LastLogon vs LastLogonTimeStamp vs LastLogonDate They are the LastLogonDate, LastLogon and the LastLogonTimeStamp. There are 3 basic attributes that tell you when the last time an object last authenticated against a Domain Controller.

So what is last logon in Active Directory? In simple terms, it’s a time stamp representation of the last time a domain controller successfully authenticated the user or computer object. So for this, we will use the LastLogonDate and LastLogon attributes in Active Directory to get last logon date for users in your domain. For one, it’s a huge SOX violation and two, it gives you a better overview of what’s in your environment. We’ll get to the automation of the term procedure in another post but this should be done. I understand that some can be lab accounts, others can be test accounts that get used from time to time but for the most part, it’s Nancy from Accounting that quit 3 years ago and her account is still being used by Mary because there wasn’t a proper term procedure in place. I don’t know why, but I don’t like to see stale accounts just there in the mix with all the accounts that logon on a regular basis. For me personally, this is probably one of my biggest pet peeves. Some users more recent than others but I have seen some as bad as a couple of years, yet the accounts were still not disabled. It seems simple right? In many of the environments I’ve walked into there have been users that haven’t logged into the domain in a certain number of months.

Get Last Logon Date For All Users in Your Domain.

Lansweeper last logon report