Title: Re: [ActiveDir] List Groups I'm In?
Even though this is a forest built on
Server 2003, you probably still have to raise the domain/forest functional
levels to 2003; this is probably not the default functional level. LastLogonTimestamp
is one of the attributes that didnt appear until
Title: Re: [ActiveDir] List Groups I'm In?
What is the domain mode/ forest mode?
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of WATSON, BEN
Sent: Wednesday, October 25, 2006
7:00 PM
To: ActiveDir@mail.activedir.org
Subject: LastlogonTimestamp
Missing
I
Are you in DFL2? Just building an R2 forest from scratch won't set your
functional levels, you still have to switch from mixed to native, then your
domains to DFL2 and then your forest to FFL2. Though lastLogonTimestamp will
start getting populated for your domains as you hit DFL2.
joe
--
PROTECTED] On Behalf Of joe
Sent: Thursday, June 02, 2005 9:22 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] lastlogontimestamp-
A remote NTLM Auth would be a remote authentication of a user for a resource
that uses NTLM authentication because kerberos for some reason or another
can't
: [EMAIL PROTECTED]
http://msetechnology.com
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan
Sent: Friday, June 03, 2005 8:13 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] lastlogontimestamp-
For instance... If you connect
Bingo.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dean Wells
Sent: Friday, June 03, 2005 8:28 AM
To: Send - AD mailing list
Subject: RE: [ActiveDir] lastlogontimestamp-
Kerberos requires that a principal name (SPN) be specified in order to
locate
PROTECTED] On Behalf Of joe
Sent: Friday, June 03, 2005 4:23 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] lastlogontimestamp-
Bingo.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dean Wells
Sent: Friday, June 03, 2005 8:28 AM
To: Send
To: ActiveDir@mail.activedir.org
Cc: Toro, Pedro; Poueriet, Jorge
Subject: RE: [ActiveDir] lastlogontimestamp-
David,
After researching, I was unable to decipher what a remote
NTLM Authentication is. Can you give me an example of this?
I am trying to come up with an effective account
, June 02, 2005 8:17 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] lastlogontimestamp-
Is it possible to approach this from another way? Do you have any access to
enrolled student data? If so, then it might be easier to delete students who
are no longer enrolled rather than try
:45
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] lastlogontimestamp-
Steve,
Thanks for the alternate view. Unfortunately, our business
policy is not that simple. We basically allow for lifetime
email as long as the account is active.
Do you simply delete the account when
Of Steve Rochford
Sent: Thursday, June 02, 2005 12:12 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] lastlogontimestamp-
As I understand it, remote NTLM authentication is when someone doesn't log on
by doing CTRL ALT DEL and putting in a username/password but accesses some
resource which
PROTECTED] On Behalf Of Steve Rochford
Sent: Thursday, June 02, 2005 12:12 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] lastlogontimestamp-
As I understand it, remote NTLM authentication is when someone doesn't log on
by doing CTRL ALT DEL and putting in a username/password
: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Steve Rochford
Sent: Thursday, June 02, 2005 12:12 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] lastlogontimestamp-
As I understand it, remote NTLM authentication is when someone doesn't log
on by doing CTRL ALT DEL and putting
:[EMAIL PROTECTED] On Behalf Of David Adner
Sent: Friday, May 27, 2005 6:02 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] lastlogontimestamp-
In 2003 RTM lastLogonTimeStamp gets updated during Kerberos
authentications
and interactive NTLM authentications. Remote NTLM auths do
] lastlogontimestamp-
note to Deji
You just made joe's head bigger...
/note to Deji
Rick
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Friday, May 27, 2005 8:40 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir
I'm staying out of it. I'll let you guys settle it. :-)
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: Monday, May 30, 2005 6:33 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] lastlogontimestamp-
Hey I was simply agreeing
: [ActiveDir] lastlogontimestamp-
In 2003 RTM lastLogonTimeStamp gets updated during Kerberos
authentications and interactive NTLM authentications. Remote NTLM auths
do not cause it to be updated. There was talk to get this changed in
SP1.
-Original Message-
To make matters worse
] lastlogontimestamp-
note to Deji
You just made joe's head bigger...
/note to Deji
Rick
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Friday, May 27, 2005 8:40 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir
Title: Message
I have
seen the same discrepancy. There is a newer dll (acctinfo2.dll) available
now. I don't know if it rectifies this particular issue, but it does allow
the Additional Account Info tab to appear ina users properties that was
returned as a result of a query.
Andrew Gould
PROTECTED]
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gould, Andrew D.
Sent: Saturday, May 28, 2005 2:52
AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir]
lastlogontimestamp
I have seen the same discrepancy. There is a newer dll
(acctinfo2.dll
Of
[EMAIL PROTECTED]
Sent: Friday, May 27, 2005 12:06 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] lastlogontimestamp
Hi Andrew
Where can I get the acctinfo2.dll? Would be nice to have J
Thank you and have a splendid day!
Kind Regards,
Freddy Hartono
Windows
Split the difference, grab adfind from www.joeware.net in the free windows tools
section and see what it decodes the values to. I can't speak to acctinfo dll as
I never used it. _vbscript_ decoding of int8 values is often troublesome, it is
possible the code below isn't doing a very accurate
-
, but if I wanted to use this vbscript to give
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of joe
Sent: Friday, May 27, 2005 12:47 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir
-
, but if I wanted to use this vbscript to give
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of joe
Sent: Friday, May 27, 2005 12:47 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] lastlogontimestamp
have some code lying around that does
that kind of logic and spits out the accounts that way.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Medeiros, Jose
Sent: Friday, May 27, 2005 4:13 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir
]
[mailto:[EMAIL PROTECTED] Behalf Of Al Mulnick
Sent: Friday, May 27, 2005 1:40 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] lastlogontimestamp-
Part of the problem I see with your output below is that it doesn't show
which domain controller you last logged on to. While that's
PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Al Mulnick
Sent: Friday, May 27, 2005 1:40 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] lastlogontimestamp-
Part of the problem I see with your output below is that it doesn't show
which domain controller you last logged on to. While
In 2003 RTM lastLogonTimeStamp gets updated during Kerberos authentications
and interactive NTLM authentications. Remote NTLM auths do not cause it to
be updated. There was talk to get this changed in SP1.
-Original Message-
To make matters worse, there is a fix out there somewhere
@mail.activedir.org
Subject: RE: [ActiveDir] lastlogontimestamp-
Hi Al,
Thank you for taking the time to reply, and I very much appreacite your
effort on researching this. You know that I recall using USRSTAT on a NT4
Domain and it would show the Domain Controller that actually authenticated
the user account
] On Behalf Of [EMAIL PROTECTED]
Sent: Friday, May 27, 2005 2:26 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] lastlogontimestamp-
In NT4, all updates go up to the PDC. This is why you will get a true last
login report.
Post NT4, most updates take place on any DC, and lastlogon is one
would have burned to the
ground in any decent sized enterprise.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ayers, Diane
Sent: Friday, May 27, 2005 7:18 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] lastlogontimestamp-
In NT4, all
@mail.activedir.org
Subject: RE: [ActiveDir] lastlogontimestamp-
Yes, I agree with you, it is incorrect.
BDC's weren't entirely read only, non-replicating attributes such as last
logon, bad password count, etc were written locally and yes you had to query
all DCs to get an accurate accounting of what
32 matches
Mail list logo
