Active Directory: Find out unused computers using LDAP query RRS feed

  • Question

  • Hi

    Is there a way to find out which computers are not in use for a certain period ?

    I can't run dsquery because I'm running on Linux platform.

    I know about the following attributes :


    • lastLogon - not replicated between DCs in the domain
    • lastLoginTimestamp - replicated between DCs in the domain


    1) Will any change in these attributes update the usnChange attribute of the object ?

    2) What will happen if a user logs-in and doesn't log-off for a very long period ?
        Using the above attributes might get me into a conclusion that the computer is not in use, even though the user is still logged-on.

    Thanks for the help !

    Monday, December 12, 2011 2:05 PM


All replies