Who created that AD account?

[acford]

Hi there,

So, I need to find out who created an AD account in my domain... anyone know of any scripts or utils that can do this?

Thanks muchly
Andrew

 

[Zelandakh]

The event log should tell you.

It can only be the domain admins group which ought to narrow it down rather severely!

 

[markdmac]

Ideally you should have all Domain Admins using an ID created just for that purpose and not have everyone use a generic Admin ID. That way you can track who does what.

If you DON'T have that now, then this is the time to do it. Change the Admin ID and don't give it out to people. Lock the password up in a vault somewhere for emergencies and have everyone use a personal Admin account. Don't let them use a regular user account with elevated privileges for day to day work.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.