2.352 Attribute lastLogonTimestamp

  • Article

This is the time that the user last logged on to the domain. Whenever a user logs on, the value of this attribute is read from the DC. If msDS-LogonTimeSyncInterval is nonzero, and the value is older than (current_time - msDS-LogonTimeSyncInterval), the value is updated with the current time. The initial update, after the domain functional level is raised to DS_BEHAVIOR_WIN2003 or higher, is calculated as 14 days minus a random percentage of 5 days.

Note: This attribute is present on objects only when the domain functional level is DS_BEHAVIOR_WIN2003 or higher.

 cn: Last-Logon-Timestamp
 ldapDisplayName: lastLogonTimestamp
 attributeId: 1.2.840.113556.1.4.1696
 attributeSyntax: 2.5.5.16
 omSyntax: 65
 isSingleValued: TRUE
 schemaIdGuid: c0e20a04-0e5a-4ff3-9482-5efeaecd7060
 systemOnly: FALSE
 searchFlags: fATTINDEX
 attributeSecurityGuid: 5f202010-79a5-11d0-9020-00c04fc2d4cf
 isMemberOfPartialAttributeSet: TRUE
 systemFlags: FLAG_SCHEMA_BASE_OBJECT
 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

Version-Specific Behavior: First implemented on Windows Server 2003 operating system.

The schemaFlagsEx attribute was added to this attribute definition in Windows Server 2008 operating system.