title: Tracking a user change in active directory
body: <p>I'm writing an application that needs to know if anything on the users active directory object (eg group membership) has altered since the last time the app was ran.</p>
  
  <p>I was looking at the whenChanged attribute but that appears only to change if the user changes their password. I just need something i can hold in my config file, and check that value in active directory the next time the app is ran.</p>
  
  <p>Anyone know of anything i can reliably use?</p>
  
  <p>Cheers
  Luke </p>