I will perform these steps and take screenshots on a Windows Server 2008 R2 machine, but it all works the same on Windows Server 2012. In order to activate last interactive logon, the functional level of the domain must be set at minimum to Windows Server 2008. One of the great features that Windows Server 2008/R2/2012 has to offer is the last interactive logon information. In this article I will show you how to display the last interactive logon information in Windows Server 2008 and Windows Server 2012. Or perhaps the security officer at your organization as asked you for a report. Or maybe you need to track the number of unsuccessful logon attempts to the domain. Imagine that your network security was compromised and you have a good reason to believe that someone attacked and compromised your domain environment.
