Query users, access level and last logon date

Hello, Does anybody know how to query Essbase to look up users accesslevel and last logon date? Rey Fiesta

It can be done using the API. Access level is a little complicated because it can be by individual or group they belong to and it of course is different by application/database

Similar Messages

PowerShell Active Directory: Get last logon date of a deleted user

So, my first post in this noble community. I've been lurking here and I've been getting some good information. Hopefully, you guys can help me in this concern which may be simple to some but I couldn't seem to get around it.
Is it possible to get the last logon date of a DELETED user in Active Directory?
I can get the available properties of deleted users using the following:
Get-ADObject -Filter {samaccountname -eq <account_name> -and ObjectClass -eq "user"} -IncludeDeletedObjects -Properties *
But the last logon date is not one of the properties available from Get-ADObject. Get-ADUser has the last logon property, but it does not have data on deleted users. Is there anyway this can be achieved? Perhaps convert an ADObject to an ADUser?
Any information would be much appreciated. Thank you.

Thanks everyone for your response. It looks like jrv is leading me to the right path, but I'm still having issues. I'm trying to get the lastlogon time by querying all the DCs in our domain, but every query returns a null lastlogon time for all the deleted
users I tried:
$DomainControllers = ((Get-ADForest).Domains | %{ Get-ADDomainController -Filter * -Server $_ }).Name
foreach ($DC in $DomainControllers)
 $dn=(Get-ADObject -Filter {samaccountname -eq <user_account>} -includedeletedobjects -server $DC).DistinguishedName
 $user=[adsi]"LDAP://$dn"
 $user.LastLogon
It always returns null. Morever, simply executing [adsi]"LDAP://$dn" from each DC gives the following error:
format-default : The following exception occurred while retrieving member
"distinguishedName": "There is no such object on the server.
 + CategoryInfo : NotSpecified: (:) [format-default], ExtendedType
 SystemException
 + FullyQualifiedErrorId : CatchFromBaseGetMember,Microsoft.PowerShell.Comm
 ands.FormatDefaultCommand
It's a bit surprising to me though, since $user=[adsi]"LDAP://$dn" does return a value for $user (instead of null whenever an error is encountered) of type System.DirectoryServices.DirectoryEntry but it has no members.
Anyone know what I'm missing?

Search for User by last logon date no longer works after upgrading to SPS18

We used to be able to Search by last logon date under User Administration as a quick way to find out who logged on for a particular date. It worked well, but only for a single date range. We were on EP 6.0 SPS13 at the time. Since we have upgraded to SPS18, it no longer works. All we get back now is no user found no matter what date we enter.
Has anyone else experienced this problem? I've been searching and haven't found anything. I wanted to try and get more information before I create an OSS message.
Thank you,
Kathy

it's since SP16, to be correct: http://help.sap.com/saphelp_nw04/helpdata/en/43/bc6b9202454dece10000000a422035/frameset.htm
kr, achim

Last Logon date and Logon time not updating in table USR02

Hi,
Please help us on this. After customer successfully logged in the webshop, we are checking the table USR02 in CRM system and the Logon date and Logon time is not updated. Because of this, the customer will be locked after certain number of days. When we check it in ECC system, customer's last logon date and time is updated. Can you tell us what could be causing this? Any advise what we need to check? Thanks in advance!
Regards,
Mike

Hi
1. Please check if the USAPPLREF table in ECC has the correct mapping done between the LOGON User and the Sold-to party (Customer)
2. Please check the validity of those user in SU01 user data.
3. Please check the USERS data from the USERADMIN Link (if it is configured in your scenario through XCM settings for USERS)
Hope this will help.
Regards

Is there a system table or V$ view that will show a user's last logon date?

Is there a system table or V$ view that will show a user's last logon date?
I'm using Oracle 9.2.0.7

sqlplus
SQL*Plus: Release 11.2.0.1.0 Production on Tue Aug 31 12:44:42 2010
Copyright (c) 1982, 2009, Oracle. All rights reserved.
Enter user-name: / as sysdba
Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
SQL> desc user$
Name                            Null?    Type
USER#                            NOT NULL NUMBER
NAME                            NOT NULL VARCHAR2(30)
TYPE#                            NOT NULL NUMBER
PASSWORD                             VARCHAR2(30)
DATATS#                       NOT NULL NUMBER
TEMPTS#                       NOT NULL NUMBER
CTIME                            NOT NULL DATE
PTIME                                  DATE
EXPTIME                             DATE
LTIME                                  DATE
RESOURCE$                       NOT NULL NUMBER
AUDIT$                              VARCHAR2(38)
DEFROLE                       NOT NULL NUMBER
DEFGRP#                             NUMBER
DEFGRP_SEQ#                             NUMBER
ASTATUS                       NOT NULL NUMBER
LCOUNT                        NOT NULL NUMBER
DEFSCHCLASS                             VARCHAR2(30)
EXT_USERNAME                             VARCHAR2(4000)
SPARE1                              NUMBER
SPARE2                              NUMBER
SPARE3                              NUMBER
SPARE4                              VARCHAR2(1000)
SPARE5                              VARCHAR2(1000)
SPARE6                              DATE

