FYI - The Last Logon attribute is not replicated. Meaning you will have to look at the security event log on each domain controller in your environment.
My tool of choice would be PowerShell or VBScript to enumerate the information. There are posts in the VBScript Forum that can help you with this.
Another suggestion would be to use Logparser to grab the Events in the Security log. Log parser can be found at:
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.