So how do we enable this feature? Let’s start with the basic method, which enables us to save just the information in Active Directory without displaying it to the user. msDS-LastSuccessfulInteractiveLogonTime – The time of the last successful logon attempt to a workstation.msDS-LastFailedInteractiveLogonTime – The time when the last failed logon attempt occurred.msDS-FailedInteractiveLogonCountAtLastSuccessfulLogon – The total number of failed interactive logons until the last successful logon.msDS-FailedInteractiveLogonCount – The number of failed logon attempts since the last interactive logon setting was enabled.These attributes are already a part of the AD schema and do not require any modification to AD. When last interactive logon is activated for the Active Directory domain, the following AD attributes of the user’s object store the relevant information. I will perform these steps and take screenshots on a Windows Server 2008 R2 machine, but it all works the same on Windows Server 2012.
In order to activate last interactive logon, the functional level of the domain must be set at minimum to Windows Server 2008. One of the great features that Windows Server 2008/R2/2012 has to offer is the last interactive logon information. In this article I will show you how to display the last interactive logon information in Windows Server 2008 and Windows Server 2012. Or perhaps the security officer at your organization as asked you for a report. Or maybe you need to track the number of unsuccessful logon attempts to the domain. Imagine that your network security was compromised and you have a good reason to believe that someone attacked and compromised your domain environment.
0 kommentar(er)
