Overview

UserAudit writes results to an XML file, which can then be processed by other tools. The file contains entries of users, the count of the entities equals all the users audited in the process.

 

The user data

Data for one user entity is enclosed within <Users> and </Users>, and contains all information which is also displayed in the main window of the GUI when the audit process is complete.

Note: All time values in the XML files are UTC values.

 

Data Fields

• Name: Name of the user account in the system.
• FullName: Full name of the person.
• Created: Date and time the account has been created in the Domain.
• Changed: Date and time where account information has been last changed. This includes password and personal information changes.
• LastPwdChange: Date and time of the last password change.
• PwdAge: Age of the current password in days.
• LastLogon: Date and time the user last logged on to the domain.
• LogonCount: Number of logons to the domain. This accumulates data from all Domain Controllers.
• LastBadPwd: Date and time the user last entered an invalid password.

 

Example Data

<Users>
<Name>Administrator</Name>
<FullName>Administrator</FullName>
<Created>2003-05-26T13:06:34.0000000+02:00</Created>
<Changed>2005-08-11T08:52:49.0000000+02:00</Changed>
<LastPwdChange>2005-10-11T10:50:00.0000000+01:00</LastPwdChange>
<PwdAge>4</PwdAge>
<LastLogon>2005-10-14T05:53:00.0000000+02:00</LastLogon>
<LogonCount>1394</LogonCount>
<LastBadPwd>2005-09-28T08:23:00.0000000+02:00</LastBadPwd>
</Users>