Convert lastLogonTimestamp to readable format

The lastLogonTimestamp is encoded in Active Directory as a base64 value.



To convert the lastLogonTimestamp attribute to a readable format use the w32tm tool:

w32tm /ntte lastlogontimestamp_value

For Example:

w32tm /ntte 129154168571093750