Ticket #48232 - winsync lastlogon attribute not syncing between DS and AD.
From Microsoft forum:
The DirSync control taps into the replication stream to get the necessary
changes. Since lastLogon is not replicated, it isn't available via the
The lastLogon attribute is not replicated.
In contrast the lastLogontimeStamp attribute is replicated.
Instead of lastLogon|lastLogoff, sync lastLogonTimestamp|lastLogoffTimestamp
which are the target of DirSync, to ntUserLastLogon|ntUserLastLogoff.
Reviewed by firstname.lastname@example.org (Thank you, Rich!!)
(cherry picked from commit 0db29788e6c1b17f944fcafa368b66580e1e90d5)
(cherry picked from commit b81adb0bc8ad97fec50fba30454e94858476bad5)