In 2003 RTM lastLogonTimeStamp gets updated during Kerberos authentications and interactive NTLM authentications. Remote NTLM auths do not cause it to be updated. There was talk to get this changed in SP1.
> -----Original Message----- > To make matters worse, there is a fix out there somewhere > that causes ntlm auth to actually update this field (or am I > just dreaming it? :) List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
