Solved

Query AD user objects to report the samaccountname that was initially used to create user objects

Posted on 2013-11-14
4
371 Views
Last Modified: 2013-12-20
I would like to know if there is a query (preferably csvde command line) to report the samaccountname that was initially used to create user objects. Thank you
0
Comment
Question by:h2zero
  • 2
4 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 39649025
Unfortunately  there is no attribute for whocreated  if you have old security logs and have auditing turned on you could look through those.

THanks

Mike
0
 
LVL 16

Expert Comment

by:gurutc
ID: 39649085
You can find out if you're lucky.  If you do backups of your DC and include the Security Log you can restore that log from backup for the day the user object was created.  If your logs don't roll over too quickly you may be able to find the userid object creation event.

This is the only way you'd be able to find this info out at this point

And it wouldn't be a report, it'd be one at a time.

Good Luck,
- gurutc
0
 

Author Comment

by:h2zero
ID: 39649100
What if I have a report of specific user object's samaccountname is there an ADSI query or edit that can be run against those samaccountnames to determine which samaccountname was initially used to create? Thank you
0
 
LVL 16

Expert Comment

by:gurutc
ID: 39649164
There isn't an ADSI query that will do what you need.  There's no attribute in AD for 'userid object creator.'  The only place that ever records the creation of a userid object is the Security Log, which rolls over too quickly to help most of the time.

Sorry to tell you that.

- gurutc
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Installing a printer using group policy preferences is not that hard let’s take a look at it. First lets open up your group policy console and edit the policy you want to add it to. I recommend creating a new policy for each printer makes it a l…
Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

929 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now