Il est essentiel de savoir quand les appareils se sont connect\u00e9s pour la derni\u00e8re fois \u00e0 Active Directory (AD)<\/a> pour maintenir un environnement informatique s\u00e9curis\u00e9 et bien g\u00e9r\u00e9. Les syst\u00e8mes dormants ou rarement utilis\u00e9s peuvent pr\u00e9senter des risques, tels que des terminaux non autoris\u00e9s ou des inefficacit\u00e9s dans l’allocation des ressources. Le script PowerShell<\/a> fourni propose une solution efficace aux administrateurs informatiques et aux fournisseurs de services g\u00e9r\u00e9s (MSP)<\/a> afin de r\u00e9cup\u00e9rer et d’analyser efficacement les derni\u00e8res donn\u00e9es de connexion pour tous les ordinateurs de leur environnement AD.<\/p>\n Active Directory est la cl\u00e9 de vo\u00fbte de la gestion des utilisateurs et des appareils dans de nombreux environnements d’entreprise. Le suivi de l’horodatage de la derni\u00e8re connexion des ordinateurs est essentiel pour l’audit, la conformit\u00e9 et le maintien d’un r\u00e9pertoire propre. Ce script simplifie le processus traditionnellement lourd de collecte de ces donn\u00e9es en exploitant les capacit\u00e9s d’automatisation de PowerShell et en s’int\u00e9grant \u00e0 des outils tels que NinjaOne pour des fonctionnalit\u00e9s \u00e9tendues. Il ne se contente pas de r\u00e9cup\u00e9rer les horodatages de la derni\u00e8re connexion, mais propose \u00e9galement des options permettant d’interroger d’autres donn\u00e9es sur les utilisateurs et de visualiser les r\u00e9sultats dans un format personnalisable.<\/p>\n <\/p>\n\nContexte<\/h2>\n
Le script\u00a0:<\/h2>\n
#Requires -Version 5.1\r\n\r\n<#\r\n.SYNOPSIS\r\n Gets the last login time for all computers in Active Directory.\r\n.DESCRIPTION\r\n Gets the last login time for all computers in Active Directory.\r\n The last login time is retrieved from the LastLogonTimeStamp property of the computer object.\r\n If the user name cannot be retrieved from an offline computer, the script will return Unknown.\r\n If the computer name cannot be retrieved, the script will return Unknown.\r\n\r\n By using this script, you indicate your acceptance of the following legal terms as well as our Terms of Use at https:\/\/www.ninjaone.com\/terms-of-use.\r\n Ownership Rights: NinjaOne owns and will continue to own all right, title, and interest in and to the script (including the copyright). NinjaOne is giving you a limited license to use the script in accordance with these legal terms. \r\n Use Limitation: You may only use the script for your legitimate personal or internal business purposes, and you may not share the script with another party. \r\n Republication Prohibition: Under no circumstances are you permitted to re-publish the script in any script library or website belonging to or under the control of any other software provider. \r\n Warranty Disclaimer: The script is provided \u201cas is\u201d and \u201cas available\u201d, without warranty of any kind. NinjaOne makes no promise or guarantee that the script will be free from defects or that it will meet your specific needs or expectations. \r\n Assumption of Risk: Your use of the script is at your own risk. You acknowledge that there are certain inherent risks in using the script, and you understand and assume each of those risks. \r\n Waiver and Release: You will not hold NinjaOne responsible for any adverse or unintended consequences resulting from your use of the script, and you waive any legal or equitable rights or remedies you may have against NinjaOne relating to your use of the script. \r\n EULA: If you are a NinjaOne customer, your use of the script is subject to the End User License Agreement applicable to you (EULA).