by "Greg" <greg@[EMAIL PROTECTED]
>
Jul 2, 2008 at 06:28 PM
Thanks for your answer, yes I was thinking about it, but unfortunately all
the disabled accounts have been moved to a dead objects OU recently so
obviously this value has been updated....
any other ideas?
thanks again
"Richard Mueller [MVP]" <rlmueller-nospam@[EMAIL PROTECTED]
> wrote in
message news:%23XGmuaG3IHA.784@[EMAIL PROTECTED]
> Greg wrote:
>
>> need to put together a script than re****ts when an account was
disabled,
>> used ldap browser but I can't find any attributes where this could be
>> stored....
>>
>> any clues ?
>
> The modifyTimeStamp attribute would be the date/time when the object was
> last changed. If nothing has changed since the account was disabled,
this
> should be when the account was disabled. The format is GeneralizedTime
and
> the value is replicated. However it is operational (also known as
> constructed).
>
> --
> Richard Mueller
> MVP Directory Services
> Hilltop Lab - http://www.rlmueller.net
> --
>
>