LastLogon updated after account in disabled/expired status

I have an account that was disabled and expired on 1/2/2015 but the attribute lastlogon date was read as 1/7/2015
I don't have the lastlogontimestamp as the account already was deleted
Is it possible for the lastlogon attribute to be updated while the account is in disabled status?

Lastlogon is updated when an authentication was performed against a DC. This attribute does not get replicated as each DC keeps it own value.
You can get the exact last logon date and time using my script here: https://gallery.technet.microsoft.com/scriptcenter/Get-Active-Directory-User-bbcdd771
It is not possible that an account authenticate against a DC when it is disabled or expired. I believe that the account was disabled or set to be expired by an administrator after he did his last authentication, If auditing is enabled and events were not
purged then you can try to track recent changes on the account. However, if you would like to have a better view of what is happening in your AD, you will need to have a third part tool to monitor changes. The one I usually recommend is Lepide Auditor Suite
- Active Directory: http://www.lepide.com/lepideauditor/active-directory.html
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

Similar Messages

  • My account has been "disabled" after my credit card expired.  I updated it to buy the additional i cloud storage but now it won't let me do anything!  help, please!

    my credit card expired so my iCloud storage was deactivated.  I updated my credit card and now it not only wont let me purchase more storage, but says my account has been deactivated.  help, please!

    Hi mamamuddpie,
    If your Apple ID account has been disabled, follow the steps below to reset your password and gain access.  There is a link in the article to the Apple ID Security team if you need help with this.  
    If your Apple ID has been locked - Apple Support
    http://support.apple.com/en-us/HT204106
    You might see one of these alerts:
    “This Apple ID has been disabled for security reasons”
    "You can't sign in because your account was disabled for security reasons"
    "This Apple ID has been locked for security reasons"
    If your Apple ID was locked, you can go to iForgot to unlock it with your existing password or reset your password. You can also click the Reset Password or Forgot Password button in the alert. Remember to type your full email address when you're asked to enter your Apple ID. For example, [email protected] or [email protected]. If you use two-step verification for Apple ID, you need to use your recovery key and a trusted device to regain access to your account.
    If you can't reset your password and you don't use two-step verification, contact Apple Support. Update your password in iCloud settings
    After you change your password, you might need to update it in iCloud settings on your devices.
    iPhone, iPad, or iPod touch
    Go to Settings > iCloud.
    Tap Edit, if asked.
    Type your new password and tap Done.
    Mac
    Go to Apple menu > System Preferences.
    Click iCloud.
    Click Sign Out.
    Type your new password and click Sign In.
    Windows
    Choose Start > Control Panel.
    Double-click iCloud.
    Click Sign Out.
    Type your new password and click Sign In.
    Email
    If you use an email app to get iCloud email, the app will ask you to enter your new password when you check for mail. If OS X Mail doesn't ask you for your password, check your Mail preferences. For any other mail app, check the app's documentation to get help changing your email password.Update other services, such as iTunes and FaceTime
    If you use your Apple ID in the iTunes Store, App Store, iBooks Store, iMessage, Game Center, or FaceTime, you might need to update your password for those services.
    iPhone, iPad, or iPod touch
    Go to Settings and tap the service. 
    Tap your Apple ID. For iMessage, tap Send & Receive and then tap your Apple ID. 
    Tap Sign Out.
    Sign in with your Apple ID and your new password.
    Mac or PC
    If you try to sign in to the iTunes Store or Mac App Store, make a purchase, or update an app, you'll be asked to enter your password.
    Information about products not manufactured by Apple, or independent websites not controlled or tested by Apple, is provided without recommendation or endorsement. Apple assumes no responsibility with regard to the selection, performance, or use of third-party websites or products. Apple makes no representations regarding third-party website accuracy or reliability. Risks are inherent in the use of the Internet. Contact the vendor for additional information.
    Last Modified: Dec 17, 2014
    When you are able to access your account again, check to make sure your billing information has been updated.  
    Change or remove your payment information from your iTunes Store account (Apple ID) - Apple Support
    http://support.apple.com/en-us/HT201266
    I hope this information helps ....
    - Judy