Last Logon Date for Deleted Users

Hi,
How can I checked to see last logon date for a deleted user-SAP ECC 6.0?
-Wes

> ... chekcing USR02 the TRDAT field has been reset.
In lower releases you could easily have made a big mistake doing that.
In all releases the security audit log (SM20) is the correct tool for this, but you cannot retro-fit it.
If the SM20 log is not activated for logon events, then there are several other ways of reconstructing parts of the information but they are all incomplete and a big effort.
Cheers,
Julius

DB USER Last Logon Date

Hi All,
How to find a Database USER last logon date on 10g? by script.
Thanks,

You need to enable auditing to view history in audit files. In v$session you can see only connected sessions.
http://asktom.oracle.com/pls/asktom/f?p=100:11:0::::P11_QUESTION_ID:1830073957439
http://www.dba-oracle.com/art_builder_sec_audit.htm

Query to find first and last call made by selected number for date range

Hi,
query to find first and last call made by selected number for date range
according to filter:
mobile_no : 989.....
call_date_from : 25-april-2013
call_date_to : 26-april-2013
Please help

Hi,
It sounds like you want a Top-N Query , something like this:
WITH got_nums AS
 SELECT table_x.* -- or list columns wanted
 , ROW_NUMBER () OVER (ORDER BY call_date ) AS a_num
 , ROW_NUMBER () OVER (ORDER BY call_date DESC) AS d_num
 FROM table_x
 WHERE mobile_no = 989
 AND call_date >= DATE '2013-04-25'
 AND call_date < DATE '2013-04-26' + 1
SELECT * -- or list all columns except a_num and d_num
FROM got_nums
WHERE 1 IN (a_num, d_num)
;This forum is devoted to the SQL*Plus and iSQL*Plus front ends. This question doesn't have anything to do with any front end, does it? In the future, you'll get better response if you post questions like this in the PL/SQL.
I hope this answers your question.
If not, post a little sample data (CREATE TABLE and INSERT statements, relevant columns only), and also post the results you want from that data.
Explain, using specific examples, how you get those results from that data.
Always say which version of Oracle you're using (e.g., 11.2.0.2.0).
See the SQL forum FAQ {message:id=9360002}

When AD users accessed the group last time

Suppose We have a Group 'A' which is under 'B' domain in Active Directory. 'B' domain is used by many applications.
we have a website in which validations are done thro Acitve directory. That is it will allow to enter the site if that user is added to group 'A' under 'B' domain.
I created a .NET application and it will fetch who all are having access to website & the user details from the AD. Last access date is not showing correctly.
Tool will shows last logon date as today’s
date & time when I logon to website now.
If we are
not accessed the website today but we connected to the system using 'B' domain today, then tool will display the last logon time as today’s date.
Using .NET is there any way to filter the last accessed date for a group in a particular domain? Anyone can provide me the C#.NET code will be appreciated

Please check this thread
http://forums.asp.net/t/1274419.aspx?Get+Last+Logon+date+from+the+active+directory+using+C+
There are two attributes for this in Active Directory:
lastLogon refers to the last logon for the specific server you're querying. This date may be different for different servers (domain controllers), and for some it may be null/empty. This attribute is not replicated.
lastLogonTimestamp refers to the last logon for all servers. This attribute is replicated, which means that all servers have the same value. Only problem is that the default synchronization is 14 days on this attribute which may be too long.

How to retrieve users logging-in and logging-out date and times in SharePoint

At the moment I am using SherePoint 2013 with a few tenants.
I am going to have access to the users logging-in and logging-out dates and times.
For instance, I would like to know the detail of the dates and times which a particular user of a tenant has logged-in and logged-out during the past few months.
Any idea?

You can retrieve that info from the IIS log files. Maybe you can use a free IIS reporting tool that I've built and adjust it to your own needs, you can get it here:
http://gallery.technet.microsoft.com/office/The-SharePoint-Flavored-5b03f323
Btw, in a web environment usually there is no such thing as the log-out date and time because the end user just stops making requests. So, you've got to take a look at the last request and by default, after 20 minutes the session times out and you can assume
the session has ended.
Kind regards,
Margriet Bruggeman
Lois & Clark IT Services
web site: http://www.loisandclark.eu
blog: http://www.sharepointdragons.com

Fetch-Xml based report (to count User Access in the last 6 months ) for Microsoft Dynamics CRM Online

Hi,
I have created a User Access report for CRM on-premise using SQl query in the following format. One row corresponds to one user in organization. Currently, I am using Microsoft Dynamics CRM Online trial version and have two users in my organization.
I want to the same report for CRM Online environment. Only Fetch-Xml based custom reports are supported by CRM online environment hence this SQL query cannot be used.
I have already written fetch-xml query to retrieve user access records ("audit" entity records) in "last-x-months" (where x = 1,2,3,4,5,6) as below.
I am able to retrieve the records with "last-x-months" condition at a time, for example, the last-2-months in my fetch-xml query only.
For, example, when I retrieve the records in the last-2-months, it also includes the records in the last month. I want to count the records in the 2nd month only that is the difference between these two. The difference will be my 2nd column.
Similarly, I want the other columns.
For the case in the above example, I have created the two separate datasets to get the record-count for the last month and last-2-months. But, I am not able to use the two datasets in the same table in my report and hence not able to calculate the difference.
Is there any way to solve this problem?

