Is there a tool that is available that would allow me to see when a computer last logged on to the domain? When I look in Server Manager, the computer name is displayed but the computer icon is grey, which means that it is currently not connected to the domain. I'm trying to do a cleanup of the computer names on the server and I want to remove all of the inactive ones.
Are we talking about NT or 2k? My first approach would probably be to look for the LastLogon attribute for user and computer objects if it's a 2K AD domain. I don't think that this value is replicated, so you must retrieve the value from each domain controller. If you are comfortable working with scripts check out Microsoft TechNet - Computer Management - Enumerate Computer Accounts
Dig Deeper on Campus area network
Related Q&A from Michael Gregg
Enterprise security expert, Michael Gregg answers a question regarding port 3389 issues when a user tries to open port 3389 RDP on their router to ... Continue Reading
Security expert Michael Gregg discusses the disadvantages to a layered approach to enterprise security. Continue Reading
Security expert Michael Gregg fields a question about unknown network cards gaining access to a user's network. Continue Reading