返回
-
标题
Is it possible to convert the 'defender lastlogon' attribute from Active Directory from the numeric string to date value? -
说明
When viewing the Defender token attributes via Properties (or query from Powershell); the time value is seen to be an 18 digit value similar to "131013544564114579". Is it possible to convert this to a human readable date? -
原因
The timestamp is using the 18 digit Active Directory timestamp format. -
解决办法
The 18 digit Active Directory timestamp value can be converted into human readable format using the following command (as one example of how to do this):w32tm.exe /ntte 131013544564114579(command output from the above example):151636 01:07:36.4114579 - 3/1/2016 10:07:36 PM -
其他信息
This Microsoft TechNet article may also be of assistance: https://blogs.technet.microsoft.com/ashleymcglone/2013/12/20/back-to-the-future-working-with-date-data-types-in-active-directory-powershell/