11

As the question title says, I am trying to find out when a user account was created in Active Directory. The operating system is Windows Server 2003.

14

In AD Users and Computers, inspecting the Object tab of the user account, there is a Created field.

You would need to select View menu > Advanced to be able to see the Object tab.

1
  • 4
    +1 And for those that don't like clicking: dsquery * -filter "(SamAccountName=jscott)" -attr Name whenCreated – jscott Jul 24 '12 at 13:13
6

As seen on Technet blogs:

Set objUser = GetObject("LDAP://cn=ken myer, ou=Finance, dc=fabrikam, dc=com")
Wscript.Echo objUser.WhenCreated

Got PowerShell?

Get-ADUser -Identity garys -Properties whenCreated
1

you will be get details please check below.

For User account deletion:

· On Windows 2003, we should get Event ID: 630 · On Windows 2008, we should get Event ID: 4726

For User account creation: · On Windows 2003, we should get Event ID: 624 · On Windows 2008, we should get Event ID: 4720

0

Even better example as seen on http://www.windowsnetworking.com/

DSQuery * “CN=TestUser,CN=Users,DC=<YourDomainName>, DC=<Com>” –Attr WhenCreated  WhenChanged

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.