An employee left le company. I essayez de find out quand his AD account was logged in for le dernier time - si it was avant le dismissal ou after.
Il y a these 2 attributes in user properties window: *lastLogon* et *lastLogonTimestamp*. *lastLogon* date is earlier than le dismissal date, mais *lastLogonTimestamp* date is posterior to le dismissal date (so dans ce cas we would have a security problem).
How to know, qui one of these attributes shows le actual dernier AD account login time? What is le difference entre them?
lastLogon vs. lastLogonTimestamp dans Active Directory
Re: lastLogon vs. lastLogonTimestamp dans Active Directory
Use le le plus recent attribute.
Lastlogon is seulement updated on le domain controller that performs le authentication et is pas replicated.
LastLogontimestamp is replicated, mais par défaut seulement si it is 14 days ou more older than le previous value.
[http://social.technet.microsoft.com/wiki/contents/articles/22461.understanding-the-ad-account-attributes-lastlogon-lastlogontimestamp-and-lastlogondate.aspx](http://social.technet.microsoft.com/wiki/contents/articles/22461.understanding-the-ad-account-attributes-lastlogon-lastlogontimestamp-and-lastlogondate.aspx)
Lastlogon is seulement updated on le domain controller that performs le authentication et is pas replicated.
LastLogontimestamp is replicated, mais par défaut seulement si it is 14 days ou more older than le previous value.
[http://social.technet.microsoft.com/wiki/contents/articles/22461.understanding-the-ad-account-attributes-lastlogon-lastlogontimestamp-and-lastlogondate.aspx](http://social.technet.microsoft.com/wiki/contents/articles/22461.understanding-the-ad-account-attributes-lastlogon-lastlogontimestamp-and-lastlogondate.aspx)