I'm trying to replicate some active directory information between an AD server and a third party database of user profiles. The process runs overnight and while I can just get all information for all accounts and update the target database, ideally, I only want to update the accounts that *need* updating. So, I want to query each user account in turn and determine when that account was last updated in any way. Is that possible? Does AD record when an account was last changed?
Any suggestions welcome!