2.2.6 LastLogonTimeStampUpdate Structure

The LastLogonTimeStampUpdate structure specifies an account and a timestamp.

The layout of the LastLogonTimeStampUpdate structure is shown in the following diagram.


0


1


2


3


4


5


6


7


8


9

1
0


1


2


3


4


5


6


7


8


9

2
0


1


2


3


4


5


6


7


8


9

3
0


1

AccountRid

Reserved

Timestamp

...

AccountRid (4 bytes): A 32-bit, unsigned integer that contains a relative identifier (RID) for a SID structure.

Reserved (4 bytes): A 32-bit, unsigned integer that MUST be set to zero.

Timestamp (8 bytes): A 64-bit signed integer containing the timestamp of the last logon time of the account specified by the AccountRid field.