\r\n\r\n.EXAMPLE\r\n (No Parameters)\r\n ## EXAMPLE OUTPUT WITHOUT PARAMS ##\r\n\r\nPARAMETER: -WysiwygCustomField \"myWysiwygCustomField\"\r\n Saves results to a WYSIWYG Custom Field.\r\n.EXAMPLE\r\n -WysiwygCustomField \"myWysiwygCustomField\"\r\n ## EXAMPLE OUTPUT WITH WysiwygCustomField ##\r\n [Info] Found 10 computers.\r\n [Info] Attempting to set Custom Field 'myWysiwygCustomField'.\r\n [Info] Successfully set Custom Field 'myWysiwygCustomField'!\r\n\r\nPARAMETER: -QueryForLastUserLogon \"true\"\r\n When checked, the script will query for the last user logon time for each computer.\r\n Note that this will take longer to run and will try to connect to each computer in the domain.\r\n.EXAMPLE\r\n -QueryForLastUserLogon \"true\"\r\n ## EXAMPLE OUTPUT WITH QueryForLastUserLogon ##\r\n [Warn] Remote computer WIN-1234567891 is not available.\r\n [Info] Found 2 computers.\r\n\r\n Computer Last Logon Date Last Login in Days User\r\n -------- --------------- ------------------ ----\r\n WIN-1234567891 2024-04-01 12:00 0 Unknown\r\n WIN-1234567890 2024-04-01 12:00 0 Fred\r\n WIN-9876543210 2023-04-01 12:00 32 Bob\r\n\r\n.NOTES\r\n Minimum OS Architecture Supported: Windows Server 2016\r\n Release Notes: Initial Release\r\n#>\r\n\r\n[CmdletBinding()]\r\nparam (\r\n [Parameter()]\r\n [String]$WysiwygCustomField,\r\n [Parameter()]\r\n [Switch]$QueryForLastUserLogon\r\n)\r\n\r\nbegin {\r\n # CIM timeout\r\n $CIMTimeout = 10\r\n\r\n function Test-IsElevated {\r\n $id = [System.Security.Principal.WindowsIdentity]::GetCurrent()\r\n $p = New-Object System.Security.Principal.WindowsPrincipal($id)\r\n $p.IsInRole([System.Security.Principal.WindowsBuiltInRole]::Administrator)\r\n }\r\n function Set-NinjaProperty {\r\n [CmdletBinding()]\r\n Param(\r\n [Parameter(Mandatory = $True)]\r\n [String]$Name,\r\n [Parameter()]\r\n [String]$Type,\r\n [Parameter(Mandatory = $True, ValueFromPipeline = $True)]\r\n $Value,\r\n [Parameter()]\r\n [String]$DocumentName\r\n )\r\n \r\n $Characters = $Value | Measure-Object -Character | Select-Object -ExpandProperty Characters\r\n if ($Characters -ge 10000) {\r\n throw [System.ArgumentOutOfRangeException]::New(\"Character limit exceeded, value is greater than 10,000 characters.\")\r\n }\r\n \r\n # If we're requested to set the field value for a Ninja document we'll specify it here.\r\n $DocumentationParams = @{}\r\n if ($DocumentName) { $DocumentationParams[\"DocumentName\"] = $DocumentName }\r\n \r\n # This is a list of valid fields that can be set. If no type is given, it will be assumed that the input doesn't need to be changed.