Configuring and Maintaining the Active Directory Infrastructure - MCTS Guide to Microsoft Windows Server 2008 Active Directory Configuration - page 401

Time Required: 15 minutes
Objective: Verify your current functional level and enable last interactive logon information.
Description: For security reasons, you want users to be able to see when their account was last
used to log on and whether there were any unsuccessful logons. This information is also impor-
tant for your servers. Because this feature is available only with the Windows Server 2008
domain functional level, you need to verify that you're running at that level.
1. Log on to your server as Administrator, and open Active Directory Users and Computers.
2. Right-click the domain node in the left pane and click Properties . If necessary, click the
General tab, where the domain functional level and forest functional level should be listed.
Verify that both are Windows Server 2008. If not, notify your instructor. Click Cancel . Close
Active Directory Users and Computers.
3. Open the Group Policy Management Console (GPMC). Right-click the domain node and
click Create a GPO in this domain, and Link it here . Type CompWinLogonGPO in the
Name text box, and then click OK .
4. In the left pane of GPMC, right-click CompWinLogonGPO under the domain node and click
Edit to open the Group Policy Management Editor (GPME).
5. Expand Computer Configuration , Policies , and Administrative Templates , and then click
Windows Components . Click to expand Windows Logon Options .
6. Double-click Display information about previous logons during user logon in the right pane.
In the Setting tab for the policy, click Enabled , and then click OK . Close the GPME and
GPMC windows.
7. Open a command prompt window, type gpupdate , and press Enter . Close the command
prompt window after Gpupdate.exe has finished running.
8. Log off the server. Log on again as Administrator, but mistype the password so that the
logon fails the first time. Log on successfully after one failed attempt. You should see a
screen similar to Figure 10-1. Click OK , and then log off your server.

10

Figure 10-1 Last interactive logon information