I want to find out what specifically updates the lastlogontimestamp for computers. I have read the other articles that are referenced numerous times, but they do not have the exact answer to these questions (there are wonderful and have lots of information, but not the information I need). Which of these scenarios does the lastlogontimestamp get updated for a computer (given the 14 days minus a random percentage of 5 days has passed and that number is greater than the current lastlogontimestamp):
When a domain computer is restarted and stays connected to the network does this update the lastlogontimestamp?
From my testing I can confirm that the reboot update the lastlogon, but no idea about lastlogontimestamp
When a domain computer is logged onto with a domain account by logging on locally?
From my testing this did not update the lastlogon and I have no idea about lastlogontimestamp
When a domain computer is logged onto with a domain account by logging on remotely using Windows Remote Desktop Connection?
From my testing this did not update the lastlogon and I have no idea about lastlogontimestamp
When a domain computer is logged onto with a local account by logging on locally?
From my testing this did not update the lastlogon and I have no idea about lastlogontimestamp
Are there SPECIFIC events that would cause the lastlogontimestamp to be updated? I need to tell our administrators this information so they have an understanding on what Microsoft considers a stale account