Welcome › Forums › General PowerShell Q&A › query computer name by AD account
This topic contains 3 replies, has 3 voices, and was last updated by
Is there a way to query/check what was the computer name to which a particular AD account was last logged on?
Do you use SCCM in your environment ? If so this may provide an audit of where the user logged in.
SCCM 2012: Query to find clients a user last logged in to
with that list to see the current logged in user run this
Get-CimInstance –ComputerName CLIENT1 –ClassName Win32_ComputerSystem | Select-Object UserName
Or you can crawl the security logs on you DC's
Please follow the How-to article for step-wise instructions – https://community.spiceworks.com/how_to/130398-how-to-track-user-logon-sessions-using-event-log
This may also help https://www.experts-exchange.com/questions/28501625/PowerShell-Script-to-get-Last-Logon-of-User.html
The other option apart from above is to use logon scripts and write to a hidden share somewhere the computer name, username, logon time etc
The topic ‘query computer name by AD account’ is closed to new replies.