Get latest LastLogon from multiple Domain Controller

Question

Hello,

We have multiple Domain Controllers in single domain. let saya DC1.domain.com, DC2.domain.com, DC3.domain.com

When we want to get LastLogon value, how can we get the latest LastLogon value among the three DCs?

Answer 1

Hello,

Unfortunately, there is no easy way to do that due to the peculiarities of the Last Logon property. The thing is that the property value does not replicate among domain controllers (DCs). It means that on each domain controller the value is different and to get the latest one you need to request it from each DC. It can only be done using a script. Unfortunately, we do not have any samples of such scripts.

For your information, Adaxes displays the value of the Last Logon property stored on the DC Adaxes is currently connected to.

Comments

I believe the value that fachmi is looking for is lastLogonTimestamp, yes?

---

Hello Mark,

The difference is that unlike LastLogon, the LastLogonTimeStamp property is replicated among all domain controllers (DCs). As such it is always set to the latest logon date not depending on the DC. If this is what you need, then retrieving the LastLogonTimeStamp property value should work just fine.