All tools
AD / LDAP Timestamp
Convert Windows FILETIME (pwdLastSet, lastLogon, accountExpires) to real time.
Why this exists
AD stores times as FILETIME, an 18-digit count of 100-nanosecond intervals since 1601. The normal Timestamp tool doesn't speak it, and the 'never' sentinel values trip everyone up.
How to use
- Paste a FILETIME integer (e.g. 133900000000000000), or a date to go the other way.
- Output: UTC, your local zone, and relative time.
- Sentinels (0 and 9223372036854775807) are recognised as 'never'.
Worked examples
Attributes stored as FILETIME
pwdLastSetlastLogonlastLogonTimestampaccountExpiresbadPasswordTimelockoutTimelastLogoff
These all count 100-nanosecond intervals since 1601-01-01 UTC. Both 0 and 9223372036854775807mean “never”.