none
is there any difference between LastLogonTimeStamp in AD 2003 and AD 2008?

Answers

  • If DLF is minimum 2003 then only you will get the "Las tLogonTimeStamp" & that is replicated all the DCs. So there is no diference in 2008.

    In addition in 2008 GPO you will get a option that is shown that value when the user logged in.


    Best regards Biswajit Biswas Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. MCP 2003,MCSA 2003, MCSA:M 2003, CCNA, MCTS, Enterprise Admin

    • Marked as answer by ashik07 Thursday, January 24, 2013 10:30 AM
    Thursday, January 24, 2013 10:26 AM

All replies

  • If DLF is minimum 2003 then only you will get the "Las tLogonTimeStamp" & that is replicated all the DCs. So there is no diference in 2008.

    In addition in 2008 GPO you will get a option that is shown that value when the user logged in.


    Best regards Biswajit Biswas Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. MCP 2003,MCSA 2003, MCSA:M 2003, CCNA, MCTS, Enterprise Admin

    • Marked as answer by ashik07 Thursday, January 24, 2013 10:30 AM
    Thursday, January 24, 2013 10:26 AM
  • No there is no diffrence in behaivor between Windows Server 2003 and later DSA (Domain Controller) versions as long as the Domain Functional Level (DFL) is Windows Server 2003 or later

    For more information:
    “The LastLogonTimeStamp Attribute” – “What it was designed for and how it works”
    http://blogs.technet.com/b/askds/archive/2009/04/15/the-lastlogontimestamp-attribute-what-it-was-designed-for-and-how-it-works.aspx

    Enfo Zipper
    Christoffer Andersson – Principal Advisor
    http://blogs.chrisse.se - Directory Services Blog

    Thursday, January 24, 2013 10:30 AM
  • thanks for the reply
    Thursday, January 24, 2013 10:37 AM
  • Sorry Ashik,Yes I found there is some diference. Please see below & marked as bold red.

    http://msdn.microsoft.com/en-us/library/windows/desktop/ms676824(v=vs.85).aspx#win_2008

    Windows Server 2003

    Link-Id

    -

    MAPI-Id

    -

    System-Only

    False

    Is-Single-Valued

    True

    Is Indexed

    False

    In Global Catalog

    False

    NT-Security-Descriptor

    O:BAG:BAD:S:

    Range-Lower

    -

    Range-Upper

    -

    Search-Flags

    0x00000000

    System-Flags

    0x00000010

    Classes used in

    User

    Windows Server 2008

    Link-Id

    -

    MAPI-Id

    -

    System-Only

    False

    Is-Single-Valued

    True

    Is Indexed

    True

    In Global Catalog

    True

    NT-Security-Descriptor

    O:BAG:BAD:S:

    Range-Lower

    -

    Range-Upper

    -

    Search-Flags

    0x00000001

    System-Flags

    0x00000010

    Classes used in

    User

    Windows Server 2008 R2

    Link-Id

    -

    MAPI-Id

    -

    System-Only

    False

    Is-Single-Valued

    True

    Is Indexed

    True

    In Global Catalog

    True

    NT-Security-Descriptor

    O:BAG:BAD:S:

    Range-Lower

    -

    Range-Upper

    -

    Search-Flags

    0x00000001

    System-Flags

    0x00000010

    Classes used in

    User

    See the below snap as well.

    For more details.

    searchFlags

    The searchFlags property of each property's attributeSchema object defines whether a property is indexed.

