Differences

This shows you the differences between two versions of the page.

--- active_directory [2022/01/14 13:23] – created mgupton
+++ active_directory [2022/01/17 17:21] (current) – [Solutions] mgupton
@@ Line 1: / Line 1: @@
 ====== Active Directory ======
+====== Tools ======
+  * [[https://github.com/jdhitsolutions/ADReportingTools]]
+====== Solutions ======
+=== run-mmc.bat ===
+Run AD domain tools from machines not joined to domain.
 <code batch>
 @echo off
@@ Line 6: / Line 12: @@
 @rem Run this script as administrator.
 set /p USER="Username: "
-runas /netonly /user:contoso.com\%USER% "mmc C:\Users\Public\Desktop\contoso.com.msc /server=contoso.com.com"
+runas /netonly /user:contoso.com\%USER% "mmc C:\Users\Public\Desktop\contoso.msc /server=contoso.com"
 pause
 </code>
+----
+=== Get LastLogon to find stale user accounts ===
+//Powershell// command for getting the LastLogon date-time for users on a specified domain controller.
+<code powershell>
+Get-ADUser -Credential $Credentials -Server pdc -Filter * -Properties * | Select-Object Name, @{N='LastLogon'; E={[DateTime]::FromFileTime($_.LastLogon)}}
+</code>
+See theses solutions for handling multiple domain controllers, [[https://interworks.com/blog/trhymer/2014/01/22/powershell-get-last-logon-all-users-across-all-domain-controllers/|solution1]], [[https://stackoverflow.com/questions/41042336/lastlogon-from-all-domain-controllers-csv-output|solution2]].