Last post Apr 17, 2009 06:49 PM by johram
Mar 17, 2009 08:33 AM|melli|LINK
Hope this is right place to ask following as I try to understand AD a bit more:
How is it that the "ModifyTimeStamp" attribute does not update when the group membership i.e "memberOf" of a user is modified e.g. move user into a group, on the AD? Would (possibly incorrectly) expect such change on the user object to trigger the "ModifyTimeStamp"
attribute to update. Or is there additional configuration to achieve this?
Appreciate any help,
Mar 19, 2009 05:53 AM|jagjot|LINK
if you change password it will definately change.
check this link
Mar 19, 2009 07:22 AM|melli|LINK
Thanks.Yes, changes to password as well as other attributes on the user object, i noticed do trigger a change on 'modifyTimeStamp' attrib of the user object; This is however about the "memberOf" attribute on the user object. That is, on the user object,
make user a member of an group. Why does it not behave same as with password change.
Apr 17, 2009 06:49 PM|johram|LINK
According to this post http://blog.joeware.net/2006/10/03/655/ modifyTimeStamp is *not* replicated among DCs, which is why you might experience different values depending on which DC you look at.
Try to bind to a specific DC, modify memberOf and then verify if modifyTimeStamp has not changed on that specific DC. Be careful so that all your operations are carried out on the same DC. Good luck!