\r\n $ValidFields = \"Attachment\", \"Checkbox\", \"Date\", \"Date or Date Time\", \"Decimal\", \"Dropdown\", \"Email\", \"Integer\", \"IP Address\", \"MultiLine\", \"MultiSelect\", \"Phone\", \"Secure\", \"Text\", \"Time\", \"URL\", \"WYSIWYG\"\r\n if ($Type -and $ValidFields -notcontains $Type) { Write-Warning \"$Type is an invalid type! Please check here for valid types. https:\/\/ninjarmm.zendesk.com\/hc\/en-us\/articles\/16973443979789-Command-Line-Interface-CLI-Supported-Fields-and-Functionality\" }\r\n \r\n # The field below requires additional information to be set\r\n $NeedsOptions = \"Dropdown\"\r\n if ($DocumentName) {\r\n if ($NeedsOptions -contains $Type) {\r\n # We'll redirect the error output to the success stream to make it easier to error out if nothing was found or something else went wrong.\r\n $NinjaPropertyOptions = Ninja-Property-Docs-Options -AttributeName $Name @DocumentationParams 2>&1\r\n }\r\n }\r\n else {\r\n if ($NeedsOptions -contains $Type) {\r\n $NinjaPropertyOptions = Ninja-Property-Options -Name $Name 2>&1\r\n }\r\n }\r\n \r\n # If an error is received it will have an exception property, the function will exit with that error information.\r\n if ($NinjaPropertyOptions.Exception) { throw $NinjaPropertyOptions }\r\n \r\n # The below types require values not typically given in order to be set. The below code will convert whatever we're given into a format ninjarmm-cli supports.\r\n switch ($Type) {\r\n \"Checkbox\" {\r\n # While it's highly likely we were given a value like \"True\" or a boolean datatype it's better to be safe than sorry.\r\n $NinjaValue = [System.Convert]::ToBoolean($Value)\r\n }\r\n \"Date or Date Time\" {\r\n # Ninjarmm-cli expects the GUID of the option to be selected. Therefore, the given value will be matched with a GUID.\r\n $Date = (Get-Date $Value).ToUniversalTime()\r\n $TimeSpan = New-TimeSpan (Get-Date \"1970-01-01 00:00:00\") $Date\r\n $NinjaValue = $TimeSpan.TotalSeconds\r\n }\r\n \"Dropdown\" {\r\n # Ninjarmm-cli is expecting the guid of the option we're trying to select. So we'll match up the value we were given with a guid.\r\n $Options = $NinjaPropertyOptions -replace '=', ',' | ConvertFrom-Csv -Header \"GUID\", \"Name\"\r\n $Selection = $Options | Where-Object { $_.Name -eq $Value } | Select-Object -ExpandProperty GUID\r\n \r\n if (-not $Selection) {\r\n throw [System.ArgumentOutOfRangeException]::New(\"Value is not present in dropdown\")\r\n }\r\n \r\n $NinjaValue = $Selection\r\n }\r\n default {\r\n # All the other types shouldn't require additional work on the input.\r\n $NinjaValue = $Value\r\n }\r\n }\r\n \r\n # We'll need to set the field differently depending on if its a field in a Ninja Document or not.\r\n if ($DocumentName) {\r\n $CustomField = Ninja-Property-Docs-Set -AttributeName $Name -AttributeValue $NinjaValue @DocumentationParams 2>&1\r\n }\r\n else {\r\n $CustomField = Ninja-Property-Set -Name $Name -Value $NinjaValue 2>&1\r\n }\r\n \r\n if ($CustomField.Exception) {\r\n throw $CustomField\r\n }\r\n }\r\n}\r\nprocess {\r\n if (-not (Test-IsElevated)) {\r\n Write-Host -Object \"[Error] Access Denied. Please run with Administrator privileges.\"\r\n exit 1\r\n }\r\n\r\n # Get Script Variables and override parameters with them\r\n if ($env:wysiwygCustomField -and $env:wysiwygCustomField -notlike \"null\") {\r\n $WysiwygCustomField = $env:wysiwygCustomField\r\n }\r\n if ($env:queryForLastUserLogon -and $env:queryForLastUserLogon -notlike \"null\") {\r\n if ($env:queryForLastUserLogon -eq \"true\") {\r\n $QueryForLastUserLogon = $true\r\n }\r\n else {\r\n $QueryForLastUserLogon = $false\r\n }\r\n }\r\n\r\n # Check that Active Directory module is available\r\n if (-not (Get-Module -ListAvailable -Name ActiveDirectory)) {\r\n Write-Host \"[Error] Active Directory module is not available. Please install it and try again.