Comments on: Active Directory Account Lockout Troubleshooting

By: Global Address List Not Updating Exchange Cached Mode Enabled

Global Address List Not Updating Exchange Cached Mode Enabled — Fri, 02 Jul 2010 22:53:55 +0000

[...] the Business Phone attribute in the GAL to display internal phone extensions of employees. The Active Directory Telephone number attribute for each user object was updated, but the GAL was not displaying the [...]

By: Shanmugam

Shanmugam — Tue, 29 Jun 2010 15:38:39 +0000

It is helpful to be able to check the last bad password and instantly query the audit failure log occurred at the bad password time…

Here is a free tool you could use for that:
http://lockoutfixer.cz.cc

By: admin

admin — Tue, 29 Jun 2010 06:34:28 +0000

The Last-Logon-Timestamp is replicated across all domain controllers on Windows 2003 and newer domain controllers. On Windows 2000 the Last-Logon-Timestamp was local to each domain controller and was not replicated. Hope this clears it up for you. Thanks for stopping by.

By: MarcJ

MarcJ — Mon, 28 Jun 2010 23:14:42 +0000

Hi,

Thanks for your helpful post – do you happen to know whether the Last-Logon-Timestamp displayed by the AcctInfo tool takes into account the value on all domain controllers, or just one one DC? I’ve been looking for a free True-Last-Logon tool for a long time, so if you know the answer to this question, would really appreciate you letting me know.

I run a blog on a a href=”http://free-activedir-tools.blogspot.com”>Free Active Directory Reporting Tools and I would be happy to share your answer on my blog so it could help the entire community.

Thanks, and look forward to hearing from you soon.

Ciao,
Marc