An ADReport Sample Report - Member Servers and Workstations

Back to ADReport Site

WS#DomainName (cn)SAM NameFull Computer Name (FQDN)OUOSOSVerSPOwnerSiteDescriptionDivisionDepartmentManaged ByLocationUser Account ControlDisabledTrusted for DelegPwd Not ReqPrimary GroupOriginal USN*Current USN*Obj Created (UTC)Obj Last Modified (UTC)*Bad Password Time*DNLast Known ParentPassword Last SetPwd Age (days)Last Logon*Last Logon Timestamp (UTC)Approx Days Since Last LogonLogon Count*Service Principal NamesObject GUIDInstance TypeSIDSAM Account TypeComputer's Unique IDRIS ServerApprox Immed SubordSID History
1sanao.comPC17PC17$OU=Demo 4128 (1020 hex)  YesDomain Computers22380839063/9/2004 2:20:30 PM10/8/2006 1:24:49 PM CN=PC17,OU=Demo,DC=sanao,DC=com3/9/2004 4:20:30 PM967   0 bca7a5531573a44e87c6fbdc313efca84S-1-5-21-2301707523-483640745-1312112565-13298053063690Not set
2sanao.comPC07PC07$OU=Demo 4128 (1020 hex)  YesDomain Computers23423234253/10/2004 7:25:18 AM3/10/2004 7:25:20 AM CN=PC07,OU=Demo,DC=sanao,DC=com     0 706b2fff8c5b40409a2d00f9aff791f84S-1-5-21-2301707523-483640745-1312112565-13328053063690Not set
3sanao.comPC55PC55$OU=Demo 4128 (1020 hex)  YesDomain Computers23552235543/10/2004 7:34:46 AM3/10/2004 7:34:47 AM CN=PC55,OU=Demo,DC=sanao,DC=com     0 89a8d9e4facd614397262dea09dc78364S-1-5-21-2301707523-483640745-1312112565-13338053063690Not set
4sanao.comC23C23$c23.sanao.comOU=Workstations,OU=Demo Windows XP Professional5.1 (2600)Service Pack 2 4096 (1000 hex)   Domain Computers41062653919/21/2005 8:40:13 AM9/23/2005 11:25:40 AM CN=C23,OU=Kurssikoneet,DC=sanao,DC=com9/21/2005 10:40:14 AM4079/23/2005 5:52:24 PM9/21/2005 8:40:18 AM4042HOST/C23; HOST/c23.sanao.com75eeb9e713b83a41b3339e69eb33bbe94S-1-5-21-2301707523-483640745-1312112565-13478053063690Not set
5sanao.comC22C22$c22.sanao.comOU=Workstations,OU=Demo Windows XP Professional5.1 (2600)Service Pack 2 4096 (1000 hex)   Domain Computers41073653929/21/2005 8:46:38 AM9/23/2005 11:25:40 AM CN=C22,OU=Kurssikoneet,DC=sanao,DC=com9/21/2005 10:46:38 AM4079/23/2005 5:52:53 PM9/21/2005 8:39:34 AM4042HOST/C22; HOST/c22.sanao.combf6233705066d24f88c55657434b99fd4S-1-5-21-2301707523-483640745-1312112565-13488053063690Not set
6sanao.comC21C21$c21.sanao.comOU=Workstations,OU=DemoWindows XP Professional5.1 (2600)Service Pack 1 4096 (1000 hex)   Domain Computers82150874289/30/2006 7:50:46 AM10/30/2006 8:18:18 PM CN=SKOUTIDEVXP1,OU=Workstations,OU=Demo,DC=sanao,DC=com10/6/2006 9:44:40 PM2611/1/2006 11:04:13 PM10/24/2006 2:35:20 PM023HOST/C21; HOST/C21.sanao.comd476220630fbd7429e34c6a06df9b42b4S-1-5-21-2301707523-483640745-1312112565-15608053063690Not set

To better examine the results:
1. Right-click the table in IE and select Export to Microsoft Excel.
2. In Excel's Data menu, select Filter => AutoFilter.
3. Use the drop-down lists on the header row to see the selection of values
    or to filter rows.
4. Click cell B2.
5. In Excel's Window menu, select Freeze Panes.

* Note

The following six attributes are not replicated from one DC toanother. Therefore,
their values vary depending on from which DC they are read: badPasswordTime, lastLogon,
logonCount, uSNCreated (i.e., Original USN), uSNChanged (i.e., Current USN),
whenChanged (i.e., Obj Last Modified)

** The later of Last Logon and Last Logon Time Stamp (UTC) is used to calculate the
Approx Days Since Last Logon

*** The account may be old, if either its Password Last Set or Last Logon/Last Logon Timestamp is
over 70 days old. This is just a rule of thumb, and the basis is that a Windows 2000/XP
should update its password by default every 30 days (so two updates in a row are missing.
And, if the domain is running on the Windows Server 2003 functional level, the computer's
Last Logon Timestamp should be updated, if 14 days (by default) have passed since the last update.

Color Legend

The account is disabled
The account may be old***
The account is disabled and it may be old***

This report was generated at 11/1/2006 11:04:19 PM by ADReport,
a program by Sakari Kouti (see