  • Accounts getting disabled after enabling password expiration on BOXI R2 SP2

    Hi All,
    We have a strange issue with our production environment.After enabling password expiration on the enterprise some accounts got disabled,on further investigation I found that these users were either trying to log on to Designer or 2 tier Deski.
    I made them login through the Infoview to fix the issue.These users were Universe deginer or report writers.
    Any Suggestions

    Hi Tim,
    These accounts are Enterprise accounts,according to the users they were not given a chance and they never got any prompt for the password change it was disabled directly at the first login.
    These people were trying to logon using the Desginer or 2 Tier DESKI login and they are the members of the Administrtor Group also.
    Is it important to logon to infoview or 3 tier DESKI to change your password?
    I have no answer to give them why there accounts were disabled.
    Please suggest
    Thanks,
    Arun

  • After updating to ios8, i tried to log into my instagram on my iphone 5c and it says my account is disabled when i never disabled it

    ive tried to delete the instagram app multiple times and it still wont let me log in. also, i have had my friends log into my account, and they are able to log into my account. i have heard of other people that are also having the same problem.

    Hi Wendy
    I to had the same problem when my account was disabled after my fiancé used my phone.
    As I was being advised to contact apple support, being new to even itunes on my own account i checked in with them, and every thing I was being advised to do still disabled.
    I was obsessing over this and was trawlling through guides etc just incase I had missed something.
    As it turns out I had but no one had suggested it!
    The morning I was going to go and let my frustration out on a member of the apple store I had one last look. Went into the account settings and realised my name was right address right account details were not. I changed these and now my app store has become my obsession. I could finally feel the same way about my iPhone as my friends did and still do about theirs.
    Sorry it was long winded but I truely was getting annoyed and out played by my iPhone.
    I do hope this helps you and your daughter.

  • Why does my app store keep telling my account been disabled and wont has allow me to update my apps

    what do u do if your account wont allow you to update even after you've reset your password and everthing else

    Well it just keep telling me my accounts been disable every since I had fraudulent charges made 2 my account by my ex wife... But since then I've changed my password and account card number but still getting these same pop ups every time I try 2 update my apps... And yes I'm sure it was made from my account... I see a lot of ppl having this problem

  • Accounts updated after PGI and release to accounting

    Hi All,
    Could you pls tell me,
    1.Which documents documents are updated after billing(release to accounting?
    2.After PGI what documents will be updated and which accounts?
    Hope this is clear
    regards,
    James

    Hi,
    The following updations take place on PGI:
    1. Warehouse stock of the material is reduced by the delivery quantity
    2. Value changes are posted to the balance sheet account in inventory accounting
    3. Requirements are reduced by the delivery quantity
    4. The serial number status is updated
    5. Goods issue posting is automatically recorded in the document flow
    6. Stock determination is executed for the vendor's consignment stock
    7. A worklist for the proof of delivery is generated
    8. A worklist for the proof of delivery is generated
    After goods issue is posted for an outbound delivery, the scope for changing the delivery document becomes very limited. This prevents there being any discrepancies between the goods issue document and the outbound delivery.
    Cheerzz..
    Subbz..

