I have a requirement to get all the users in active directory whose account has been modified in the last 24 hours. For that I've created a new attribute which will have last modified date of each user. My question is 2 parts-
1. Is this the best way, is there a standard way to find users whose any attribute has changed in trhe last 24 hours?
2. date comparison in ldap search fails for this custom attribute. Is there some requirement on attribute type for it to support date comparison?