Hi,
I have modified my Fetch-XML query to retrieve all the required User Access records and removed aggregation and counting and grouping from the query as well. Did grouping and counting in SSRS. Now the report works fine as shown in the above picture.

BAPI_USER_GET_DETAIL - Last Logon Date not available

From R3 I want to check the last logon Date (USR02-TRDAT) of a user in an outside system such as EBP or BW. BAPI_USER_GET_DETAIL seemed like a good choice but TRDAT is not passed to the BAPI. Last Logon Time is (LTIME) but not Last logon date (TRDAT). How can this be easily done.
Thanks,
-don.

the problem with this is that it makes a call for each user. If you have 100k users it becomes a very inefficient process.
If you build something in the backend to collect the details a useble format....1) it is custom, and 2) you need to deply in each backend and 3) maintain it in each backend.
not a good solution.
If anyone has better idea please shout. Again....this RFC call does the job.....but it is like empting a pool full of water with a teaspoon, does the job but very inefficiently.
DenisO

Last logon date

Hi,
I am working on EP 7.0 SPS 13.
We have LDAP & UME as data source.
Is there any way to get last logon date for all users?
UME method for getting last logon details is deprecated.
What is alternative way?
I need to get list of all users who have not logged on to portal for last 30 days.
Is there any way to achieve this?
Regards,
Apurva

Hi Michael,
Thanks for the link.
Our requirement is that if user is not active for say 30 days his userid should be locked and after say 60 days it should be deleted.
In order to determine inactive users we need information about logon details for user ids. Portal Activity Report - Details of users who logged on does not consider reporting period and hence is of no use.
Is there any operation in this web service which can provide us this information?
Regards,
Apurva

Script to pull out last logon date

Hello,
I have a list of user that I would like to pull out last logon date from AD.
This is the script I am using at the moment but it produces blanks and I don't know what the blanks mean.
Import-Module ActiveDirectory
#This script requires PowerShell AD Module
Import-csv "c:\scripts\samaccountname.csv" |
foreach-object {get-aduser $_.samaccountname -Properties lastlogondate} |
select name,Lastlogondate |
Export-csv c:\scripts\LastLogon.csv -NoTypeInformation
Please can you help?
Kind Regards, PenDraKon

If you want an accurate lastLogon date, you have to check across domain controllers.
Here's an advanced function I created a while ago for this.
Function Get-LastLogon {
<#
.SYNOPSIS
Returns LastLogon information
.DESCRIPTION
Queries the LastLogin information for a user across domain controllers and returns the highest (latest) value
.EXAMPLE
Get-LastLogon User
.EXAMPLE
Get-LastLogon -Identity User
.EXAMPLE
Get-ADUser User | Get-LastLogon
.EXAMPLE
Get-LastLogon User1, User2
.PARAMETER users
List of users - pipeline can be used
#>
[CmdletBinding()]
param
[Parameter(Position= 0,
Mandatory=$True,
ValueFromPipeline=$True,
HelpMessage='What user would you like to find the last logon for?')]
$identity
Begin {}
Process {
Foreach ($account in $identity) {
$dateStamp = $null
$domainController =$null
Get-ADDomainController -Filter * | Foreach {
$dc = $_.HostName
$lastLogon = (Get-ADUser $account -Properties LastLogon -server $dc | Select-Object Name,@{n='LastLogon';e={[DateTime]::FromFileTime($_.LastLogon)}}).Lastlogon
If ($dateStamp -le $lastlogon)
$dateStamp = $lastlogon
$domainController = $dc
} # End of ForEach
$properties = @{
Name=$account;
LastLogon=$dateStamp;
DomainController=$domainController}
New-Object -TypeName PSObject -Prop $properties
} # End of ForEach
} # End of Process
End {}
} # End of Function
You can then run...
Import-CSV ".\samaccountname.csv" | % {Get-LastLogon $_.samaccountname}
or...
Import-CSV ".\samaccountname.csv" | % {Get-LastLogon $_.samaccountname} | Export-CSV ".\report.csv" -noType

Best way to handle user access levels with spring.

I'm a spring newb, and I'm not sure how to properly handle user access levels with a validation controller. There seems to be a lot of information out there about creating simple login validators but like I've said I need to create multiple levels of user access. I could throw something together but i want to do it correctly. Does anyone here have any links to resources or information they could provide?

ZimmerS1337 wrote:
SoulTech aren't you a smart ass, why post anything at all?You don't get to control what people post, any more than we can control what people ask. It's best to let stuff roll off your back.
ST wasn't exactly abusive. If you had typed "spring security" into Google, you would have gotten exactly what I recommended. So why would you say that his advice to try Google first was being a "smart @ss"? It's actually a good recommendation. Try it before you post here.
%

Query users, access level and last logon date

Similar Messages

Maybe you are looking for