Home / server / Questions / 133687
Accepted
EKS
Asked: 2010-04-20 00:36:12 +0800 CST

Lastlogon - Should it sync accross all domain controlers

  • 772

Im using LastLogon attribute to check when a user account last was used, but i see the value seems to be updated on each DC when a user logs in via that DC. And its NOT synced across the different domain controlers.

So my question is: Is this how this attribute should work? Or is it something wrong in our domain?

active-directory

2 Answers

  1. Best Answer

    The lastLogonTimeStamp attribute is automatically replicated across all domain DCs only if the domain is (at least) at Windows Server 2003 functional level.

    Also, beware of differences between lastLogonTimeStamp and lastLogon (the latter one is obsolete and never replicated).

    http://blogs.technet.com/askds/archive/2009/04/15/the-lastlogontimestamp-attribute-what-it-was-designed-for-and-how-it-works.aspx

    • 2

  2. The LastLogon attribute is not replicated. When the domain functional level is "Windows Server 2003" there is a new attribute "lastLogonTimeStamp" which is replicated.

    • 1