Use case: Use this procedure to identify inactive user and computer accounts in your on-premises Active Directory. EasyEntra makes this task simple with flexible search queries based on the LastLogonTimeStamp attribute, allowing you to quickly locate accounts that haven’t been used for a specified period.
To find inactive accounts, follow these steps:
- Select On-Premises AD.
- Enter a query in the search bar that filters on the LastLogonTimeStamp attribute, for example:
(lastlogontimestamp<2024-01-01)
The LastLogonTimeStamp attribute is ideal for locating inactive accounts because it is replicated between domain controllers.
EasyEntra supports using the date format “yyyy-MM-dd” instead of native FileTimestamp (Long) values, making searches fast and intuitive.
Search results update automatically as you type, allowing you to test and refine search scopes easily.