     The four currently defined bits for this attribute are as follows:

    1 = Index over attribute only; 2 = Index over container and attribute; 4 = Add this attribute to the Ambiguous Name Resolution (ANR) set (should be used in conjunction with 1); 8 = Preserve this attribute on logical deletion (that is, make this attribute available on tombstones).

    isMemberof PartialAttributeSet

    A Boolean value that defines whether the attribute is replicated to the global catalog (if replicated to the global catalog, it has a value of TRUE, if not, its value is FALSE).

    http://technet.microsoft.com/library/Cc961746

    [corrected the image tag]


    HTH
    Biswajit Biswas
    My Blogs |MCC |TNWiki Ninja

    Best regards Biswajit Biswas Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. MCP 2003,MCSA 2003, MCSA:M 2003, CCNA, MCTS, Enterprise Admin



    • Edited by bshwjt Friday, January 25, 2013 4:34 AM
    Thursday, January 24, 2013 10:39 AM
  • If DLF is minimum 2003 then only you will get the "Las tLogonTimeStamp" & that is replicated all the DCs. So there is no diference in 2008.

    In addition in 2008 GPO you will get a option that is shown that value when the user logged in.


    Best regards Biswajit Biswas Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. MCP 2003,MCSA 2003, MCSA:M 2003, CCNA, MCTS, Enterprise Admin


    The GPO you can use in Windows Server 2008 (Windows Vista, Windows 7) - Is to enable interactive logon information, this information is stored in the "msDS-LastSuccessfulInteractiveLogonTime" attribute and is <> from 'lastLogonTimeStamp' attribute

    Enfo Zipper
    Christoffer Andersson – Principal Advisor
    http://blogs.chrisse.se - Directory Services Blog

    Thursday, January 24, 2013 10:57 AM
  • Thanks Chris. You put  awesome info.

    HTH
    Biswajit Biswas
    My Blogs |MCC |TNWiki Ninja

    Best regards Biswajit Biswas Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. MCP 2003,MCSA 2003, MCSA:M 2003, CCNA, MCTS, Enterprise Admin



    • Edited by bshwjt Thursday, January 24, 2013 11:00 AM
    Thursday, January 24, 2013 10:59 AM
  • thanks Christoffer Andersson,Biswajit Biswas
    Thursday, January 24, 2013 11:06 AM
  • Done some research on "LastLogonTimeStamp" & came to the conclusion that if Schema version is 44 then Is Indexed, In Global Catalog attributes values are TRUE. You dont need 2008 DC for that. Requirement is schema version 44 no Windows 2008 DC. In previous version schemas Is Indexed,In Global Catalog attributes values are FALSE.


    HTH
    Biswajit Biswas
    My Blogs |MCC |TNWiki Ninja

    Best regards Biswajit Biswas Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. MCP 2003,MCSA 2003, MCSA:M 2003, CCNA, MCTS, Enterprise Admin



    • Edited by bshwjt Thursday, January 24, 2013 3:30 PM
    Thursday, January 24, 2013 3:27 PM
  • Good research biswajit.

    sch40.ldf - Seems to add the indexing

    dn: CN=Last-Logon-Timestamp,CN=Schema,CN=Configuration,DC=X
    changetype: ntdsSchemaModify
    replace: searchFlags
    searchFlags: 1


    PAS.ldf - Adds the attribute to the PAS:

    dn: CN=Last-Logon-Timestamp,CN=Schema,CN=Configuration,DC=X
    changetype: ntdsSchemaModify
    replace: isMemberOfPartialAttributeSet
    isMemberOfPartialAttributeSet: TRUE


    Sch42.ldf - Set's SchemaFlagsEx to 0x1: (Prevents it from being filtred out in RODC FAS)

    dn: cn=last-logon-timestamp,CN=Schema,CN=Configuration,DC=X
    changetype: ntdsSchemaModify
    add: schemaFlagsEx
    schemaFlagsEx: 1


    Enfo Zipper
    Christoffer Andersson – Principal Advisor
    http://blogs.chrisse.se - Directory Services Blog


    Thursday, January 24, 2013 3:47 PM
  • You put exact that information that I thought :) & I have corrected the Image tag.

    HTH
    Biswajit Biswas
    My Blogs |MCC |TNWiki Ninja

    Best regards Biswajit Biswas Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. MCP 2003,MCSA 2003, MCSA:M 2003, CCNA, MCTS, Enterprise Admin



    • Edited by bshwjt Friday, January 25, 2013 4:35 AM
    Friday, January 25, 2013 4:32 AM