An employee left the company. I try to find out when his AD account was logged in for the last time - if it was before the dismissal or after.
There are these 2 attributes in user properties window: lastLogon and lastLogonTimestamp. lastLogon date is earlier than the dismissal date, but lastLogonTimestamp date is posterior to the dismissal date (so in this case we would have a security problem).
How to know, which one of these attributes shows the actual last AD account login time? What is the difference between them?