Pwdlastset attribute not updating
A value of zero means that the last logon time is unknown.To get an accurate value for the user's last logon in the domain, each domain controller in the domain must be queried and the largest value should be used.The bad Password Time attribute specifies the last time the user attempted to log on to the account using an incorrect password.This attribute is maintained separately on each domain controller in the domain.A value of zero means that the last logoff time is unknown.To get an accurate value for the user's last logoff in the domain, each domain controller in the domain must be queried and the largest value should be used. The last Logon attribute specifies when the last logon occurred.The nt Pwd History attribute is the password history of the user in Windows NT one-way format (OWF). This attribute is used only by the operating system.Be aware that you cannot derive the plaintext password back from the OWF form of the password.
This attribute is not stored—it is a computed back-link attribute.
The alt Security Identities attribute is a multi-valued attribute that contains mappings for X.509 certificates or external Kerberos user accounts to this user for the purpose of authentication.
Various security packages, including Public Key authentication package and Kerberos, use this data to authenticate users when they present the alternative form of identification such as certificate, UNIX Kerberos ticket, and so on.
The lm Pwd History attribute is the password history of the user in LAN Manager (LM) one-way format (OWF).
The LM OWF is used for compatibility with LAN Manager 2.x clients, Windows 95, and Windows 98.