Hi everyone!
We are running W2K8 DCs and the following command...
%SystemRoot%\System32\dsquery.exe user "DC=mydomain,DC=local" -inactive 8 -s localhost -limit 1000
... but it seens DSQUERY.EXE counts users who connect to work using VPN too. It is a false positive. Is it the expect behavior? In other words, it only updates the last logon attribute if user connects interactively?
Doria