We recently audited our IT equipment inventory and have come across a few laptops which are missing. They aren't on the network, and most haven't logged into our DC's in several months. We have asset tracking but unfortunately we in IT rarely get equipment brought back to us whenever people leave, so things wind up circulating (which is a battle in itself), meaning we don't really know who possessed the laptops last.
I was able to find out when and where the computers were last logged in to our DC (Server 2008r2), but now I'm trying to see if it's possible to find who last logged into these computers via AD or some other means. I've found a few PS scripts but they seem to all rely on the computers being on the network or having audit logs that stretch back several months, which we don't have. Another potential challenge is that if the last logged on user is a terminated employee then chances are good their AD account has been deleted by now.
Any suggestions would be greatly appreciated - thanks!