CAPTURING LOGON INFORMATION FROM ACTIVE DIRECTORY USING ASP.NET WEB APPLICATION AUTHENTICATION

Try to get the value of "lastLogonTimestamp" attribute instead of "lastLogon".

How to configure last interactive logon

You configure last interactive logon through a GPO. You must configure the following setting for the GPO with domain controllers in its scope of management if you want to report last interactive logon information to the directory service:

Computer Configuration| Policies | Administrative Templates | Windows Components | Windows Logon Options | Display information about previous logons during user logon = Enabled

http://technet.microsoft.com/en-us/library/dd446680(WS.10).aspx

Hope this helps you.

Hi Murali,


Thanks for your response...


How can we enable the "InteractiveLogin" option in Active Directory?


The problem with "LastLogonTimestamp" attribute is it is getting updated only once in 14 days. But we want it to get updated with every login... Is that possible?

You have to check the property of Interactive Logon.
If it is enabled, then only you LastLogonTime will update otherwise it will not update.

The lastLogontimeStamp attribute is not updated with all logon types or at every logon. The good news is that the logon types that admins usually care about will update the attribute and often enough to accomplish its task of identifying inactive accounts.

Interactive and Network logons will update the lastLogontimeStamp. So if a user logs on interactively, browses a network share, access the email server, runs an LDAP query etc… the lastLogontimeStamp attribute will updated if the right condition is met. (The conditions are discussed below in the section Update and Replication of lastLogontimeStamp.

http://blogs.technet.com/b/askds/archive/2009/04/15/the-lastlogontimestamp-attribute-what-it-was-designed-for-and-how-it-works.aspx