  • Help disabling expired user accounts in AD

    I'm looking for a bit of help here... I'm trying to create a vb script that looks for all user accounts that has expired before today and disables them. After a
    LOT of scrounging the interwebs I've been able to scraped together the bellow VB script that lists all the expired user accounts that are still active, so now i'm trying to have it take the found
    accounts and disable them
    Option Explicit
    Dim dtmAdjusted, lngSeconds, str64Bit
    Dim objShell, lngBiasKey, lngBias, k
    Dim objRootDSE, strDNSDomain, objConnection, objRecordset, objUser
    Dim strBase, strFilter, strAttributes, strQuery, strDN, strAttributes1, strAttributes2, strAttributes3
    ' Obtain local Time Zone bias from machine registry.
    Set objShell = CreateObject("Wscript.Shell")
    lngBiasKey = objShell.RegRead("HKLM\System\CurrentControlSet\Control\" _
    & "TimeZoneInformation\ActiveTimeBias")
    If UCase(TypeName(lngBiasKey)) = "LONG" Then
    lngBias = lngBiasKey
    ElseIf UCase(TypeName(lngBiasKey)) = "VARIANT()" Then
    lngBias = 0
    For k = 0 To UBound(lngBiasKey)
    lngBias = lngBias + (lngBiasKey(k) * 256^k)
    Next
    End If
    ' Convert current date/time value to UTC.
    dtmAdjusted = DateAdd("n", lngBias, Now)
    ' Find number of seconds since 1/1/1601.
    lngSeconds = DateDiff("s", #1/1/1601#, dtmAdjusted)
    ' Convert the number of seconds to a string
    ' and convert to 100-nanosecond intervals.
    str64Bit = CStr(lngSeconds) & "0000000"
    ' Determine DNS domain name.
    Set objRootDSE = GetObject("LDAP://RootDSE")
    strDNSDomain = objRootDSE.Get("defaultNamingContext")
    ' Use ADO to search Active Directory.
    Set objConnection = CreateObject("ADODB.Connection")
    objConnection.Provider = "ADsDSOObject"
    objConnection.Open "Active Directory Provider"
    Set objRecordset = CreateObject("ADODB.Recordset")
    objRecordset.ActiveConnection = objConnection
    ' Search entire domain.
    strBase = "<LDAP://dc=globalgiving,dc=local>"
    ' Filter on expired user accounts.
    strFilter = "(&(objectCategory=person)(objectClass=user)" _
    & "(accountExpires<=" & str64Bit & ")(!accountExpires=0)(!userAccountControl:1.2.840.113556.1.4.803:=2))"
    ' Retrieve Distinguished Names.
    strAttributes = "sAMAccountName"
    ' Use ADO to query AD.
    strQuery = strBase & ";" & strFilter & ";" & strAttributes & ";subtree"
    objRecordset.Source = strQuery
    objRecordset.Open
    ' Enumerate expired user accounts.
    Do Until objRecordSet.EOF
    strDN = objRecordSet.Fields("sAMAccountName")
    Wscript.Echo strDN
    objRecordSet.MoveNext
    Loop
    ' Clean up.
    objRecordset.Close
    objConnection.Close
    Set objRootDSE = Nothing
    Set objConnection = Nothing
    Set objRecordSet = Nothing
    I tried adding: 
    strDN.AccountDisabled = True
    strDN.SetInfo
    but I get :
    (66, 1) Microsoft VBScript runtime error: Object required: 'jtest'
    jtest is one of the test accounts I have on my AD.
    Any suggestions or pointers anyone can give me? I found a 4 line power script that dose exactly what i want, but power script isn't an option for me :(

    Start with this:
    'change this
    ' Retrieve aDS path to user object
    strAttributes = "aDSPath,sAMAccountName"
    ' Enumerate expired user accounts.
    Do Until objRecordSet.EOF
    Set account = GetObject(objRecordSet.Fields("aDSPath"))
    Wscript.Echo account.SamAccountName
    account.AccountDisabled = True
    account.SetInfo
    objRecordSet.MoveNext
    Loop
    ¯\_(ツ)_/¯

  • HT201363 After i wrote the wrong password for a few times my icloud account got disabled even after reseting my password.help

    After i wrote the wrong password for a few times my icloud account got disabled even after reseting my password.help

