Did you know that there’s a very easy way to view all sorts of additional user account information within Active Directory Users and Computers? I’m a little embarrassed that it took me so long to figure this out. For the longest time, as I’m sure many of us other administrators will have to admit to, I have resorted to having custom scripts run that tie into Active Directory in order to view some simple things such as the last time a user logged on, or a user SID.
Well, all of it and more can be found on the Additional Account Info tab of a user account within Active Directory Users and Computers.
“Wait, I don’t have that tab!” you say? Yeah, neither did I. There’s a step or two you have to take in order to get it, but well worth it.
First, download the Windows Server 2003 Resource Kit Tools if you don’t already have it. You don’t need to install the entire package, but you do need to extract a dll (acctinfo.dll) from it otherwise (In my case, for instance, I’m setting this up on my workstation where I do administration from, and there is no need to install the entire resource kit.). If you choose the extract method, copy acctinfo.dll to your %systemroot%\system32 folder.
Then all you have to do is register the dll:
There will always be a place for scripts, don’t get me wrong, but in this case when dealing with user accounts, you’re often busy in Active Directory Users and Computers anyways. Only makes sense to consolidate your tools.