How to use lastlogontimestamp so it can be used in sets

Question

I'm looking at a way to put users in certain sets based on the lastlogonTimestamp. What is the best way to do this? I create a "lastlogonTimestamp" attribute in MV and can use it to sync that value from AD into the user's details in FIM's
metaverse.
How can I use that to add a user to a specific set e.g. a set with users who have not logged on for 30 days or more??

Answer 1

On Wed, 3 Dec 2014 04:22:33 +0000, JOTdude wrote:
I'm looking at a way to put users in certain sets based on the lastlogonTimestamp. What is the best way to do this? I create a "lastlogonTimestamp" attribute in MV and can use it to sync that value from AD into the user's details in
FIM's metaverse. How can I use that to add a user to a specific set e.g. a set with users who have not logged on for 30 days or more??
IMO far too many people rely on lastLogonTimestamp without really
understanding how it works. For example, I could update an account's
lastLogonTimestamp even if that account has never actually been used to
logon.
Some required reading before you rely on this attribute to be as accurate
as you think it might be:
http://blogs.technet.com/b/askpfeplat/archive/2014/04/14/how-lastlogontimestamp-is-updated-with-kerberos-s4u2self.aspx
Paul Adare - FIM CM MVP
And God spoke: There shall be packets.
And there were packets, and these packets were good, mostly. -- G.S.
Granados