So i'm trying to figure out what user last logged into a specific computer within active directory. I remember there is a way to do this, either by extending schema or some add in, but i dont remember where or how to do it. Any ideas guys? i basically want to know which user logged into which computer and at what time (i dont need history, just the last user)
Thanks

 

Security Log in Event Viewer

 

I just looked at all of the AD object attributes for both user accounts and computer objects and neither one of them have any attributes that would allow you to tie a specific user to a specific computer. So it looks like Whiskers suggestion of log files may be your only option.

 

and I don't think an addin would be able to tell you who did what before the addin was installed.

 

im pretty sure there is a addin or some sort of extension/program you can run that when you right click on the computer account in AD it will tell you who last logged into the machine and the time..i just dont remember where/what is it

 

but how would it tell you that from a time before it was installed and monitoring for such things?