I think that would most likely be "whenChanged", but because it's not a replicated attribute, it's not reliable. Also, it may NOT be accurate because some other actions may have happened to the account since being disable. So, I don't really think you should be looking at ADSI/LDP for this. I think you should be looking in your security log. Every account disable operation should log an ID 642: User Account Changed: Account Disabled event in your security log so you should be able to tell "WHEN" from the timestamp in the log.. Sincerely,
D�j� Ak�m�l�f�, MCSE MCSA MCP+I www.akomolafe.com www.iyaburo.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon ________________________________ From: [EMAIL PROTECTED] on behalf of Creamer, Mark Sent: Thu 1/29/2004 11:13 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Determining when an account was disabled Is there an attribute I can query for that will tell me WHEN an account was disabled? I can easily tell whether they are disabled, but couldn't find out when. Thanks! Mark Creamer List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
