Re: LastLogon time

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Yep, just as Richard indicates. This is a pretty popular question that we have been answering for some time. Do a google on the term msDS-LogonTimeSyncInterval and you should find quite a few hits including at least one hit at RegHacks (Jerold's site) about it though googles indexing of the groups as of late has seemed a bit off.

The lowest you can reduce it to in AD is 1 day and you should be very aware of the impact that could have on your replication infrastructure. There is a good reason why lastLogon wasn't replicated and lastLogonTimeStamp was set to update only every 14 days.

Under ADAM this default is changed in a different way and can be reduced to 0 which means update every authentication. But then ADAM auth is always for direct LDAP directory access only, whereas domain auths occur throughout the day automatically.



--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm

============================================================================
Do not read this worthless blog entry on
Defending Security Infrastructures http://blog.joeware.net/2006/07/11/445/
I'm serious, you will learn absolutely nothing about
Defending Security Infrastructures.
============================================================================

kj wrote:
Richard,

Can this be 14 days be changed, supported or otherwise?

Ever since it was documented in 2003's release I've been trying to answer this question.

.

Relevant Pages

  • Re: Richard Ulrich is trying to name smear AGAIN!
    ... Richard Ulrich wrote: ... Bob does not say much that is interesting in this post. ... and Richard Ulrich snipped this relevant part ... RF> about 3,821,990 of the Google hits would have been the ...
    (sci.stat.math)
  • Re: Permission Denied when accessing window.closed
    ... I dropped in from google with the same problem and just had to deliver ... Richard is an asshat. ... I think my smugness detector just burst into ...
    (comp.lang.javascript)
  • Re: New Posters Using Google Groups (November)
    ... Richard wrote: ... > I can't bear the snobbery around this subject, ... Google groups is that its default configuration isn't the same as most ... happen to newbies using the newsreader software if that software didn't ...
    (uk.railway)
  • Re: [SLE] vmware on x86_64
    ... > Richard wrote: ... > Registered Linux user 231871 ... Completes the configuration and opens the ... Google is ...
    (SuSE)
  • System Status?
    ... This has to be a popular question, but a search in google did not give me an ... Mahalo! ... Prev by Date: ...
    (microsoft.public.sharepoint.portalserver)