Syncing last logon attribute between two domains.

Hello Everyone,

Is it possible using Migration Manager to sync the last login attribute from two domains?

We have strict auditing on our domains for users and reports are created for accounts that have not login for 30 days. Right now the reports are confusing since we run them on two different domains with the account names are the same since we're still in the process of user and computer migrations.

The other complexity on top of this, the user accounts in the old domain is not disabled when the account is moved over, because the Office365 tenant is still pointing to the old domain.

Thank you,

Martin

0 Jeff Shahan over 4 years ago

I don't think that this is actually something that can be done, regardless of the tool set. This is a system owned attribute, so it would take a large dev effort to get around the system only write ability to make it happen. So I would have an exception created for this during the migration.
Cancel
Up 0 Down
Reply
Verify Answer
Reject Answer
0 martin alvarez over 4 years ago

Thank you Jeff for the feedback. I didn't think so, but just wonder if anybody as ever had a similar request.
Cancel
Up 0 Down
Reply
Verify Answer
- 0 Jeff Shahan over 4 years ago in reply to martin alvarez
  
  I've been here a long time and I have never heard of a request for this. I have heard request for other attributes to be handled differently (useraccountcontrol for example) and for that we have a few custom add-ins. The problem here is the system write only nature of the attribute.
  Cancel
  Up 0 Down
  Reply
  Verify Answer
- 0 JohnnyQuest over 4 years ago in reply to martin alvarez
  
  If it was a case where they wanted to sort of track the lastlogontimestamp of the source objects, you could in theory copy it from the source into an available unused attribute in the target (like one of the extension attributes). But like Jeff said, I have never had anyone ask for this either.
  Cancel
  Up 0 Down
  Reply
  Verify Answer