Problem solve Get help with specific problems with your technologies, process and projects.

Utility to determine if a user has logged on more than once

I need to find a utility to tell me if a user is logged on more than once on an NT4 domain -- dumpsec and reallastlogon.exe...

tell me the last time someone logged on, but they do not tell me if a user logged on more than once.

Unfortunately, I don't know of one, and neither do my contacts at Microsoft.

The problem is that the domain controller records the last logon time as a property of the user account. This isn't replicated across all the domain controllers, and consequently, you have to get the data from all the controllers and correlate it yourself.

For more information on this topic, visit these other searchSecurity resources:
Best Web Links: Securing Microsoft Products/Applications

This was last published in February 2002

Dig Deeper on Information security policies, procedures and guidelines

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.