Difference in last logon time for Active Directory accounts in ADManager Plus reports
In Active Directory, there are two attributes related to the user logon time: lastLogon and lastLogonTimeStamp.
- The lastLogon attribute is updated only in the Domain Controller (DC) which authenticates the user logon. This is a non-replicating attribute.
- The lastLogonTimeStamp is a replicated version of lastLogon attribute. This value gets updated whenever the difference between the previous timestamp and the current timestamp exceeds a certain threshold value.
In ADManager Plus, we retrieve the lastLogon value from all DCs and the latest value will be updated for the lastLogon and lastLogonTimeStamp fields.
New to ADSelfService Plus?