use lastlogon for server 2003 compatibility