hi dochelp, It seems that the lastLogon value doesn't get updated with repeated ldap logons (similarly lastLogonTimestamp). Is there some kind of timeout for updating this with non-interactive logons? And if so, what is it? thanks, Douglas