Knowing An Active Directory User Last Logon Time

Knowing An Active Directory User Last Logon Time

A user’s last logon time is stored in Active Directory user object attribute. The last logon time is updated only in the Active Directory instance of the domain controller by which the user is actually authenticated.

This is why it is important to query all domain controllers in a user's definition domain to get the user's last logon time.

A sample PowerShell script for the concerned issue is provided here. You can also use the Attribute Editor (accessible from Advanced Options in Administrator Properties) by scrolling down to the lastLogon attribute as shown in the below figure.