Question : lastLogonTimestamp not available

[advissor]

Hi, I was trying to test locally scenario of disabling users that hasn't logged on for a while via AD based on lastLogonTimestamp

Though, after login via LDAP (ldapsearch and python client), I can see that in list of attributes

I guess this is the AD setting

Any quick fix to enable this or code change that can be done?

P.S: I've seen on the web that this timestamp can lag and is not always the most reliable. But, as there are not many other alternatives to do this via LDAP, still want to try this approach. Poweshell on server is not an option at the moment

Thanks!