Hey,


I'm wondering if SSSD might not be updating some of the logon attributes in AD.  We recently were directed to use updated DCs and some attributes no longer seem to be getting updated; for example, logonCount and lastLogon.  In some cases, the attribute is non-existant.  I'm leaning towards it being a DC issue since it was gettting updated with the previous controllers but wanted to see if anyone was aware of any reason SSSD could be at issue.


thanks


=G=