Overview#

WhenChanged is an attribute in Microsoft Active Directory and is the date when this object was last changed.WhenChanged value is not replicated and exists in the Global Catalog.modifyTimestamp is marked as Constructed Attribute (effectively an alias for whenChanged) [1]

WhenChanged is marked "NOT REPLICATED(1)" which will require the application to query all DCs in the Domain for most recent value when comparing the attribute and security stamp.!! LDAP Microsoft Active Directory Attribute Definition The WhenChanged AttributeTypes is defined as:

• CN: When-Changed
• OID of 1.2.840.113556.1.2.3
• NAME: WhenChanged
• DESC:
• EQUALITY:
• ORDERING:
• SYNTAX: 1.3.6.1.4.1.1466.115.121.1.24 GeneralizedTime
• LOWERBOUND:
• UPPERBOUND:
• OMSyntax:
• SchemaIDGUID: bf967a77-0de6-11d0-a285-00aa003049e2
• mapiID: 0x3008
• SINGLE-VALUE
• NO-USER-MODIFICATION
• USAGE: UserApplications
• Extended Flags:
  • X-ORIGIN: Microsoft Active Directory
• X-SYSTEMFLAGS
  • FLAG_ATTR_NOT_REPLICATED
  • FLAG_ATTR_REQ_PARTIAL_SET_MEMBER
  • FLAG_SCHEMA_BASE_OBJECT
• X-SCHEMAFLAGSEx
• X-SEARCH-FLAGS
• Used as MUST in:
  • (none)
• Used as MAY in:

More Information#

There might be more information for this subject on one of the following:

• 1.2.840.113556.1.2.3
• Microsoft TIME
• ModifyTimestamp
• WhenChanged

---

• [#1] - whenChanged and modifyTimeStamp - based on information obtained 2016-06-01-