2

On Windows Server 2003 standard is there a way to determine when a domain controller was promoted?

This is for an Active Directory 2000 functional domain.

The event logs don't go back far enough.

Bart De Vos
  • 17,911
  • 6
  • 63
  • 82
PaulWaldman
  • 508
  • 5
  • 14

2 Answers2

5

If you don't have Event Logs, you can check the creation date of the SYSVOL directory:

C:\> dir /T C C:\Windows\SYSVOL

Also of note is C:\WINDOWS\Debug\DCPROMO.LOG

jscott
  • 24,484
  • 8
  • 79
  • 100
1

AD has an attribute for DC's that is called whenCreated that stores a date/time field.

mfinni
  • 36,144
  • 4
  • 53
  • 86
  • 1
    I was curious about this attribute. Is it updated when a member server is promoted to a DC? I ask because, on my DCs, the attribute date/time doesn't match the `dcpromo.log`. Also, all non-DC member servers also have this attribute. – jscott Jun 16 '11 at 18:36
  • Good point. It must from be when the Computer entry is created in AD, which (except for the first DC) will not necessarily be when it is promoted. – mfinni Jun 16 '11 at 18:37