Just install MOC! :p You might use lastlogon from the DCs. I remember the scripting guy blog having something on it.
Ahh found it: http://blogs.technet.com/b/heyscriptingguy/archive/2010/01/27/dandelions-vcr-clocks-and-last-logon-times-these-are-a-few-of-our-least-favorite-things.aspx -----Original Message----- From: Rankin, James R [mailto:kz2...@googlemail.com] Sent: Wednesday, August 15, 2012 11:26 AM To: NT System Admin Issues Subject: Offline/online detection What's the best way to detect whether a user is offline or online (I.e. Connected to the corporate network)? I thought maybe query the %logonserver% variable but that might also apply to online situations where a DC cannot be contacted for whatever reason. I'm sure there must be a way, wondering if anyone has any ideas they can throw out? TIA, JR ---Blackberried ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin