In this article:

• Objective

• Prerequisites

• Steps to follow

• Validation and confirmation

• Tips

• Related topics and articles

 Objective 

To identify and track inactive users in ADAudit Plus by generating reports that show accounts that have not logged in for a specific period of time.

 Prerequisites 

• You must have an account with administrative privileges or delegated permissions to access user logon reports in ADAudit Plus.

• Ensure that logon auditing is enabled and data collection is properly configured for the relevant domain controllers.

 Steps to follow 

1. Log in to the ADAudit Plus web console using an account with sufficient privileges.

2. Navigate to the Active Directory tab.

3. Go to User Logon Reports in the left pane.

4. Click User's Last Logon.

5. In this report, use the time period filter to select the range you want to evaluate:

1. Before 7 days

2. Before 30 days

3. Before 60 days

4. Before 90 days

6. The report will display the list of users who last logged in before the specified date range, effectively showing all inactive user accounts.

 Validation and confirmation 

• Review the generated report and confirm that the list matches expected inactivity criteria.

• Cross-check a sample of user accounts in Active Directory Users and Computers to verify that their last logon timestamps correspond with the report data.

• Export the report if needed and ensure it includes all relevant columns and filters applied.

 Tips 

• Schedule this report to run automatically and deliver results via email to monitor inactive accounts regularly.

• Combine this report with user status or account expiration information to identify accounts that should be disabled or reviewed.

• Use longer time ranges, such as Before 90 days, to comply with security policies requiring periodic review of inactive accounts.

 Related topics and articles 

• How to create a custom report in ADAudit Plus