Home / server / Questions / 408412
Accepted
Tobia
Asked: 2012-07-17 23:42:23 +0800 CST

Get access list of a user on Win 2003 server

  • 772

I would like to find all unused accounts of the active directory, so I need to see the last access to the domain. I looked into the user properties but I did not find anything. Where can I find this information?

windows-server-2003 active-directory users

2 Answers

  1. Best Answer

    Open up your AD Users & Computers. Go to Saved Queries. Rightclick > New > Query. Give it an easy to remember name. Click on Define Query. Find > Custom Search > Advanced.

    Paste this into the box:

    (&(objectCategory=person)(objectClass=user)(lastLogonTimeStamp<=128147796000000000))

    Press OK twice. Voila, you now have the accounts that have not logged on since Feb. 1, 2007.

    enter image description here

    If you want to change the date, change the number in the qry above. You can use this tool for the conversion. Alternative here

    • 5

  2. Try the built-in tools like Active Directory Users, and check for additional columns on your Domain Controller.

    Also you can connect to your domain controller with LDAP Administrator or similar tool, so you can see perfectly all the smallest details of the LDAP DB, but some is binary data, so to change anything it's really much better to use Windows Domain Controller tools.

    • 0