\"\r\n exit 1\r\n }\r\n\r\n # Get the computer system from the CIM\r\n $ComputerSystem = $(Get-CimInstance -ClassName Win32_ComputerSystem)\r\n\r\n # Check if this script is running on a domain joined computer\r\n if ($ComputerSystem.PartOfDomain -eq $false) {\r\n Write-Host \"[Error] This script must be run on a domain joined computer.\"\r\n exit 1\r\n }\r\n\r\n # Check if this script is running on a domain controller\r\n switch ($ComputerSystem.DomainRole) {\r\n 0 { Write-Host \"[Info] Running script on a Standalone Workstation.\" }\r\n 1 { Write-Host \"[Info] Running script on a Member Workstation.\" }\r\n 2 { Write-Host \"[Info] Running script on a Standalone Server.\" }\r\n 3 { Write-Host \"[Info] Running script on a Member Server.\" }\r\n 4 { Write-Host \"[Info] Running script on a Backup Domain Controller.\" }\r\n 5 { Write-Host \"[Info] Running script on a Primary Domain Controller.\" }\r\n }\r\n\r\n # Get the SearchBase for the domain\r\n $Domain = \"DC=$($ComputerSystem.Domain -split \"\\.\" -join \",DC=\")\"\r\n\r\n # Get Computers from Active Directory\r\n try {\r\n $Computers = Get-ADComputer -Filter { (Enabled -eq $true) } -Properties Name, LastLogonTimeStamp -SearchBase \"$Domain\" -ErrorAction Stop\r\n }\r\n catch {\r\n Write-Host \"[Error] Failed to get computers. Make sure this is running on a domain controller.\"\r\n exit 1\r\n }\r\n\r\n $IsFirstError = $true\r\n\r\n $LastLogonInfo = foreach ($Computer in $Computers) {\r\n try {\r\n # Get the LastLogonTimeStamp for the computer from Active Directory\r\n $PCInfo = Get-ADComputer -Identity $Computer.Name -Properties LastLogonTimeStamp -ErrorAction Stop | Select-Object -Property @(\r\n @{Name = \"Computer\"; Expression = { $_.Name } },\r\n @{Name = \"LastLogon\"; Expression = { [DateTime]::FromFileTime($_.LastLogonTimeStamp) } }\r\n )\r\n }\r\n catch {\r\n # This should only happen if the script is not running as the system user on a domain controller or not as a domain admin\r\n Write-Debug \"[Debug] $($_.Exception.Message)\"\r\n Write-Host \"[Warn] Failed to get details for $($Computer.Name) from Active Directory. Skipping.\"\r\n continue\r\n }\r\n try {\r\n if ($QueryForLastUserLogon) {\r\n # Get the User Principal Name from the computer\r\n $LastUserLogonInfo = Get-CimInstance -ClassName Win32_UserProfile -ComputerName $Computer.name -OperationTimeoutSec $CIMTimeout -ErrorAction Stop | Where-Object { $_.LocalPath -like \"*Users*\" } | Sort-Object -Property LastUseTime | Select-Object -Last 1\r\n $SecIdentifier = New-Object System.Security.Principal.SecurityIdentifier($LastUserLogonInfo.SID) -ErrorAction Stop\r\n $UserName = $SecIdentifier.Translate([System.Security.Principal.NTAccount])\r\n }\r\n }\r\n catch {\r\n if ($null -eq $UserName) {\r\n if ($IsFirstError) {\r\n # Only show on the first error\r\n Write-Debug \"[Debug] $($_.Exception.Message)\"\r\n Write-Host \"[Error] Failed to connect to 1 or more computers via Get-CimInstance.\"\r\n $IsFirstError = $false\r\n }\r\n Write-Host \"[Warn] Remote computer $($Computer.Name) is not available or could not be queried.