search

netwrix / pingcastle

PingCastle - Get Active Directory Security at 80% in 20% of the time
https://www.pingcastle.com
Other
2.35k stars 292 forks source link

Inactive Account Check Rule ID:S-Inactive #198

Closed LiLaPhantom closed 1 year ago

LiLaPhantom commented 1 year ago

Hello together, in my environment shows the S-Inactive Rule nearly every Useraccount as inactive. In AD the lastlogon / lastlogontimestamp attribute is correct (Today morning), but Pingcastle counts this, and nearly every other account, as inactive. The shown cmdlet works, lists 11 HealthMailbox accounts an d 14 inactive Accounts. Thes are correct values, but pingcastle says 84% of all users are inactive. this is not correcct. Please excuse my english ;-) regards Thomas

vletoux commented 1 year ago

this is a permission issue. Run the program as admin or with a full token