In Active Directory, there are two attributes related to the user logon time: lastLogon and lastLogonTimeStamp.

• The lastLogon attribute is updated only in the Domain Controller (DC) which authenticates the user logon. This is a non-replicating attribute.
• The lastLogonTimeStamp is a replicated version of lastLogon attribute. This value gets updated whenever the difference between the previous timestamp and the current timestamp exceeds a certain threshold value.

In ADManager Plus, we retrieve the lastLogon value from all DCs and the latest value will be updated for the lastLogon and lastLogonTimeStamp fields.