How does Adaxes determine account inactivity?

Question

Some Adaxes features calculate how long a user or computer account has been inactive. For example:

• The If is inactive <period> condition in business rules, scheduled tasks, and custom commands
• The adm-InactivityDuration calculated property
• The built-in Inactive users and Inactive users allowed to log in reports

Adaxes always uses the same calculation method. The inactivity duration of an account is measured since the most recent of the following events.

• Account creation
• Last sign-in
• Last password change or reset

The dates of these events are pulled from specific properties, depending on whether the account is on-premises or in the cloud.

	Account creation	Last sign-in	Last password change
Active Directory	whenCreated	lastLogon lastLogonTimestamp	pwdLastSet
Entra ID	createdDateTime	lastSignInDateTime lastNonInteractiveSignInDateTime	lastPasswordChangeDateTime

For synchronized accounts in a hybrid environment, Adaxes checks for these events in both the on-premises and cloud accounts, and picks whichever date is the most recent.