Logon & Logoff time

Mon Jan 21 23:35:10 GMT 2002

On Mon, 21 Jan 2002, Steven French wrote:

>  LastLogonTime was updated on every logon (via the WWkstaUserLogon and
> logoff_time via WWkstaUserLogoff RAP calls) although I don't remember what
> happened if you logged on to the Backup instead of the Primary Domain
> Controller.

the LastLogonTime/LastLogoffTime are updated on the BDC. The rest of the
SAM is read only.

you have to query the PDC and all the BDCs to reliably get a user's
LastLogonTime.

	J.F.