ManageEngine x Forrester | Workforce Identity Platforms Landscape Report

Last Logon Reporting Software

Tracking the "Last logon time" of users is crucial for efficient audit and clean-up activities. With ManageEngine ADManager Plus's Last Logon Finder, you can effortlessly retrieve the last logon time of selected or all users across multiple Domain Controllers within your domain.

Prerequisites for Using the Last Logon Reporter:

To utilize the Last Logon Reporter tool effectively, it is recommended to have a basic understanding of LDAP scripting. Additionally, ensure that you have an active connection to the Domain for executing LDAP queries.

Benefits of the Last Logon Reporting Tool:

Discover Domain Controller Specific Last Logon details. Retrieve the last logon information for all users in the Domain. Effortlessly search for specific users and access their last logon times. Enjoy a simple, hassle-free, and user-friendly experience.

How to Utilize the Last Logon Reporter:

  1. On the first page, provide the domain name and the username(s) for which the last logon details are required.
  2. If the tool does not automatically detect the default domain, enter the necessary domain name in the appropriate box.
  3. Enter a few letters of the users' first name, last name, display name, or sAMAccountName in the username textbox, then click the "Search" button.
  4. Use the "Select All" button to choose the entire search result, or individually select users using their corresponding checkboxes.
  5. Click the "Get Last Logon Details" button.
  6. Select the desired Domain Controllers and preferred attribute. Click on the "Generate Report" button.
  7. Use the "Time Zone" button to modify the time zone. By default, if the time zone of the Domain Controller and your working machine differ, the time is automatically converted based on your machine's settings.


  • For accurate data, it is advisable to select all the Domain Controllers (DCs) within a domain.
  • If the functional level is set to Windows Server 2003 or above, ensure that you select the "lastLogonTimestamp" attribute.

Running the Last Logon Reporter Tool using PowerShell:

You can also execute the following commands in PowerShell to run the Last Logon Reporter tool:

  • Run 'add-PSSnapin GetLastLogon'
  • Followed by 'Get-LastLogon'

There are over 8,500 people who are getting towards perfection in Active Directory, IT Management & Cyber security through our insights from Identitude.

Wanna be a part of our bimonthly curation of IAM knowledge?

  • -Select-
  • By clicking 'Become an insider', you agree to processing of personal data according to the Privacy Policy.