User ID audit

[bijoy k]

Hi All,

Can anyone tell me , how to find the date , when the User ID got created in a trusted systems..

Regards..

BK

[Patrick Wallek · Accepted solution]

You can't. That information is not kept anywhere.

[Dennis Handly]

You might be able to look for the oldest files in the user's home directory, possible a "." file:
ll -atr ~user-id

[Patrick Wallek]

>>You might be able to look for the oldest
>>files in the user's home directory, possible
>>a "." file:

That's may work as long as the files have not been modified. There is no guarantee that it would be 100% accurate though.

[bijoy k]

Hi Patrick ,

Yes , correct . We cannot ensure that fully. Can I keep this query open for some days to get any more ideas..


Regards..

Bijoy

[Avinash20]

There are some ITRC thread open for the same query
Please check if this helps you

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1111045

PS: Assign points.