• State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 25 subscribers
  • Views 2886 views
  • Users 0 members are here
Options
Related
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Terminated User Information

bobby torres
over 5 years ago

Looking for help please, creating an Enterprise Reporter report for auditing. Thank you in advance

Criteria

1. Employee Name
2. AD Account ID
3. Account Activation/Creation Date
4. Account Disable Date
5. Account Deletion Date
6. Last Logon Date

Parents
  • 0 over 5 years ago

    Items 4 and 5 are going to be almost impossible to obtain as Active Directory does not really store this information as a discrete property.  Disabling and deletion of accounts could be considered "modifications" and thus in the case of an account disabling you might consider its "last modified" date to be useful.  However , once an account is deleted, you only have access to its tombstone and I'm not sure that Enterprise Reporter can access the data on those.  Last Logon date will be available from the contents of the lastlogontimestamp attribute as long as the account still exists in AD.

Reply
  • 0 over 5 years ago

    Items 4 and 5 are going to be almost impossible to obtain as Active Directory does not really store this information as a discrete property.  Disabling and deletion of accounts could be considered "modifications" and thus in the case of an account disabling you might consider its "last modified" date to be useful.  However , once an account is deleted, you only have access to its tombstone and I'm not sure that Enterprise Reporter can access the data on those.  Last Logon date will be available from the contents of the lastlogontimestamp attribute as long as the account still exists in AD.

Children
No Data