Re: dates in active directory



"nlehrer" <nlehrer@xxxxxxxxx> wrote in message
news:4ec801a5-3b7b-4ff5-9b20-a36c4def1732@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
are their dates related to user accounts like last login or last
password change that are not replicated to all the domain
controllers? that are only up to date on the last controller that
was
used to authenticate to?

Yes. Last logon in particular is only representative of the last time that
this account was authenticated against this domain controller.

You can get an idea of the last logon (other than one using cached
credentials, of course) by querying all domain controllers and taking the
most recent date.

Of course, the same is true to a certain extent for any settings that are
replicated - to get truly updated values, you have to take into account that
any domain controller you query will be possibly out of date.

Alun.
~~~~


.



Relevant Pages

  • RE: Authentication Question
    ... When the user logs into a domain machine from outside the domain (i.e. the ... connect they need to specify the domain/computer they wish to authenticate ... > enabled file and print sharing on the laptops ... > message saying a domain controller can not be contacted...etc. ...
    (microsoft.public.windows.server.general)
  • Re: AD site design
    ... if the local DC is unavailable the clients will query DNS for other available DCs to authenticate against. ... > domain controller in his site This as I ... > understand it is INTERSITE replication. ...
    (microsoft.public.windows.server.active_directory)
  • Re: POP3 With LDAP In Exchage server 2000
    ... > Have you configured the LDAP account to authenticate ... >> Account .Everthing works fine except for the address ... I have configured the directory server to be one ...
    (microsoft.public.exchange2000.misc)
  • Re: Anyone here got experience configuring a cisco 4400 controller and a windows 2003 radius server?
    ... still stuck at getting it to authenticate my wireless clients. ... Both the controller and radius server have the same share key ...
    (microsoft.public.windows.server.networking)
  • Re: Domain question
    ... You keep the same single domain. ... authenticate against AD controller on site 1, and users at site 2 to ... If the WAN link was to go down, ...
    (microsoft.public.win2000.networking)