Solved

Determine when an account was created?

Posted on 2007-03-19
5
244 Views
Last Modified: 2010-04-18
On a non-AD Win2003 box, how could you determine when a particular account was created?
0
Comment
Question by:BendOverIGotYourBack
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 22

Accepted Solution

by:
mcsween earned 125 total points
ID: 18749926
You would have to have security auditing on.  The one you are looking for is:
"Audit account management"

Make sure you edit the security log itself and make sure it's large enough that it won't start overwriting your events before you can look at them.
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 18749957
You could also check the date stamp on the profile folder under C:\Documents and Settings
0
 
LVL 22

Expert Comment

by:mcsween
ID: 18749979
I thought of that myself but after looking at the time/date stamp on my workstation it's dated 3/15/07 and it's been a couple months since I built this computer.  Unfortunatly it seems that will not work.
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 18749997
Try
Dir c:\docume~1 /tc /ad

Admittedly, it does assume that the user logged in the same day the account was created.  But in the event that the logs have already been overwritten...
0

Featured Post

Revamp Your Training Process

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question