleanup of the computer names on the server and I want to remove all of the inactive ones.
Are we talking about NT or 2k? My first approach would probably be to look for the LastLogon attribute for user and computer objects if it's a 2K AD domain. I don't think that this value is replicated, so you must retrieve the value from each domain controller. If you are comfortable working with scripts check out Microsoft TechNet - Computer Management - Enumerate Computer Accounts
Dig Deeper on LANs (Local Area Networks)
Related Q&A from Michael Gregg
Enterprise security expert, Michael Gregg answers a question regarding port 3389 issues when a user tries to open port 3389 RDP on their router to ... Continue Reading
Expert Michael Gregg answers a reader question about Snort and the interfaces it uses. Continue Reading
Security expert Michael Gregg discusses the disadvantages to a layered approach to enterprise security. Continue Reading
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.