I am trying to determine the last time a active directory user was logged in by doing a ldap query and using the property lastLogon. This code runs on two web servers. Each server is connecting to a different domain controller. The last login date and time from each web server is different. Why is this and how can I get the most accurate lst login date and time?
Add a comment
|
1 Answer
LastLogon is not replicated. Either you need to use LastLogonTimestamp, or query all domain controllers for the most recent logon.
LastLogonTimestamp is not replicated every time either. It's only replicated if it is older than ~14 days, plus or minus a few days.
It can be reduced by using ADSIEdit.msc. Domain Naming Context, msDS-LogonTimeSyncInterval attribute.
More information:
https://docs.microsoft.com/en-us/windows/win32/adschema/a-msds-logontimesyncinterval
answered Mar 13, 2020 at 17:23
