last login time for a user

Hello,

I'm required to show last login times for a user when they login to a
server running Windows Server 2003. I'm trying to use the script at the
end of this message to query the DIT and retrieve the value of
lastLogonTimestamp for the user currently logging in. The script I'm
using is a common script that is found on many websites and the VBscript
version comes from the WIndows Server Cookbook. The problem I'm having
is that the script always returns Dec 31 1969 despite the fact that the
domain administrator account I'm querying just logged in because I'm
running the script as the domain administrator account for test purposes.

One version of the script uses subtraction on the "- $objLogon->LowPart"
but I tried that and it doesn't change the printed value.

Modifying the last 2 $intLogonTime lines at the end of the script don't
even change the printed value either. I'm not sure why this is
happening. Can anyone help? The value is being set. I verified using
ADSI Edit.


# ------ SCRIPT CONFIGURATION ------
my $strUserDN = "<UserDN>"; # e.g. cn=rallen,ou=Sales,dc=rallencorp,dc=com
# ------ END CONFIGURATION ---------
use Win32::OLE;
$Win32::OLE::Warn = 3;
my $objUser = Win32::OLE->GetObject("LDAP://" . $strUserDN);
my $objLogon = $objUser->Get("lastLogonTimestamp");
my $intLogonTime = ($objLogon->HighPart * 232) + $objLogon->LowPart;
$intLogonTime = $intLogonTime / (60 * 10000000);
$intLogonTime = $intLogonTime / 1440;
print "Approx last logon timestamp: ", scalar localtime($intLogonTime),"\n";

<none.DeleteThis@none.com> wrote in message
news:485f16b7$0$27944$4c368faf@roadrunner.com...
> Hello,
>
> I'm required to show last login times for a user when they login to a
> server running Windows Server 2003. I'm trying to use the script at the
> end of this message to query the DIT and retrieve the value of
> lastLogonTimestamp for the user currently logging in. The script I'm using
> is a common script that is found on many websites and the VBscript version
> comes from the WIndows Server Cookbook. The problem I'm having is that the
> script always returns Dec 31 1969 despite the fact that the domain
> administrator account I'm querying just logged in because I'm running the
> script as the domain administrator account for test purposes.
>
> One version of the script uses subtraction on the "- $objLogon->LowPart"
> but I tried that and it doesn't change the printed value.
>
> Modifying the last 2 $intLogonTime lines at the end of the script don't
> even change the printed value either. I'm not sure why this is happening.
> Can anyone help? The value is being set. I verified using ADSI Edit.
>
>
> # ------ SCRIPT CONFIGURATION ------
> my $strUserDN = "<UserDN>"; # e.g.
> cn=rallen,ou=Sales,dc=rallencorp,dc=com
> # ------ END CONFIGURATION ---------
> use Win32::OLE;
> $Win32::OLE::Warn = 3;
> my $objUser = Win32::OLE->GetObject("LDAP://" . $strUserDN);
> my $objLogon = $objUser->Get("lastLogonTimestamp");
> my $intLogonTime = ($objLogon->HighPart * 232) + $objLogon->LowPart;
> $intLogonTime = $intLogonTime / (60 * 10000000);
> $intLogonTime = $intLogonTime / 1440;
> print "Approx last logon timestamp: ", scalar
> localtime($intLogonTime),"\n";

The "232" in the script above should be "2^32" (2 to the 32nd power). The
final answer should be in UTC (Coordinated Universal Time, or what was once
called GMT).

--
Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--