dates in active directory

[nlehrer]

are their dates related to user accounts like last login or last
password change that are not replicated to all the domain
controllers? that are only up to date on the last controller that
was
used to authenticate to?

thanks

 

[Alun Jones]

"nlehrer" <nlehrer@yahoo.com> wrote in message
news:4ec801a5-3b7b-4ff5-9b20-a36c4def1732@v3g2000hsc.googlegroups.com...
> are their dates related to user accounts like last login or last
> password change that are not replicated to all the domain
> controllers? that are only up to date on the last controller that
> was
> used to authenticate to?

Yes. Last logon in particular is only representative of the last time that
this account was authenticated against this domain controller.

You can get an idea of the last logon (other than one using cached
credentials, of course) by querying all domain controllers and taking the
most recent date.

Of course, the same is true to a certain extent for any settings that are
replicated - to get truly updated values, you have to take into account that
any domain controller you query will be possibly out of date.

Alun.
~~~~