2/14/2023 0 Comments Admt 3.2 not seeing the domain![]() This could be done, but was tedious and time consuming. So to figure out when computer CORP-PC1 last logged on, you would have to query the lastLogon attribute on all the DCs in the domain and find the most recent one. The “on that DC” part is important, because the lastLogon attribute was not replicated beyond the local DC. It stored the timestamp of the last logon for a computer on that DC. On Windows 2000 every DC maintend an attribute on each computer object called lastLogon. This in turn makes it hard to know how many computers are actually active. (Outdated in this context means “has not logged on to the domain for X days). This leaves our directory service full of outdated user and computer object. Just as with user accounts, computer accounts gets left in the domain when the machine is decomissioned or reinstalled under another name etc. The password is set by the machine when it is joined to the domain and changed every 30 days by the machine. The “user name” of a computer is its name with a dollar sign appended, e.g: MYPC1$. ![]() Computers have accounts in Active Directory and log on just as user accounts do. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |