12

As the question title says, I am trying to find out when a user account was created in Active Directory. The operating system is Windows Server 2003.

MDMarra
  • 100,734
  • 32
  • 197
  • 329
heisenberg
  • 194
  • 1
  • 2
  • 11

4 Answers4

14

In AD Users and Computers, inspecting the Object tab of the user account, there is a Created field.

You would need to select View menu > Advanced to be able to see the Object tab.

Greg Askew
  • 35,880
  • 5
  • 54
  • 82
  • 4
    +1 And for those that don't like clicking: `dsquery * -filter "(SamAccountName=jscott)" -attr Name whenCreated` – jscott Jul 24 '12 at 13:13
7

As seen on Technet blogs:

Set objUser = GetObject("LDAP://cn=ken myer, ou=Finance, dc=fabrikam, dc=com")
Wscript.Echo objUser.WhenCreated

Got PowerShell?

Get-ADUser -Identity garys -Properties whenCreated
Michael Hampton
  • 244,070
  • 43
  • 506
  • 972
1

you will be get details please check below.

For User account deletion:

· On Windows 2003, we should get Event ID: 630 · On Windows 2008, we should get Event ID: 4726

For User account creation: · On Windows 2003, we should get Event ID: 624 · On Windows 2008, we should get Event ID: 4720

0

Even better example as seen on http://www.windowsnetworking.com/

DSQuery * “CN=TestUser,CN=Users,DC=<YourDomainName>, DC=<Com>” –Attr WhenCreated  WhenChanged