True Last Logon
User's Guide True Last Logon
Welcome
Getting Started
1. Perform a query
2. Format the results
3. Store or share the results
4. Perform bulk administration on the results
5. Reference
6. Main window reference
7. Command line arguments
8. System Requirements
9. Licensing
10. Support
Welcome
Spring clean your Active Directory with True Last Logon!
Quickly investigate and manage unused, obsolete or inactive users and computers based on their true last logon time.
True Last Logon handles the complex task of identifying the true last logon time of any Active Directory account (user or computer) by querying all the relevant Active Directory Domain Controllers. It displays this along with detailed account information, enabling you to apply filters and perform bulk actions on the results.
True Last Logon makes it easy to identify accounts in need of attention, e.g. disabled, locked, never logged on, or with a non-expiring password, and then to deal with them as a group.
Features:
· Accurate True Last Logon Time for all accounts
· Filter by any field (see below)
· Powerful bulk administration tools
· Generate reports for printing, emailing, or as CSV for export e.g. to Excel.
· Support for Active Directory running on Windows 2000/2003
· Command Line Operation
· Can be run from Windows 2000, XP, Vista, 2003 Server
· No server components or agents to install
· No changes or modifications to Active Directory required
True Last Logon displays the following Active Directory fields:
· Users real name and logon name
· Last Logon Date & Time
· Last Logon Timestamp (Replicated value)
· Account Expiry Date & Time
· Enabled or Disabled Account
· Locked Accounts
· Password Expires
· Password Last Set Date & Time
· Logon Count
· Bad Password Count
· Expiry Date
Getting Started
This section is a walk through of True Last Logon's main features. For more detailed information, see the Reference section (Reference).
Start by identifying which Active Directory accounts to work with. For the full range of options, see Main window reference (Main Window). A typical query might go as follows:
1) In Query select what type of account you wish to query, either user accounts or computer accounts or both.
2) Click Browse to select an OU (Organizational Unit) from your Active Directory tree.
3) Click Query All DCs
True Last Logon visits each Domain Controller to obtain the true last logon time and other account information for each account within the selected Organizational Unit. The status bar (bottom of the main window) shows which Domain Controller is being processed, and how many are left. The time all this takes depends on factors such as server speed, network speed, number of DCs, and the number of objects queried.
[Top]
Specify how the query results are displayed by doing any of the following:
- Sort on a column by clicking the column header.
- Reorder the columns by dragging-and-dropping.
- Show or hide columns, and add new ones by clicking Show/Hide Cols.
[Top]
3. Store or share the results
Once you have the query results, you may wish to store them or share them with others.
To print your results
Click Print.
The File menu options has the useful options Page Setup and Print Preview.
To export or email your results as a .csv file
To configure True Last Logon for email, on the main window, click Mail Settings.
1) Click Export.
The Export window opens.
2) Format the contents as you would the query results - see (2. Format the results)
3) Do one of the following:
Save the table as a .csv file by clicking Save to file.
Print the table by clicking Print.
Send the table by email by clicking Email.
(If you have not already done so, click Mail Settings on the main window to configure the system for emailing.)
4) Close the window by clicking OK.
[Top]
4. Perform bulk administration on the results
Now you can perform bulk administration tasks on the users in the query results.
Note: An account is only selected if their tickbox is selected.
5) Select accounts by doing some of the following:
- Click individual tickboxes.
- Select all visible accounts by clicking Select All.
- Highlight accounts by dragging the mouse (hold down CTRL to start a new area), then click Select Highlighted (or Deselect Highlighted).
- Click Invert Selection.
6) Perform one of the following administrative actions on the selected accounts :
- Enable them by clicking Enable Selected.
- Disable them by clicking Disable Selected.
- Move them to other Organizational Groups by clicking Move Selected.
[Top]
Reference
This section provides reference information on True Last Logon.
The main window has the following elements:
| Menus and buttons | Alternatives to the buttons described below. |
| Query | The type of query: user accounts, computer accounts, or both. |
| OU | The Organizational Unit to query. Click Browse to drill through your Active Directory tree. |
| Browse | See "OU", above. |
| Domain | The domain to query. Click Query all DCs to query all domain controllers, or Query Specific DCs to query only selected domain controllers. |
| Query all DCs | See above, "Domain". |
| Enable Selected | Enable the selected accounts. |
| Disable Selected | Disable the selected accounts. |
| Move Selected | Move the selected accounts to another OrganizationalUnit within the Active Directory. |
| Mail Settings | Open the Mail Settings window to enable you to sendreports by email. |
| Query Specific DCs | Restrict your query to specified servers. This canbe useful if you don't want to query servers across slow links. See above,"Domain". |
| Print the query results. | |
| Select All | Select all accounts in the query results. |
| Deselect All | De-select all accounts in the query results. |
| Invert Selection | Swap the selection status between selected andunselected accounts. |
| Select Highlighted | Select all accounts highlighted using the mouse. |
| Deselect Highlighted | Deselect all accounts highlighted using the mouse. |
| Show/Hide Cols. | Opens the Choose Columns window, enabling you toshow or hide columns, and edit the list of additional attributes to display. |
| Export | Export the results as a .csv, e.g. for use in Excel. |
| Results Filter | Use the dropdown lists to create a filter, thenclick ApplyFilter. Click Reset Filter to remove it. |
To select more than one user, hold down SHIFT and click the first and last of a group, or hold down CTRL and click individual users.
[Top]
Command line arguments
True Last Logon supports the following command line arguments:
/file:filename.csv
/path:"OU=Sales,DC=Domain,DC=Com"
/leaveopen
/users
/computers
/email or /email:jsmith@domain.com
/subject:"Email Subject"
/filter:30 (days)
/notloggedon - Use with /filter to find users who have not logged on in for X number of days
/disableaccount - Disable the filtered accounts
/deleteaccount - Deletes the filterd accounts (No warning is given)
/all - show all cols /subject:"email subject"
/servers:list of DCs separated by commas
Notes
- /file: and /path: are mandatory arguments.
- /all overrides individual column names.
- When using /deleteAccount from the command line no warning is given.
- Individual columns can be specified by using the Active Directory attribute.
Example Usage:
TrueLastLogon.exe /file:c:\export.csv /path:OU=Sales,DC=Domain,DC=Com /leaveOpen
System Requirements
True Last Logon can be run on Windows (2000, XP, 2003 Server, 2008 Server, Vista) with Microsoft .Net 2.0 Framework
[Top]
Licensing
- True Last Logon is licensed on a per administrator basis, a site license and a enterprise license is available. If your organization has multiple sites then you must purchase a licence for each site or purchase the Enterprise licence.
- The software is only licensed for use by your organization. If you intend to use the program to assist another organization (even if they are on the same site) then that organization must also purchase a licence.
- A consultant licence is available for the full AD Toolset, if you would like to use the program at multiple sites and for different organizations then you will require a Consultant Licence. This licence allows one consultant to use the program at multiple sites for multiple organizations but not to leave the software installed at those organizations, if more than one consultant will be using the software then a Consultant Licence is required for each person.
Support
If you require help with the program or simply need to ask a question please you can contact us via our support form or simply e-mail support@dovestones.com.
See also the Frequently Asked Questions at http://www.dovestones.com/support.asp
[Top]
