cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Tuberider
Engaged Sweeper
Lansweeper has read access on Active Directory.
Is there a daily task that reads the Computer Account LastLogonTimestamp from Active Directory?

4 REPLIES 4
marck1024
Engaged Sweeper III
I read in another thread that Lansweeper checks all of the domain controllers for lastLogon since it is not an attribute that replicates. But I have a feeling that when a Preferred Domain Controller is set in the scanning options, Lansweeper stops checking all of the domain controllers. That's a good thing, because some of the domain controllers are in far away locations over slow WAN links. That brings us back to lastLogonTimestamp. That attribute does replicate. So, Lansweeper pulling it in from the domain controllers it talks to will provide the most reliable information about whether AD accounts are dormant.
marck1024
Engaged Sweeper III
Please update the Active Directory scanner to record the lastLogonTimeStamp attribute.
swomack23
Engaged Sweeper
Is it still the case that we cannot get a report on the LastLogonTimeStamp from Active Directory?
MikeMc
Champion Sweeper II
This does not appear to be scanned by Lansweeper.