Ticket #48232 - winsync lastlogon attribute not syncing between DS and AD.
From Microsoft forum:
The DirSync control taps into the replication stream to get the necessary
changes. Since lastLogon is not replicated, it isn't available via the
The lastLogon attribute is not replicated.
In contrast the lastLogontimeStamp attribute is replicated.
Instead of lastLogon|lastLogoff, sync lastLogonTimestamp|lastLogoffTimestamp
which are the target of DirSync, to ntUserLastLogon|ntUserLastLogoff.
Reviewed by email@example.com (Thank you, Rich!!)