Hello guys, I'm using NET USER user_id on my domain to get some details like Last Logon etc. But for some users the Last logon value is NEVER. Why that? any specific reason? I understand that the attribute Last logon does not replicate among DCs?? But i got the last logon value on the DC where the user is authenticated. Do i have to check where the users are getting authenticated then run the command NET USER user_id on the specific DC??? Any solution?? Thanks.

In short yes, you need to check the DC that authenticated the user, and this can be hard to determine. I find a different value on each DC, or in some cases "Never". Richard Mueller - MVP Directory Services

Hello Richard, Thanks for your reply. Any specific reasons/issues why the attribute "Last logon" is not replicated among DCs? A quick reply will be appreciated. Regards...

Active Directory is not designed to save information that changes frequently. If a user attribute were updated every time the user logged on, then replication traffic would be greatly increased. That is also why the newer lastLogonTimeStamp attribute, which does replicate to all DC's, only updates if the old value is more than 14 days old. The logonCount attribute is another that is not replicated for the same reason. Richard Mueller - MVP Directory Services