I thought that net user /dom queries "lastlogon", which is not rep'ed, not "lastlogontimestamp"? Also, "lastlogontimestamp" is only updated if it changed a week or more ago. so it could always be a week off..
Medeiros, Jose wrote: > Hi Joe, > > Quick question, I have always just used the NET USER /DOM (username ) > at a command prompt which gives me the following output: > ---------------------------- > C:\Documents and Settings\jmedeiros>net user /dom jmedeiros > The request will be processed at a domain controller for domain > Stargate.sg1.net. > > User name jmedeiros > Full Name Medeiros, Jose > Comment > User's comment > Country code 000 (System Default) > Account active Yes > Account expires Never > > Password last set 3/16/2005 6:52 PM > Password expires 6/14/2005 6:52 PM > Password changeable 3/16/2005 6:52 PM > Password required Yes > User may change password Yes > > Workstations allowed All > Logon script CISCO123.bat > User profile > Home directory > Last logon 5/27/2005 12:57 PM > > Logon hours allowed All > > ------- > However If I wanted to use this complex VBscript to do the same thing > tyhat a simple dos command can do, how would I add a wildcard to this > vbscript that show's all the user logons and have it dump the output > in a text file? > > Regards, > > Jose Medeiros > > ------------------------------------------------------------------------- > > , but if I wanted to use this vbscript to give > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of joe > Sent: Friday, May 27, 2005 12:47 PM > To: ActiveDir@mail.activedir.org > Subject: RE: [ActiveDir] lastlogontimestamp > > > Split the difference, grab adfind from www.joeware.net in the free > windows tools section and see what it decodes the values to. I can't > speak to acctinfo dll as I never used it. Vbscript decoding of int8 > values is often troublesome, it is possible the code below isn't > doing a very accurate decode, I haven't checked it. I can guarantee > adfind is doing it well with the possible debate around DST issues > and what really should be displayed (should it be a value that was > accurate at the time or a value accurate after a DST switch). > > The most accurately returned values I have seen for vbscript have > been out of code Richard Mueller has put together. > > joe > > > > > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Smith, Robin > Sent: Friday, May 27, 2005 2:31 PM > To: 'ActiveDir@mail.activedir.org' > Subject: [ActiveDir] lastlogontimestamp > > > Hi. Our domain is at the Windows 2003 server functional level. I have > registered acctinfo.dll from the 2003 resource kit and have the > Additional Account Info tab in ADUC. I am finding a big discrepancy > between the lastlogontimestamp date on the Additional Account Info > tab and the actual lastlogontimestamp date. For example, John Doe > shoes a lastlogontimestamp of 11/23/04 in ADUC. However, if I execute > the following script: > > Set objUser = GetObject("LDAP://cn=John Doe, ou=MOET (g14), ou=Field > Users, ou=LWD Accounts, dc=njdol, dc=ad, dc=dol") > Set objLastLogon = objUser.Get("lastLogonTimestamp") > > intLastLogonTime = objLastLogon.HighPart * (2^32) + > objLastLogon.LowPart > intLastLogonTime = intLastLogonTime / (60 * 10000000) > intLastLogonTime = intLastLogonTime / 1440 > > Wscript.Echo "Last logon time: " & intLastLogonTime + #1/1/1601# > > (code was taken from here: > http://www.microsoft.com/technet/scriptcenter/topics/win2003/lastlogon.mspx) > > I get a much more current date (5-25-05). This is happening with more > than one user. Any explanation for why this happens. I've done a lot > of reading this week and I understand that the lastlogontimestamp > field could be off by 7-10 days but this is several months. > > Thanks, > Robin > NJDOL > > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