    Hi and Welcome to the Community!
    Failure of the BBID credentials will never wipe a BB. What actually happened was you incorrectly entered your user-created device-lock password too many times, and it then proceeded with wiping the device, as per the requirements of the security level accepted when enabling that feature. There is no way to stop it.
    Sorry.
    Occam's Razor nearly always applies when troubleshooting technology issues!
    If anyone has been helpful to you, please show your appreciation by clicking the button inside of their post. Please click here and read, along with the threads to which it links, for helpful information to guide you as you proceed. I always recommend that you treat your BlackBerry like any other computing device, including using a regular backup schedule...click here for an article with instructions.
    Join our BBM Channels
    BSCF General Channel
    PIN: C0001B7B4   Display/Scan Bar Code
    Knowledge Base Updates
    PIN: C0005A9AA   Display/Scan Bar Code

  • HT203433 I downloaded apps with one appleid on my iphone.  When my account was disabled I set up a new appleid & account.  Now I cannot update apps on my iphone that were downloaded with original appleid when I login with my new apple id.  What do I need

    I downloaded apps with one appleid on my iphone.  When my account was disabled I set up a new appleid & account.  Now I cannot update apps on my iphone that were downloaded with original appleid when I login with my new apple id.  What do I need to do?

    You can write into support and ask for help reenabling the account through this link here:
    http://www.apple.com/support/itunes/contact/
    Since the applications were purchased on the older account, you will need to log into that account to update them. The newer account will not recognize the purchases because they are not a part of the purchase history for the specific account.

  • Conditionally disabling record updation after query

    Dear members
    I've a single record block and I wanna conditionaly disable records updation after query has fetched data. Problem is that if I disable the record updation in Post-Query trigger then it checks the condition for the very first fetched record and it the condition is true, then Updation is disabled for all the fetched records, even if the next records dont meet the condition. I'm using forms-10g. Can u give a better solution??? thanx.

    you have to use SET_ITEM_INSTANCE_PROPERTY to modify only one record:
    BEGIN
        IF ... <your_condition> THEN
            SET_ITEM_INSTANCE_PROPERTY('YOUR_BLOCK.YOUR_ITEM1', UPDATE_ALLOWED, PROPERTY_FALSE);
        ELSE
            SET_ITEM_INSTANCE_PROPERTY('YOUR_BLOCK.YOUR_ITEM1', UPDATE_ALLOWED, PROPERTY_TRUE);
        END IF;
    END;

  • How can I have my iTunes account back after apple has disabled it?

    My Itunes Account has been disabled for not paying . after that I payed and they took the moeny owed.
    but still my account disable.
    How can I have my iTunes account back after apple has disabled it?

    contact iTunes support team

  • HT1918 my account in app store has expired how can i update my account ??

    my account in app store has expired how can i update my account ??

    Changing Account Information
    http://support.apple.com/kb/HT1918

  • I paid for the single aftects cc app and I used the same  account with the expired free trial . so after paying for after effects, i try downloading it but it brings up a screen saying that i need to purchase after effects to continue

    i paid for the single after effects cc app and I used the same  account with the expired free trial . so after paying for after effects, i try downloading it but it brings up a screen saying that i need to purchase after effects to continu

    Activation Stuff
    Mylenium

  • Will not let me update apps or add any and says account is disabled

    I had to change id due to my old account kept coming up disabled and now it keeps switching between accounts and it wont let me update any apps or add any. I previously had more apps but deleted them due to not enough storage for an ios update and now cant update or add any apps

    Creating a new account because the old one was disabled was the wrong thing to do. It means that all content purchased with the old account can never be updated, because content is tied forever to the account that was used to purchase or download it. The correct solution was to find out why the old account was disabled and correct the problem.

  • Why have I lost my iTunes money after updating my account?

    I have lost my iTunes money after updating my account. Why has this happened? And how can I get the money back?

    We are fellow users, we won't know why/where it's gone.
    You've checked the purchase history on your account : http://support.apple.com/kb/HT2727 e.g. you didn't have any pre-orders and/or auto-renewing subscriptions that were due ? If not then you've tried logging out and back into your account on your phone (or computer's iTunes if using that) ? If you can't find where it went then try contacting iTunes Support and see if they can help with what happened to it : http://www.apple.com/support/itunes/contact/

Maybe you are looking for