GMcCartney wrote:
Hi folks,
Been using a number of OOTB reports but would like to play a little more with more what is available for AD auditing, I am looking for some reports that can show me the following.
User accounts last known login.
User accounts that are enabled and disabled.
Would like to be able to schedule these for a weekly run.
Your input would be most appreciated. First post by the way so be gentle 🙂
Thank you.
There's a built in report called "Active Directory: Enabled/Disabled users" that might work for you. While it won't tell you the last time they logged in, the lastchanged" field might be useful, or you can modify the report to show you the REAL "last changed" date from by ticking the checkboxes for "whenChanged" and "LastLogon". The "LastChanged" field appears to mean nothing, as we have a user who hasn't logged in since 5/25/16 (we need to clean up AD badly
🙂 ) but it shows that it was "lastchanged" 11/19/19, but teh "when changed" field is 7/11/19 (which is under the "object" tab in AD)
