AD Builtin and user containers

in AD there are 2 containers Builtin and Users containers,they  can hold security users and groups as well as other objects Distribution groups,contacts,etc.....

What I need to know is how can we tell between the accounts that have been created by default by the system, and the accounts that have been created by AD administrator?
it would have been better if Microsoft has created those containers without allowing anyone to add or remove accounts to or from those containers [builtin and Users]


thanks
jskfanAsked:
Who is Participating?
 
Swapnil PrajapatiConnect With a Mentor Sr. System AdministratorCommented:
You can use ADSIEdit to see Attributes
0
 
Brian PierceConnect With a Mentor PhotographerCommented:
The containers provide a convenient place to but objects for simple set-ups and for beginners. but as GPOs cannot be applied to containers they are of limited value in the longer term.

The following are the only things created by default

http://ss64.com/nt/syntax-security_groups.html
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
jskfanAuthor Commented:
is there an easy way to tell which one is builtin account and which is not?
0
 
Brian PierceConnect With a Mentor PhotographerCommented:
No - Sorry
0
 
FarWestConnect With a Mentor Commented:
you can try in attribute tab of object properity, if it has isCriticalSystemObject if it is set to true, then it is a system created account
0
 
jskfanAuthor Commented:
<<<you can try in attribute tab of object properity, if it has isCriticalSystemObject if it is set to true, then it is a system created account >>>

where do you see Attribute Tab in user object in AD ?
0
 
jskfanAuthor Commented:
you might be talking about AD2008?
0
 
Swapnil PrajapatiConnect With a Mentor Sr. System AdministratorCommented:
Open ADSI Edit, Connect to your Domain controller and then you can goto the OU and select object properties and you will be able to see all Attributes.  
0
 
Swapnil PrajapatiConnect With a Mentor Sr. System AdministratorCommented:
If you are using Windows 2003 Server, you need to install support tools.
http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=15326
0
 
FarWestCommented:
on comouter and user managwment select advanced mode  I think in view menu
0
 
jskfanAuthor Commented:
I can see it through ADSIEDIT----Thank you guys!
0
 
FarWestCommented:
jskfan,
I'm wondoring of something, your question was "I need to know is how can we tell between the accounts that have been created by default by the system, and the accounts that have been created by AD administrator?"

and I told you what properity you should look at, then you made the accepted solution for the answers that tell you how to view object properties !!!
 
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.