This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(48, 11%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
I am in charge of writing an inventory report the management can use to locate machines. I was very excited when we turned on AD discovery because I was after the Last_logon_timestamp0 field to integrate into reports. Come to find out, that field is pretty useless for me because the dates are very off compared to the AD field "LastLogonDate". Is there a better option? Is there anyway I can force SCCM to grab the "LastLogonDate" from AD?
Ok, I found and article that shows how to add new fields to AD discovery, but LastLogonDate is not available.
The problem is with AD, the field is update every 14 days in AD across all DCs, and updated with the last update on the DC that this the authentication. Therefore it is not reliable when inventory by CM as it will depend on which DC CM inventory.
What exactly is your end goal? How often is Hw inventory?
Hi Garth,
Yes, unfortunately I have read the same regarding 14 days.
Then end goal is to get an accurate picture of the last time the machine was seen by AD. I see that you could possibly use the below to get the last SCCM activity, but for management reassurance, they are used to AD dates and times.
v_CollectionMemberClientBaselineStatus.LastActiveTime
I wouldn't both with that. Instead, use the last time it was seen my CM use last online status or last policy request. You are going to want this more, particularly if you have CMG.
Do you think that last online status is the same as last active time? What is CMG?
I had a quick look as Lastonline status is when the computer rebooted. Where as the last policy and last active time seem to already be the same. so..
you can grad them from here. Select * from v_CH_ClientSummary
Hi @My9to5 ,
Have you tried to add the attribute on Administration > Discovery Methods > Active Directory System Discovery settings? You can check the following article, it may help you.
In addition, below an article to understand the difference between LastLogon and LastLogonTimestamp:
I agree with @Garth Jones , you have to check the same attribute on Active Directory, ConfigMgr just discover the attribute based on what is recorded in AD.
Regards,
Youssef Saad | New blog: https://youssef-saad.blogspot.com
Please remember to ** “Accept answer” ** for useful answers, thank you!
Yes, I have looked through the available attributes to search through, but lastlogondate is not available.
You can create a PS script and run it to get the LastLogonDate attribute using Get-ADComputer cmdlet.
For more details:
Regards,
Youssef Saad | New blog: https://youssef-saad.blogspot.com
Please remember to ** “Accept answer” ** for useful answers, thank you!
Thanks, yes, each time a run a report I have to extract the computer names and run powershell against it to integrate into the reports. The issue now is management needs to be able to run the report too, but the data needs to be available to them when they do
There is no default report that gives you all specific details which you want.
Maybe if your machines are synchronized with Azure AD, you can check if there is some dashboards or reports for your need.
Regards,
Youssef Saad | New blog: https://youssef-saad.blogspot.com
Please remember to ** “Accept answer” ** for useful answers, thank you!