Re: Computer Inventory
Neil wrote:
> Looking for a way to find out when was the last time somebody was logged
> onto
> a computer over the enterprise. We need the count of desktops which have
> been
> logged onto. We don't need the user count, we are looking for desktop
> count.
I suggest Joe Richards' free oldcmp utility, designed to find unused
computer objects:
http://www.joeware.net/freetools/tools/oldcmp/index.htm
If your domain is at Windows 2003 functional level, you can use the
lastLogonTimeStamp attribute to find unused computers. When the computer
account authenticates to the domain, the value of lastLogonTimeStamp is
updated if the old value is more than 14 days (by default) in the past. Any
value over 14 days in the past is accurate. I have an example VBScript
program to retrieve lastLogonTimeStamp for all users
(LastLogonTimeStamp.vbs) linked on this page:
http://www.rlmueller.net/Last Logon.htm
The program can be easily modified to document all computers instead of all
users by replacing the filter defined by this statement:
strFilter = "(&(objectCategory=person)(objectClass=user))"
with this:
strFilter = "(objectCategory=computer)"
If your domain is not at W2k3 functional level, you can use the more
complicated LastLogon.vbs program on the page linked above, or use the
pwdLastSet attribute. By default all computer accounts have their passwords
reset every 30 days. An example program that documents pwdLastSet for all
users in the domain is linked here:
http://www.rlmueller.net/PwdLastChanged.htm
The same modification to the filter statement as above can be made to this
program to have it document computers instead of users. The modification is
documented in a comment in the program.
--
Richard Mueller
MVP Directory Services
Hilltop Lab -
http://www.rlmueller.net
--