You can get createDate by looking at the attribute whenCreated. Logon times is
difficult because 2K AD only tracks the last logon time and only on the DC that
the logon occurred (i.e. the info isn't replicated) so you would have to query
every DC to find the actual last logon time. In K3 there is a new attribute
called logonTimeStamp that by default is accurate to something like 10 days
(this can be configured but it increases replication is you turn it lower).
joe