- Posts: 55
- Thank you received: 0
Tools/Snap-ins for better AD User account management
16 years 2 months ago #27393
by KiLLaBeE
Replied by KiLLaBeE on topic Re: Tools/Snap-ins for better AD User account management
Login dates and times should be logged on the security log on event viewer of the DC that authenticated the user. In which case, you can use Event Viewer to connect to the DC and view the logs. If you aren't an administrator (or domain admin, in the case of a domain), you'll probably have to edit the DC's security policy to grant different user groups the rights to view audit logs. After you view event viewer, you just have to filter what you want to see.
Unfortunately, I may be wrong because I've actually never looked at the security logs of a DC on a production network that has DCs that ONLY run AD, so I can't say how crazy big the logs can be.
One other helpful feature that you can enable on Active Directory Users and Computers is Advanced Features. You may probably know this, but in case you don't (since I don't want to miss out the chance of revealing this cool feature
), highlight the domain and go to View and click Advanced Features. Now when you look at the properties of a user account at the Object tab, you'll see the date that their user account was created, modified, and the specific location of their account. That's a bit outside the scope of your question, but in an environment with lots of OUs, it'll help to quickly find a user this way.[/i]
Unfortunately, I may be wrong because I've actually never looked at the security logs of a DC on a production network that has DCs that ONLY run AD, so I can't say how crazy big the logs can be.
One other helpful feature that you can enable on Active Directory Users and Computers is Advanced Features. You may probably know this, but in case you don't (since I don't want to miss out the chance of revealing this cool feature
), highlight the domain and go to View and click Advanced Features. Now when you look at the properties of a user account at the Object tab, you'll see the date that their user account was created, modified, and the specific location of their account. That's a bit outside the scope of your question, but in an environment with lots of OUs, it'll help to quickly find a user this way.[/i]
Time to create page: 0.152 seconds