$userdir = Left("%UserProfile%",InStrRev("%UserProfile%","\"))

$users = DirList($userdir+"*.*",1)

For Each $user in $users
   If Exist($userdir+$user+"ntuser.ini") AND Not InStr($user,"LocalService") AND Not InStr($user,"NetworkService")
      "USER: "+Left($user,-1) ?
      "Last Logged In: "+GetFileTime($userdir+$user+"ntuser.ini") ?
      ?
   Endif
Next

"DONE"
get $

Function dirlist($dirname, optional $options)
  dim $filename, $counter, $filepath, $mask
  dim $list, $sublist, $subcounter
  $counter=-1
  $dirname=trim($dirname)
  if $dirname=''
    $dirname=@CURDIR
  endif
  if right($dirname,1)='\'
    $dirname=left($dirname,len($dirname)-1)
  endif
  if getfileattr($dirname) & 16
    $mask='*.*'
  else
    $mask=substr($dirname,instrrev($dirname,'\')+1)
    $dirname=left($dirname,len($dirname)-len($mask)-1)
  endif
  redim $list[10]
  $filename=dir($dirname+'\'+$mask)
  while $filename<>'' and @ERROR=0
    if $filename<>'.' and $filename<>'..'
      select
      case (getfileattr($dirname+'\'+$filename) & 16)
        if $options & 1
          $counter=$counter+1
          if $options & 2
            $list[$counter]=$dirname+'\'+$filename+'\'
          else
            $list[$counter]=$filename+'\'
          endif
        endif
        if ($options & 4)
          $sublist=dirlist($dirname+'\'+$filename+'\'+$mask,$options)
          if ubound($sublist)+1
            redim preserve $list[ubound($list)+ubound($sublist)+1]
            for $subcounter=0 to ubound($sublist)
              $counter=$counter+1
              if $options & 2
                $list[$counter]=$dirname+'\'+$filename+'\'+$sublist[$subcounter]
              else
                $list[$counter]=$filename+'\'+$sublist[$subcounter]
              endif
            next
          endif
        endif
      case ($options & 2)
        $counter=$counter+1
        $list[$counter]=$dirname+'\'+$filename
      case 1
        $counter=$counter+1
        $list[$counter]=$filename
      endselect
      if $counter mod 10
        redim preserve $list[$counter+10]
      endif
    endif
    $filename = dir('')
  loop
  if $counter+1
    redim preserve $list[$counter]
  else
    $list=''
  endif
  if $mask<>'*.*' and ($options & 4)
    $filename=dir($dirname+'\*.*')
    while $filename<>'' and @ERROR=0
      if $filename<>'.' and $filename<>'..'
        if (getfileattr($dirname+'\'+$filename) & 16)
          $sublist=dirlist($dirname+'\'+$filename+'\'+$mask,4)
          if ubound($sublist)+1
            redim preserve $list[ubound($list)+ubound($sublist)+1]
            for $subcounter=0 to ubound($sublist)
              $counter=$counter+1
              if $options & 2
                $list[$counter]=$dirname+'\'+$filename+'\'+$sublist[$subcounter]
              else
                $list[$counter]=$filename+'\'+$sublist[$subcounter]
              endif
            next
          endif
        endif
      endif
      $filename = dir('')
    loop
  endif
  if $counter+1
    redim preserve $list[$counter]
  else
    $list=''
  endif
  $dirlist=$list
endfunction

Dim $strComputer, $objWMIService, $colItems, $objItem
$strComputer = "."
$objWMIService = GetObject("winmgmts:\\"+$strComputer+"\root\CIMV2")
$colItems = $objWMIService.ExecQuery("Select * from Win32_NetworkLoginProfile where UserType='Normal Account'",,48)
For Each $objItem in $colItems
  "Name: " + $objItem.Name ?
Next

Dim $strComputer, $objWMIService, $colItems, $objItem
$strComputer = "."
$objWMIService = GetObject("winmgmts:\\"+$strComputer+"\root\CIMV2")
$colItems = $objWMIService.ExecQuery("Select * from Win32_NetworkLoginProfile where UserType='Normal Account'",,48)
For Each $objItem in $colItems
   "Name: "+$objItem.Name ?
   $last = $objItem.LastLogon
   $year = Left($last,4)
   $mo = SubStr($last,5,2)
   $day = SubStr($last,7,2)
   $hour = SubStr($last,9,2)
   $min = SubStr($last,11,2)
   $sec = SubStr($last,13,2)
   "Last Logon: "+$mo+"/"+$day+"/"+$year+" at "+$hour+":"+$min+":"+$sec ? ?
Next

get $

$nul = WriteValue("HKLM\Software\Microsoft\CurrentVersion\Policies\System","DisplayLastLogonInfo","1","REG_DWORD")

$strComputer = "."
$objWMIService = GetObject("winmgmts:\\" + $strComputer + "\root\CIMV2")
$colItems = $objWMIService.ExecQuery("Select * from Win32_NetworkLoginProfile",,48)
For Each $objItem in $colItems
  "AccountExpires: " + $objItem.AccountExpires ?
  "AuthorizationFlags: " + $objItem.AuthorizationFlags ?
  "BadPasswordCount: " + $objItem.BadPasswordCount ?
  "Caption: " + $objItem.Caption ?
  "CodePage: " + $objItem.CodePage ?
  "Comment: " + $objItem.Comment ?
  "CountryCode: " + $objItem.CountryCode ?
  "Description: " + $objItem.Description ?
  "Flags: " + $objItem.Flags ?
  "FullName: " + $objItem.FullName ?
  "HomeDirectory: " + $objItem.HomeDirectory ?
  "HomeDirectoryDrive: " + $objItem.HomeDirectoryDrive ?
  "LastLogoff: " + $objItem.LastLogoff ?
  "LastLogon: " + $objItem.LastLogon ?
  "LogonHours: " + $objItem.LogonHours ?
  "LogonServer: " + $objItem.LogonServer ?
  "MaximumStorage: " + $objItem.MaximumStorage ?
  "Name: " + $objItem.Name ?
  "NumberOfLogons: " + $objItem.NumberOfLogons ?
  "Parameters: " + $objItem.Parameters ?
  "PasswordAge: " + $objItem.PasswordAge ?
  "PasswordExpires: " + $objItem.PasswordExpires ?
  "PrimaryGroupId: " + $objItem.PrimaryGroupId ?
  "Privileges: " + $objItem.Privileges ?
  "Profile: " + $objItem.Profile ?
  "ScriptPath: " + $objItem.ScriptPath ?
  "SettingID: " + $objItem.SettingID ?
  "UnitsPerWeek: " + $objItem.UnitsPerWeek ?
  "UserComment: " + $objItem.UserComment ?
  "UserId: " + $objItem.UserId ?
  "UserType: " + $objItem.UserType ?
  "Workstations: " + $objItem.Workstations ?
  ?
Next