Last-Logon-Timestamp attribute
Applies to: desktop apps only
This is the time that the user last logged into the domain. Whenever a user logs on, the value of this
attribute is read from the DC. If the value is older
[ current_time - msDS-LogonTimeSyncInterval ], the value is updated. The
initial update after the raise of the domain functional level is calculated as 14 days minus random percentage of
5 days.
| CN | Last-Logon-Timestamp |
|---|---|
| Ldap-Display-Name | lastLogonTimestamp |
| Size | - |
| Update Privilege | This value is set by the system. |
| Update Frequency | When the user logs on, and if this value is older than the current time minus the value of msDS-LogonTimeSyncInterval. |
| Attribute-Id | 1.2.840.113556.1.4.1696 |
| System-Id-Guid | c0e20a04-0e5a-4ff3-9482-5efeaecd7060 |
| Syntax | Interval |
Implementations
- Windows Server 2003
- ADAM
- Windows Server 2003 R2
- Windows Server 2008
- Windows Server 2008 R2
- Windows Server 8 Beta
Windows Server 2003
| Link-Id | - |
|---|---|
| MAPI-Id | - |
| System-Only | False |
| Is-Single-Valued | True |
| Is Indexed | False |
| In Global Catalog | False |
| NT-Security-Descriptor | O:BAG:BAD:S: |
| Range-Lower | - |
| Range-Upper | - |
| Search-Flags | 0x00000000 |
| System-Flags | 0x00000010 |
| Classes used in | User |
ADAM
| Link-Id | - |
|---|---|
| MAPI-Id | - |
| System-Only | True |
| Is-Single-Valued | True |
| Is Indexed | False |
| In Global Catalog | False |
| NT-Security-Descriptor | O:BAG:BAD:S: |
| Range-Lower | - |
| Range-Upper | - |
| Search-Flags | 0x00000000 |
| System-Flags | 0x00000010 |
| Classes used in | ms-DS-Bindable-Object |
Windows Server 2003 R2
| Link-Id | - |
|---|---|
| MAPI-Id | - |
| System-Only | False |
| Is-Single-Valued | True |
| Is Indexed | False |
| In Global Catalog | False |
| NT-Security-Descriptor | O:BAG:BAD:S: |
| Range-Lower | - |
| Range-Upper | - |
| Search-Flags | 0x00000000 |
| System-Flags | 0x00000010 |
| Classes used in | User |
Windows Server 2008
| Link-Id | - |
|---|---|
| MAPI-Id | - |
| System-Only | False |
| Is-Single-Valued | True |
| Is Indexed | True |
| In Global Catalog | True |
| NT-Security-Descriptor | O:BAG:BAD:S: |
| Range-Lower | - |
| Range-Upper | - |
| Search-Flags | 0x00000001 |
| System-Flags | 0x00000010 |
| Classes used in | User |
Windows Server 2008 R2
| Link-Id | - |
|---|---|
| MAPI-Id | - |
| System-Only | False |
| Is-Single-Valued | True |
| Is Indexed | True |
| In Global Catalog | True |
| NT-Security-Descriptor | O:BAG:BAD:S: |
| Range-Lower | - |
| Range-Upper | - |
| Search-Flags | 0x00000001 |
| System-Flags | 0x00000010 |
| Classes used in | User |
Windows Server 8 Beta
| Link-Id | - |
|---|---|
| MAPI-Id | - |
| System-Only | False |
| Is-Single-Valued | True |
| Is Indexed | True |
| In Global Catalog | True |
| NT-Security-Descriptor | O:BAG:BAD:S: |
| Range-Lower | - |
| Range-Upper | - |
| Search-Flags | 0x00000001 |
| System-Flags | 0x00000010 |
| Classes used in | User |
Send comments about this topic to Microsoft
Build date: 2/3/2012
Community Content
Bruce Perler MSFT
Differences between Last-Logon and Last-Logon-Timestamp
For an excellent blog entry on the intended use and differences between Last-Logon and Last-Logon-Timestamp attributes, see this from Ned Pyle - http://blogs.technet.com/b/askds/archive/2009/04/15/the-lastlogontimestamp-attribute-what-it-was-designed-for-and-how-it-works.aspx