Why do we need to query all DCs if the last logon time shows an incorrect value in reports?
Reason: As last logon time is non-replicable, querying from all DCs is essential to obtain precise timing information. Ensure accurate reporting by including all relevant domain controllers (DCs) in the domain settings.
Solution: Add the relevant DC to the list of DCs in the domain settings of ADManager Plus using these steps:
Click the Domain/Tenant Settings tab, located at the top right corner of ADManager Plus window. You will now be in the Domain Configuration page, which lists all the domains that have been configured in ADManager Plus.
In the Actions column of the domain in which you wish to add domain controllers, click the Edit Domain Details icon.
In the Edit Domain Details window that pops up, click Add, and specify the domain controllers' names in the field provided.
Click Add to confirm.
Click Save.
New to ADSelfService Plus?
Related Articles
Difference in last logon time for Active Directory accounts in ADManager Plus reports
In Active Directory, there are two attributes related to the user logon time: lastLogon and lastLogonTimeStamp. The lastLogon attribute is updated only in the Domain Controller (DC) which authenticates the user logon. This is a non-replicating ...Incorrect bad password count value in reports
The reason for incorrect bad password count values shown in reports is that all the domain controllers (DCs) are not added in the list of DCs available for the specific domain under Domain Settings in ADManager Plus. Steps to add the appropriate DCs ...I get "CSV import failed: Exception occurred while importing data from CSV file. File has not been updated since the last time it was read. " error message when I select "Run Now"
Automation error: The file has not been updated since last time. I get a "CSV import failed: Exception occurred while importing data from CSV file. File has not been updated since the last time it was read. " error when I "Run Now". Possible cause: ...How to allow users to logon to a terminal server?
Terminal server logon permission is used to specify if the Active Directory (AD) user is allowed to logon to the terminal server. ADManager Plus helps you configure these settings efficiently with options to set terminal server logon permission for ...Reports on specific distribution groups and their members
ADManager Plus allows you to generate reports for specific distribution groups and their members using detailed group members report. Steps: Navigate to the Reports tab. Select Group Reports from the left navigation section. Under Member-based ...