The domain functional level and forest functional level don't matter. http://msdn.microsoft.com/en-us/library/ms676823(VS.85).aspx
"This attribute is not replicated and is maintained separately on each domain controller in the domain. To get an accurate value for the user's last logon in the domain, the Last-Logon attribute for the user must be retrieved from every domain controller in the domain. The largest value that is retrieved is the true last logon time for that user. " -----Original Message----- From: Mike Leone [mailto:[email protected]] Sent: Wednesday, September 28, 2011 9:11 AM To: NT System Admin Issues Subject: Re: "lastLogon" time is different on different DCs On 9/28/2011 11:03 AM, James Rankin wrote: > Maybe I should have said...... Last Logon time isn't replicated if you > are using a Windows 2000 domain .... my bad Our domain is now Win2008. It started out as Win2000, and we updated to 2003, then 2008. But the info is replicating, at least from the DC in that site, to at least one of the DCs here. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
