4

Can someone explain what the 'whenChanged ' attribute is for in AD. We have recently been running a report on this attribute because I believe this attribute will will tell what accounts have changed in Active Directory but we are getting loads of reported updates on user accounts that I cannot explain

thanks

Improve this question

2 Answers 2

Reset to default
4

The whenChanged attribute is updated anytime a local write occurs. It's not a replicated attribute (e.g. maintained locally on each domain controller).

If you want to see what changed specifically,

Look at repadmin /showobjmeta:"DN of object goes here".

Thanks, Brian Desmond Active Directory MVP

Improve this answer
0

I can't find any information on a "whatschanged" attribute. The closest is the whenChanged attribute which is merely a timestamp which is updated when any other object property changes.

Where do you see "whatschanged" and how are you generating a report?

Improve this answer
2
  • Sorry Graeme it is the whenchanged attribute
    – user17735
    Aug 21, 2009 at 10:47
  • I take it that an object can be a user account but is there a way of knowing what property has changed?
    – user17735
    Aug 21, 2009 at 10:49

You must log in to answer this question.