AD Properties "missing" from Data Dump

- April 25, 2012

i haven't yet been able find helpful information searches, hope can point me in right direction here.

environment
windows server 2008 r2 standard 64-bit

exchange hosted externally, there's no interaction/link whatsoever there (separate ad structure altogether)

problem
active directory properties such passwordlastset (pwdlastset), lastlogon , whencreated showing blank when gathering data via ldifde or powershell data dump (however data appears in 'attribute editor' tab of ad users , computers gui).

as this, fields missing export altogether, such whencreated, whenchanged.

from can tell, entries being recognized same objectcategory , objectclass, , being created same way - manually, via ad users , computers gui. the users being created scratch, , not being copied or scripted in way.

we haven't had recent migration, or aware of changed. i've been creating accounts since got here, , can confirm done same way. there doesn't appear specific time range problem happened, either. we have accounts on year ago both ways, , similarly, several entries in past few months both well.

details of data dump
i same results if gather data in either of following ways:

ldif dump
ldifde -f output.ldf

powershell dump
get-aduser -filter * -properties passwordlastset,whencreated,emailaddress,givenname | out-file c:\output\output.txt

here's segment of powershell dump (with personal data changed general info) comparing 1 entry that's showing appropriate data, , 1 that's not; note missing lastlogon , whencreated fields. as aside, 'working' entry created after 1 isn't working several months.

working
distinguishedname : cn=first last,ou=office,dc=company,dc=corp
emailaddress : flast@domain.com
enabled : true
givenname : first
lastlogon : 129598787272477500
name : first last
|objectclass : user
objectguid : a7fad801-581b-4a14-9314-5e2e9a6b442c
passwordlastset : 6/20/2011 12:59:47 pm
samaccountname : flastname
sid : s-1-5-21-530415039-1372495928-3944771569-1814
surname : lastname
userprincipalname : flastname@company.corp
whencreated : 4/16/2011 6:30:00 pm

not working
distinguishedname : cn=first2 last2,ou=office,dc=company,dc=corp
emailaddress : flast2@domain.com
givenname : first2
name : first2 last2
objectclass : user
objectguid : c9912b1c-3661-4b68-8307-476db97b61f6
passwordlastset :
samaccountname : flast2
sid : s-1-5-21-530415039-1372495928-3944771569-1258
surname : last2
userprincipalname : flast2@company.corp

plea
please, can provide me shred of idea causing this? i've got on days, , out of ideas.

i ran command get-aduser -filter * -properties passwordlastset,whencreated,emailaddress,givenname and displays entire result. are running against particular dc? did verify value on dcs?

santhosh sivarajan | mcts, mcse (w2k3/w2k/nt4), mcsa (w2k3/w2k/msg), ccna, network+| houston, tx
blogs - http://blogs.sivarajan.com/