topic Re: Find user creation date in Windows Server 2003

Find user creation date

cool... — Thu, 12 May 2011 09:22:45 GMT

Hi,

Is there any wat to find when the user has been created on windows server?

Re: Find user creation date

klb — Sun, 15 May 2011 07:20:43 GMT

Maybe you could look at the create date on the various folders and files that are created as a result of a new user being added to the system?

If you want to know which files, get a list of all the files on the system into a file, add a user, then get another list and compare it to the first. You could load CYGWIN and use diff to compare the files.

Hth,

-klb

Re: Find user creation date

cool... — Wed, 18 May 2011 03:27:05 GMT

I did the same. But is there any other way to find that out.

Re: Find user creation date

Edgar Zapata — Wed, 18 May 2011 07:36:02 GMT

Hello,

If it's a local account, check the security log (eventvwr) for Event ID 624.
You may need to have account management audit enabled.
You can check/enable this setting through secpol.msc - local policies - audit policy.

If it's a domain account, then check the account's object tab.

Hope it helps.