A user’s last logon authentication is recorded on the server where the logon (or unlock) occurred. FindLastLogon.vbs queries all the Domain Controllers in your domain for this information. You can send the results to your clipboard. No elevated rights required. Updated on 9/8/10 to improve error handling and queries of other domains.