Some Adaxes features calculate how long a user or computer account has been inactive. For example:
- The If is inactive <period> condition in business rules, scheduled tasks, and custom commands
- The adm-InactivityDuration calculated property
- The built-in Inactive users and Inactive users allowed to log in reports
Adaxes always uses the same calculation method. The inactivity duration of an account is measured since the most recent of the following events.
- Account creation
- Last sign-in
- Last password change or reset
The dates of these events are pulled from specific properties, depending on whether the account is on-premises or in the cloud.
|
Account creation |
Last sign-in |
Last password change |
| Active Directory |
whenCreated |
lastLogon
lastLogonTimestamp |
pwdLastSet |
| Entra ID |
createdDateTime |
lastSignInDateTime
lastNonInteractiveSignInDateTime |
lastPasswordChangeDateTime |
For synchronized accounts in a hybrid environment, Adaxes checks for these events in both the on-premises and cloud accounts, and picks whichever date is the most recent.