Ce site est optimisé pour être consulté depuis un navigateur moderne dans lequel JavaScript est activé.

lastLogon vs. lastLogonTimestamp dans Active Directory

ayi

An employee left le company. I essayez de find out quand his AD account was logged in for le dernier time - si it was avant le dismissal ou after.

Il y a these 2 attributes in user properties window: lastLogon et lastLogonTimestamp. lastLogon date is earlier than le dismissal date, mais lastLogonTimestamp date is posterior to le dismissal date (so dans ce cas we would have a security problem).

How to know, qui one of these attributes shows le actual dernier AD account login time? What is le difference entre them?

ayi

Use le le plus recent attribute.

Lastlogon is seulement updated on le domain controller that performs le authentication et is pas replicated.

LastLogontimestamp is replicated, mais par défaut seulement si it is 14 days ou more older than le previous value.

http://social.technet.microsoft.com/wiki/contents/articles/22461.understanding-the-ad-account-attributes-lastlogon-lastlogontimestamp-and-lastlogondate.aspx