...
[14:01:09 CDT(-0500)] <dmccallum541> dont think we can know that. also might be the case that this user never authenticated prior to be modified.
[14:02:10 CDT(-0500)] <dmccallum541> js70 might have more details. i know he's stepped away for a bit tho
[14:02:47 CDT(-0500)] <dmccallum541> …and could possibly test with our dummy AD user