keytab vs lastlogon

Question

From DC point of view, is there any difference between a normal user logon and an app using keytab? What event IDs are expected for a keytab logon? Does DC update lastlogon attribute for a keytab?

Answer 1

For me, John, when I initiated a kinit (on Linux) to obtain a credential, it did update the last logon. It did not update password last set. When a Keytab file is issued, it updated the password last set, regardless of what password I entered. When loading the keytab, for ME, the lastLogon was updated correctly.

I also used smbclient to verify that I could see a share that is on a Synology NAS with Active Directory integration.

Joe