ActiveDirectory lastLogonTimeStamp Inactive

Question

In joining a new company, I have inherited it's history.

I find that the User and Computer Object property lastLogonTimeStamp is not available. I have checked that the AD Schema version is 2003 R2, and that the domain attribute ms-DS-Logon-Time-Sync-Interval was "" (which should default to 14, to which I've now explicitly set.)

If relevant, the first DC is a SBS server. (This is my first time dealing with SBS, and so far I'm tempted to set it aflame.)

Checking random users and computers, I see no LLTS. How can I force this property into existence?

This is the Schema entry for CN=ms-DS-Logon-Time-Sync-Interval:

ms-DS-Logon-Time-Sync-Interval Schema

What is the domain functional level? – uSlackr May 03 '12 at 21:01 — uSlackr, May 03 '12 at 21:01

score 2 · Accepted Answer · answered May 03 '12 at 21:05

2

There are several possible causes. The likely cause is that your domain functional level is not yet set to windows 2003. Once that's been established check out this KB article: http://support.microsoft.com/kb/886705

answered May 03 '12 at 21:05

uSlackr

6,337
21
36

It's been so long since its really mattered, its easy to forget about functional levels – uSlackr May 04 '12 at 17:01

ActiveDirectory lastLogonTimeStamp Inactive

1 Answers1