What is the last logon in active directory?

The “lastLogon” attribute in Active Directory is used to track the last time a user or computer account authenticated with a domain controller. This attribute is updated every time a user or computer account logs on to the domain and authenticates with a domain controller. The lastLogon attribute is stored as a timestamp value and represents the number of 100-nanosecond intervals since January 1, 1601.

Note that the lastLogon attribute is not replicated between domain controllers, which means that the value may be different on different domain controllers. To address this, Active Directory also includes a “lastLogonTimestamp” attribute, which provides a replicated value that is updated only once every 14 days. The lastLogonTimestamp attribute is also stored as a timestamp value and represents the number of 100-nanosecond intervals since January 1, 1601.

The lastLogon and lastLogonTimestamp attributes can be useful for tracking account usage and identifying inactive accounts that can be disabled or deleted to improve security and reduce clutter in the directory. However, it’s important to note that the values of these attributes may not always be accurate or up-to-date, especially in large and complex Active Directory environments with multiple domain controllers.

lastlogon vs lastLogonTimestamp vs lastLogondate

So, that’s all in this blog. I will meet you soon with next stuff. Have a nice day!!!

Guys please don’t forget to like and share the post. Also join our WindowsTechno Community and where you can post your queries/doubts and our experts will address them.

You can also share the feedback on below windows techno email id.

If you have any questions, feel free to contact us on admin@windowstechno.com also follow us on facebook@windowstechno to get updates about new blog posts.