ms-DS-Last-Successful-Interactive-Logon-Time and OWA

Jose Maria Gallardo Mancebo 1 Reputation point


i added the GPO to show last logon information to users of my domain for security reasons. It's working and it shows ms-DS-Last-Successful-Interactive-Logon-Time at logon time to the users.

ms-DS-Last-Successful-Interactive-Logon-Time is updated every time they start an interactive logon on one of our machines but is also updating when they access our on premises Exchange by OWA or ActiveSync. This is not a desirable behaviour because some users have Exchange in their phones so when they log in the morning they see that someone started an interactive login during the night.

Is there any way so that is only updated when a real interactive logon (User-Password on a machine) is made.


A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
3,073 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
4,865 questions
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
6,847 questions
0 comments No comments
{count} votes