Last Domain User Login Date and Time of Desktop


Can anyone help me to create a property to get Last Domain User Login Date and Time of Desktop computers

Maybe this is what you are looking for

if (name of operating system as lowercase starts with “win”) then((name of parent folder of it, modification time of it) of files “NTUSER.DAT” of folders of folder “c:\users”) as string else (“No Login Info Found”)


Thanks for the reply… What i want is, only the very last logon by any user(to analyse the usage)… only date and time… date itself is also fine… My knowledge- Local security policy auditing logon and logoff and generating event id 4624. So can we get date and time of last event id 4624 or Task Category is “Logon”???

Hi Mohan,

I hope this will help you out.

Q: following texts of lasts “;;” of concatenation “;;” of ((times written of records whose (event id of it = 4624 ) of security event log) as string)
A: Thu, 30 Mar 2017 16:37:11 +0530
T: 2996.196 ms