Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 644
  • Last Modified:

AD Builtin and user containers

in AD there are 2 containers Builtin and Users containers,they  can hold security users and groups as well as other objects Distribution groups,contacts,etc.....

What I need to know is how can we tell between the accounts that have been created by default by the system, and the accounts that have been created by AD administrator?
it would have been better if Microsoft has created those containers without allowing anyone to add or remove accounts to or from those containers [builtin and Users]


thanks
0
jskfan
Asked:
jskfan
  • 4
  • 3
  • 3
  • +1
7 Solutions
 
KCTSCommented:
The containers provide a convenient place to but objects for simple set-ups and for beginners. but as GPOs cannot be applied to containers they are of limited value in the longer term.

The following are the only things created by default

http://ss64.com/nt/syntax-security_groups.html
0
 
jskfanAuthor Commented:
is there an easy way to tell which one is builtin account and which is not?
0
NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

 
KCTSCommented:
No - Sorry
0
 
FarWestCommented:
you can try in attribute tab of object properity, if it has isCriticalSystemObject if it is set to true, then it is a system created account
0
 
jskfanAuthor Commented:
<<<you can try in attribute tab of object properity, if it has isCriticalSystemObject if it is set to true, then it is a system created account >>>

where do you see Attribute Tab in user object in AD ?
0
 
Swapnil PrajapatiSr. System AdministratorCommented:
You can use ADSIEdit to see Attributes
0
 
jskfanAuthor Commented:
you might be talking about AD2008?
0
 
Swapnil PrajapatiSr. System AdministratorCommented:
Open ADSI Edit, Connect to your Domain controller and then you can goto the OU and select object properties and you will be able to see all Attributes.  
0
 
Swapnil PrajapatiSr. System AdministratorCommented:
If you are using Windows 2003 Server, you need to install support tools.
http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=15326
0
 
FarWestCommented:
on comouter and user managwment select advanced mode  I think in view menu
0
 
jskfanAuthor Commented:
I can see it through ADSIEDIT----Thank you guys!
0
 
FarWestCommented:
jskfan,
I'm wondoring of something, your question was "I need to know is how can we tell between the accounts that have been created by default by the system, and the accounts that have been created by AD administrator?"

and I told you what properity you should look at, then you made the accepted solution for the answers that tell you how to view object properties !!!
 
0

Featured Post

Ask an Anonymous Question!

Don't feel intimidated by what you don't know. Ask your question anonymously. It's easy! Learn more and upgrade.

  • 4
  • 3
  • 3
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now