Solved

AD 2008  - R2 User Logon Count = 0, but lastlogontimestamp is recent

Posted on 2014-09-25
1
410 Views
Last Modified: 2014-10-13
We have 3 DC's in a single domain.

Using Dovestone's True Last Logon application, I searched all DC's for "stale" accounts.

Almost every account displays a Last Authenticated DC entry of one of the DC's,

Of these, there are  accounts that have a logonCount = 0, or blank, and a recent lastLogonTimestamp

A few of those have lastlogon dates up to a year prior.

I'm trying to understand how an account can have a Last Authenticated DC entry, a 0 (or blank) logon count, but have a recent lastLogonTimestamp?
0
Comment
Question by:BellevueAdmin
1 Comment
 
LVL 70

Accepted Solution

by:
Chris Dent earned 500 total points
ID: 40345494
Replication is one possible answer. lastLogonTimeStamp is replicated between DCs, but logonCount is not (it's specific to each DC).

Chris
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

In this article, we will see the basic design consideration while designing a Multi-tenant web application in a simple manner. Though, many frameworks are available in the market to develop a multi - tenant application, but do they provide data, cod…
OfficeMate Freezes on login or does not load after login credentials are input.
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now