I have checked SNOW last logon information of users, and compared this with the actual AD data (Last logon en last logontimetamp).
I found some curious situations:
Comparing the Snow last discovered data of users with the actual AD last logon informations shows that the Snow last logon date seems to very between AD last logon date + 7 days and AD last logon date minus 3 days. (by quick vusual inspection.)
Any thougths on the cause of this?
Are user logons from BYOD devices also used to determine the last logon dat (obviously in our environment they can use their own devices to access our Citrix environment where they can run software!)