Author Posts

August 16, 2017 at 10:06 am

Is there a way to query/check what was the computer name to which a particular AD account was last logged on?

August 16, 2017 at 11:07 am

Do you use SCCM in your environment ? If so this may provide an audit of where the user logged in.
SCCM 2012: Query to find clients a user last logged in to

with that list to see the current logged in user run this

Get-CimInstance –ComputerName CLIENT1 –ClassName Win32_ComputerSystem | Select-Object UserName

Or you can crawl the security logs on you DC's

August 16, 2017 at 11:33 am

This may also help https://www.experts-exchange.com/questions/28501625/PowerShell-Script-to-get-Last-Logon-of-User.html

The other option apart from above is to use logon scripts and write to a hidden share somewhere the computer name, username, logon time etc