How to find out who created an account in Active Directory

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Thanks in advance for any help. I would like to be able to find out which
user created a user account in Active Directory. Thanks again.

Chris
 
Turn on auditing for Account Management at the domain level using a group
policy.
 
It is tough to do after the fact if you don't have auditing enabled. Your one
chance is by looking at the ACL for any telltale ACES and look at the owner
listed on the SD. If the user had admin rights in the domain this won't work
because it will say administrators.
 
Back
Top