Ad Logs

Whenever an user account is created , I would like to know who created this user account? and when the user account is created? Is there any command or Vbscript to find this out?
jmohan0302Asked:
Who is Participating?
 
Mike KlineCommented:
You would have to enable auditing on the DCs then look for the event in the security logs.  See this question I helped with

http://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/Q_23785638.html

Are you using 2003 or 2008?

Thanks

Mike
0
 
jmohan0302Author Commented:
I am using 2008 Mike. Is there any ways if the auditing on security log is not enabled?
0
 
Mike KlineCommented:
if auditing is not enabled you can't tell the "who" but you can look at the whencreated date on the account itself.

In 2008 you can also forward events, nice writeup from santhosh   http://portal.sivarajan.com/2010/04/generate-email-alert-to-event-attach.html

Thanks

Mike
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
jmohan0302Author Commented:
Ok Mike. Is there any other tool we have to find this out
0
 
Mike KlineCommented:
are you looking for the whencreated dates on objects? (tool question)

Thanks

Mike
0
 
jmohan0302Author Commented:
Hi Mike,

I am looking for who created an account?
0
 
Mike KlineCommented:
you have to have auditing enabled then view the security logs.
0
 
jmohan0302Author Commented:
Good
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.