An ADReport Sample Report - Domain Controllers

Back to ADReport Site

DomainDC#DCComputer OUFull Computer Name (FQDN)OSOSVerSPSitePr BrHeadISTGGCSMDNMRMPDCIMQuery PolDescription Computer Obj Created (UTC) Server Obj Created (UTC) NTDS Settings Obj Created (UTC) Computer Obj Last Modified (UTC)* Server Obj Last Modified (UTC)* NTDS Settings Obj Last Modified (UTC)* Primary GroupUser Account ControlTrForDeleg Inbound Repl Disabled Outbound Repl DisabledServer GUIDDB GUID (invoc ID)Bad Password Time*Password Last SetPwd Age (days)Last Logon*Last Logon Timestamp (UTC)Approx Days Since Last Logon**LocationManaged ByApprox Immed SubordApp Partitions
sanao.com1SANAODC1OU=Domain Controllers sanaodc1.sanao.comWindows Server 20035.2 (3790)Service Pack 1 Boston  YesYesYesYesYes Yes 3/17/2001 7:13:31 PM3/17/2001 7:10:21 PM3/17/2001 7:10:21 PM2/28/2007 9:51:19 AM 9/8/2001 9:01:31 AM1/17/2004 1:31:42 PMDomain Controllers532480 (82000 hex)Yes   {A27C2362-32F0-42A5-A064-FB27525BDA68}{A27C2362-32F0-42A5-A064-FB27525BDA68}   11/23/2006 11:54:37 AM3012/16/2006 1:40:40 PM12/9/2006 11:22:59 AM62DC=ForestDnsZones,DC=sanao,DC=com; DC=DomainDnsZones,DC=sanao,DC=com
sanao.com2SANAODC2OU=Domain Controllers sanaodc2.sanao.comWindows Server 20035.2 (3790)Service Pack 1 Boston YesYes       12/9/2005 7:39:48 AM1/2/2006 10:12:42 AM1/2/2006 10:12:44 AM2/28/2007 11:35:55 AM1/2/2006 10:17:36 AM 9/10/2006 8:24:59 AMDomain Controllers532480 (82000 hex)Yes   {044F8D49-A97E-4D20-8010-437DDB21A1DD}{D6BE8380-34CF-3578-AC8F-97D549A59A79}  11/28/2006 7:35:53 PM2412/22/2006 4:38:04 PM12/16/2006 11:28:45 AM02DC=ForestDnsZones,DC=sanao,DC=com; DC=DomainDnsZones,DC=sanao,DC=com
sanao.com3SANAODC3OU=Domain Controllers sanaodc3.sanao.comWindows Server 20035.2 (3790)Service Pack 1 London YesYes       4/26/2006 7:00:10 AM4/26/2006 7:36:00 AM4/26/2006 7:36:02 AM2/25/2007 9:26:59 PM4/26/2006 7:44:00 AM 9/2/2006 4:37:05 PMDomain Controllers532480 (82000 hex)Yes   {5FCD3B31-AC47-488A-85F3-70E4BC23C387}{2B78DE76-A978-4C1A-A1BC-FA0BA1AF4912}  11/26/2006 7:36:55 AM2712/22/2006 11:49:07 PM12/22/2006 3:16:35 PM07DC=ForestDnsZones,DC=sanao,DC=com; DC=DomainDnsZones,DC=sanao,DC=com

To better examine the results:
1. Right-click the table in IE and select Export to Microsoft Excel.
2. In Excel's Data menu, select Filter => AutoFilter.
3. Use the drop-down lists on the header row to see the selection of values
    or to filter rows.
4. Click cell B2.
5. In Excel's Window menu, select Freeze Panes.

* Note

The following attributes are not replicated from one DC toanother. Therefore,
their values vary depending on from which DC they are read: badPasswordTime, lastLogon, and whenChanged (i.e., the three Obj Last Modified columns)

** The later of Last Logon and Last Logon Time Stamp (UTC) is used to calculate the
Approx Days Since Last Logon

*** The account may be old, if its Password Last Set is over 40 days old, or its
Last Logon/Last Logon Timestamp is over 20 days old. This is just a rule of thumb, and
the basis is that a Windows Server 2003/2000 should update its password by default
every 30 days. And, if the domain is running on the Windows Server 2003 functional level,
the computer's Last Logon Timestamp should be updated, if 14 days (by default) have passed
since the last update.

Color Legend

The account may be old***

This report was generated at 22.12.2006 23:58:03 by ADReport,
a program by Sakari Kouti (see