AD : check a user's active log-ons

Post by **muijsenbergq** » Thu Apr 16, 2009 7:22 pm

Hello all,

Is it possible with powershell to check for a user to which computers he/she is currently logged on in AD?
Or otherwise, how many active logons he/she has?

thanks!

Post by **scharique** » Fri Apr 17, 2009 12:00 am

I am not sure about the first question, regarding which DC a user was authenticated against, run SET L on the cmd prompt, about the second question. start with this ,(Get Quest AD Cmdlets, if you haven't already)Get-QADUuser username | select lastlogon

Post by **jhicks** » Fri Apr 17, 2009 12:23 am

None of that information is stored in AD that I'm aware of. You would need some out-of-band tool to log that information when a user logs on.

Post by **muijsenbergq** » Fri Apr 17, 2009 12:51 am

Would be handy info for AD to store though..i'll do it another way then.Anyway,thanks for your replies.

Post by **jhicks** » Fri Apr 17, 2009 1:07 am

You could add code in a user's logon script to add the computer name to a field in their AD user object. There is a Notes field, which I think the user has write access to. The challenge would be handling multiple logons and cleaning it up when the user logged off.

Post by **muijsenbergq** » Fri Apr 17, 2009 1:21 am

OKSounds interesting.I'll look in to that.thnks.

SAPIEN Technologies