\"\r\n }\r\n }\r\n\r\n if ($null -eq $UserName) {\r\n $UserName = [PSCustomObject]@{\r\n value = \"Unknown\"\r\n }\r\n }\r\n if ($null -eq $PCInfo.LastLogon) {\r\n $PCInfo = [PSCustomObject]@{\r\n Computer = $Computer.Name\r\n LastLogon = \"Unknown\"\r\n }\r\n Write-Host \"[Warn] Failed to get LastLogonTimeStamp for $($Computer.Name).\"\r\n }\r\n\r\n # Get the number of days since the last login\r\n $LastLoginDays = try {\r\n 0 - $(Get-Date -Date $PCInfo.LastLogon).Subtract($(Get-Date)).Days\r\n }\r\n catch {\r\n # Return unknown if the date is invalid or does not exist\r\n \"Unknown\"\r\n }\r\n\r\n # Output the results\r\n if ($QueryForLastUserLogon) {\r\n [PSCustomObject]@{\r\n 'Computer' = $PCInfo.Computer\r\n 'Last Logon Date' = $PCInfo.LastLogon\r\n 'Last Login in Days' = $LastLoginDays\r\n 'User' = $UserName.value\r\n }\r\n }\r\n else {\r\n [PSCustomObject]@{\r\n 'Computer' = $PCInfo.Computer\r\n 'Last Logon Date' = $PCInfo.LastLogon\r\n 'Last Login in Days' = $LastLoginDays\r\n }\r\n }\r\n\r\n $PCInfo = $null\r\n $LastUserLogonInfo = $null\r\n $SecIdentifier = $null\r\n $UserName = $null\r\n }\r\n\r\n # Output the number of computers found\r\n if ($LastLogonInfo -and $LastLogonInfo.Count -gt 0) {\r\n Write-Host \"[Info] Found $($LastLogonInfo.Count) computers.\"\r\n }\r\n else {\r\n Write-Host \"[Error] No computers were found.\"\r\n $ExitCode = 1\r\n }\r\n\r\n function Write-LastLoginInfo {\r\n param ()\r\n $LastLogonInfo | Format-Table -AutoSize | Out-String -Width 4000 | Write-Host\r\n }\r\n\r\n # Save the results to a custom field\r\n if ($WysiwygCustomField) {\r\n $LastLoginOkayDays = 30\r\n $LastLoginTooOldDays = 90\r\n # Convert the array to an HTML table\r\n $HtmlTable = $LastLogonInfo | ConvertTo-Html -Fragment\r\n # Set the color of the rows based on the last logon time\r\n $HtmlTable = $HtmlTable -split [Environment]::NewLine | ForEach-Object {\r\n if ($_ -match \"<td>(?'LastLoginDays'\\d+)<\\\/td>\") {\r\n # Get the last login days from the HTML table\r\n [int]$LastLoginDays = $Matches.LastLoginDays\r\n if ($LastLoginDays -lt $LastLoginTooOldDays -and $LastLoginDays -ge $LastLoginOkayDays) {\r\n # warning = 31 days to 89 days\r\n $_ -replace \"<tr><td>\", '<tr class=\"warning\"><td>'\r\n }\r\n elseif ($LastLoginDays -ge $LastLoginTooOldDays) {\r\n # danger = 90 days or more\r\n $_ -replace \"<tr><td>\", '<tr class=\"danger\"><td>'\r\n }\r\n else {\r\n # success = 30 days or less\r\n $_ -replace \"<tr><td>\", '<tr class=\"success\"><td>'\r\n }\r\n }\r\n else {\r\n $_\r\n }\r\n }\r\n # Set the width of the table to 10% to reduce the width of the table to its minimum possible width\r\n $HtmlTable = $HtmlTable -replace \"<table>\", \"<table style='white-space:nowrap;'>\"\r\n try {\r\n Write-Host \"[Info] Attempting to set Custom Field '$WysiwygCustomField'.\"\r\n Set-NinjaProperty -Name $WysiwygCustomField -Value $($HtmlTable | Out-String)\r\n Write-Host \"[Info] Successfully set Custom Field '$WysiwygCustomField'!\"\r\n }\r\n catch {\r\n Write-Host \"[Error] Failed to set Custom Field '$WysiwygCustomField'.\"\r\n Write-LastLoginInfo\r\n $ExitCode = 1\r\n }\r\n }\r\n else {\r\n Write-LastLoginInfo\r\n }\r\n\r\n exit $ExitCode\r\n}\r\nend {\r\n \r\n \r\n \r\n}<\/pre>\n