Environment
Directory and Resource Administrator 8.x
Situation
Why is there a one day difference between the account expiration date displayed in the DRA consoles and the account expiration date displayed in Active Directory Users and Computers (ADU&C)?
DRA has the ability to display an AD User's account expiration date and time. DRA will read this data from Active Directory during an Accounts Cache Refresh.
Resolution
- The DRA version 8.x consoles display last login and account expiration dates based on the local time zone of the user and save times based on GMT.
- The account expiration field displays the date AND the time the account expires.
If you are using ADU&C to view an account expiration date, note the following:
- When you select a user in ADU&C and click on the Account tab, you can specify an account expiration date in the Account expires area, but not an account expiration time. When you specify an account expiration date, by default ADU&C expires the account at 11:59 PM on the specified date.
- ADU&C does not correct for Daylight Savings Time. If Daylight Savings Time is in effect, and if you use ADU&C to specify that an account should expire on November 1st, ADU&C will actually expire the account at 12:59 am on November 2nd. For most user account management scenarios, this 60 minute difference is not significant.
Additional Information
Formerly known as NETIQKB48918