Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
The number of times the account has successfully logged on. A value of 0 indicates that the value is unknown.
Entry | Value |
---|---|
CN | Logon-Count |
Ldap-Display-Name | logonCount |
Size | 4 bytes |
Update Privilege | Domain administrator |
Update Frequency | Each time the user logs on. |
Attribute-Id | 1.2.840.113556.1.4.169 |
System-Id-Guid | bf9679aa-0de6-11d0-a285-00aa003049e2 |
Syntax | Enumeration |
Implementations
- Windows 2000 Server
- Windows Server 2003
- Windows Server 2003 R2
- Windows Server 2008
- Windows Server 2008 R2
- Windows Server 2012
Windows 2000 Server
Entry | Value |
---|---|
Link-Id | - |
MAPI-Id | - |
System-Only | False |
Is-Single-Valued | True |
Is Indexed | False |
In Global Catalog | False |
NT-Security-Descriptor | O:BAG:BAD:S: |
Range-Lower | - |
Range-Upper | - |
Search-Flags | 0x00000000 |
System-Flags | 0x00000011 |
Classes used in | User |
Windows Server 2003
Entry | Value |
---|---|
Link-Id | - |
MAPI-Id | - |
System-Only | False |
Is-Single-Valued | True |
Is Indexed | False |
In Global Catalog | False |
NT-Security-Descriptor | O:BAG:BAD:S: |
Range-Lower | - |
Range-Upper | - |
Search-Flags | 0x00000000 |
System-Flags | 0x00000011 |
Classes used in | User |
Windows Server 2003 R2
Entry | Value |
---|---|
Link-Id | - |
MAPI-Id | - |
System-Only | False |
Is-Single-Valued | True |
Is Indexed | False |
In Global Catalog | False |
NT-Security-Descriptor | O:BAG:BAD:S: |
Range-Lower | - |
Range-Upper | - |
Search-Flags | 0x00000000 |
System-Flags | 0x00000011 |
Classes used in | User |
Windows Server 2008
Entry | Value |
---|---|
Link-Id | - |
MAPI-Id | - |
System-Only | False |
Is-Single-Valued | True |
Is Indexed | False |
In Global Catalog | False |
NT-Security-Descriptor | O:BAG:BAD:S: |
Range-Lower | - |
Range-Upper | - |
Search-Flags | 0x00000000 |
System-Flags | 0x00000011 |
Classes used in | User |
Windows Server 2008 R2
Entry | Value |
---|---|
Link-Id | - |
MAPI-Id | - |
System-Only | False |
Is-Single-Valued | True |
Is Indexed | False |
In Global Catalog | False |
NT-Security-Descriptor | O:BAG:BAD:S: |
Range-Lower | - |
Range-Upper | - |
Search-Flags | 0x00000000 |
System-Flags | 0x00000011 |
Classes used in | User |
Windows Server 2012
Entry | Value |
---|---|
Link-Id | - |
MAPI-Id | - |
System-Only | False |
Is-Single-Valued | True |
Is Indexed | False |
In Global Catalog | False |
NT-Security-Descriptor | O:BAG:BAD:S: |
Range-Lower | - |
Range-Upper | - |
Search-Flags | 0x00000000 |
System-Flags | 0x00000011 |
Classes used in | User |
Remarks
This attribute is not replicated and is maintained on each ___domain controller in the ___domain. To get an accurate value for the user's total number of successful logon attempts in the ___domain, each ___domain controller in the ___domain must be queried and the sum of the values should be used. Keep in mind that the attribute is not replicated, therefore ___domain controllers that are retired may have counted logons for the user as well, and these will be missing from the count.
Important
Due to compatibility with 16-bit versions of LAN Manager, the attribute has an upper limit of 65535. After this limit has been reached, you cannot use it as an indicator of user activity on this ___domain controller.