Tracking user account activity.

Giganews Newsgroups
Subject: Tracking user account activity.
Posted by:  Microsoft News Groups (Plea…
Date: Thu, 30 Mar 2006

What I am trying to do is to track when I can disable or delete an account.
The traditional way to do this is to track time since their last login which
is displayed on the domain controllers.  What we have however, is a number
of users that do not logon directly to a workstation with their credentials
since we have many restricted autologon kiosks that use a generic name.  To
compound issues more, we have users outside of our organization that vpn
into our organization (not a MS VPN) and have been given accounts so they
can remotely map to certain server shares.  So for these types of users,
when they connect this way, it does not update their last logon timestamp on
the domain controller, making disabling and deleting accounts tricky.  We
have tried to put these users into a separate OU, but this group of people
in in constant flux.  What I would like to see is some other way that AD
tracks these types of logons that are not traditional logons to workstations
so that I can more adequately perform my account managment.

Thanks for any help