Ask the Expert

Utility to determine if a user has logged on more than once

I need to find a utility to tell me if a user is logged on more than once on an NT4 domain -- dumpsec and reallastlogon.exe tell me the last time someone logged on, but they do not tell me if a user logged on more than once.


    Requires Free Membership to View

Unfortunately, I don't know of one, and neither do my contacts at Microsoft.

The problem is that the domain controller records the last logon time as a property of the user account. This isn't replicated across all the domain controllers, and consequently, you have to get the data from all the controllers and correlate it yourself.


For more information on this topic, visit these other searchSecurity resources:
Best Web Links: Securing Microsoft Products/Applications


This was first published in February 2002

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: