![lansweeper last logon report lansweeper last logon report](https://logon-int.com/wp-content/uploads/2021/08/lansweeper-windows-11-01.png)
The problem is LastLogonDate replicates at an extraordinarily slow pace, this is because in Enterprises that make athena health look tiny you could have 10’s of thousands of people logging in (especially in the mornings) and AD replication would be gigantic. From there, Active Directory replicates the field and eventually all of your domain controllers will have the logon date. Unfortunately for us, this field is NOT directly updated when the client logs in–that’s still going to our friend lastLogon–instead there’s an internal process on the domain controller that takes lastLogon, converts it to a DateTime object and puts it into LastLogonDate. To solve this, Microsoft introduced the LastLogonDate (this is its PowerShell name, in Active Directory it’s the LastLogonTimeStamp) field in 2003. So if someone logs in in India, and you query your Active Directory Domain Controller here in Massachusetts you will NOT get the updated information. And just to make it a little bit more fun Active Directory does not replicate it.
![lansweeper last logon report lansweeper last logon report](https://27jts3o00yy49vo2y30wem91-wpengine.netdna-ssl.com/wp-content/uploads/2018/06/see-who-logged-into-lansweeper-or-made-changes-to-settings-1.jpg)
This field is stored as FileTime, which is the date and time as a 64-bit value in little- endian order representing the number of 100-nanosecond intervals elapsed since Janu(UTC).
![lansweeper last logon report lansweeper last logon report](https://content.spiceworksstatic.com/service.community/p/post_images/0000033676/53e0e397/attached_image/UserLock_Monitor_Logon.png)
What problem is that, you might ask? Well, it’s been documented a lot but the root of the problem is when a user logs into a domain account, their login time is recorded into the lastLogon field in Active Directory on the domain controller they authenticated against. Recently I had to write a report that got the last logon date for all of our users and I really ran into the LastLogonDate problem. Getting Last Logon Information With PowerShell