An ADReport Sample Report - Domain Controllers

Back to ADReport Site

To better examine the results:
1. Right-click the table in IE and select Export to Microsoft Excel.
2. In Excel's Data menu, select Filter => AutoFilter.
3. Use the drop-down lists on the header row to see the selection of values
    or to filter rows.
4. Click cell B2.
5. In Excel's Window menu, select Freeze Panes.

* Note

The following attributes are not replicated from one DC toanother. Therefore,
their values vary depending on from which DC they are read: badPasswordTime, lastLogon, and whenChanged (i.e., the three Obj Last Modified columns)

** The later of Last Logon and Last Logon Time Stamp (UTC) is used to calculate the
Approx Days Since Last Logon

*** The account may be old, if its Password Last Set is over 40 days old, or its
Last Logon/Last Logon Timestamp is over 20 days old. This is just a rule of thumb, and
the basis is that a Windows Server 2003/2000 should update its password by default
every 30 days. And, if the domain is running on the Windows Server 2003 functional level,
the computer's Last Logon Timestamp should be updated, if 14 days (by default) have passed
since the last update.

Color Legend

This report was generated at 22.12.2006 23:58:03 by ADReport,
a program by Sakari Kouti (see http://www.kouti.com)