# Behavioral Changes

There are certain expected behaviors on the Duo source after you aggregate the accounts.

- On the Duo source system, the last login details for some of the users are displayed as `Never authenticated`, if those users are not enrolled. In this case, during aggregation, the `last_login` on the Duo source is displayed as blank for that account.
- Provisioning on AD\_SYNC user(s) on Duo system fails with an error message, because the `Directory Sync` users cannot be modified.
- The following table indicates the status of users and administrators from the Duo managed system on the Duo source:

| Type | Status |
| --- | --- |
| **Duo User** |  |
| Status on Duo Managed System | Status on the Duo Source |
| Active | Enabled |
| Bypass | Enabled |
| Disabled | Disabled |
| Locked Out | Locked |
| **Duo Administrator** |  |
| Status on Duo Managed System | Status on the Duo Source |
| Active | Enabled |
| Disabled | Disabled |