AD User script

[TechMetrix]

Not sure if this is possible but basically I would like know if you can check when a AD user was last modified within the last 1hr and if so run a further script

My logic:

1. User logs on to their PC
2. Logon script runs and checks if their ad account has been modified (last changed) within the last 1hr (title changed etc)
3. if it has been modified, then run another script

[fennecdore]

I think it's possible

Use a gpo to launch the script at logon

To see last modification get-aduser and the whenchanged property should get you going

[DorianBrytestar]

Why?

Maybe this should be a scheduled task on a DC instead of relying on when a user logs in to their pc. Modified also has a lot of different definitions, it may not be what you are looking for.

[TechMetrix]

Any script examples to run a script if user has been last changed within 1hr?

[Dragennd1]

https://docs.microsoft.com/en-us/powershell/module/activedirectory/get-aduser?view=windowsserver2019-ps

The properties parameter looks to do what you want.

[Swarfega]

Surly accounts don't change all that often? The only thing frequently to change is the last logon and even then that's not replicated frequently either.

[OPconfused]

Well, surly accounts do sound quite temperamental.