That should do it, but you will need to run that query on all domain controllers. The lastLogonTime property is not replicated between DC's. I don't know the units though... Glenn Sullivan, MCSE+I MCDBA David Clark Company Inc. -----Original Message----- From: Svein Arild Haugum [mailto:svein@xxxxxxxxxxxxxx] Sent: Tuesday, November 25, 2003 8:03 AM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Lastlogon parameter in Actice Directory. Im trying to build a script to check for computers who no longer exist in my network. So I can clean this up in AD. The command i use to export tis in AD is: ldifde -f c:\output.txt -s hei00 -d "ou=PC-Servere,dc=XXXXXXX,dc=no" -p subtree -l "lastlogon" This gives me a output of all servers/computers in this OU with the LastLogon parameter. Can somebody please confirm that this walue is actually the value describing when a computer/user last connected to the domain? And, if the value is: number of 100 nanoseconds since 01.01.1961? Mvh Svein Arild ******************************************************** This Weeks Sponsor SeamlessPlanet.com Register your domain name for as low as $7.75 per year! Cheaper than Godaddy..same great service! http://SeamlessPlanet.com ******************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm ******************************************************** This Weeks Sponsor SeamlessPlanet.com Register your domain name for as low as $7.75 per year! Cheaper than Godaddy..same great service! http://SeamlessPlanet.com ******************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm