And from adfind.... adfind -gc -b -f name=scheduler -owner whencreated
Output would look something like [Thu 06/30/2005 19:29:09.67] F:\temp>adfind -gc -b -f name=someuser -owner whencreated AdFind V01.26.00cpp Joe Richards ([EMAIL PROTECTED]) February 2005 Using server: 2k3dc01.joe.com Directory: Windows Server 2003 dn:CN=someuser,CN=Users,DC=joe,DC=com >whenCreated: 20050518144457.0Z >_OBJECT_OWNER: JOE\Domain Admins 1 Objects returned -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thommes, Michael M. Sent: Wednesday, June 29, 2005 3:17 PM To: [email protected] Subject: RE: [ActiveDir] OT: "scheduler" account? Jorge, Thanks for the <slap along side of head> idea to use ADSIEdit to track down this account! Values of related attributes show this account was created a long time ago when we were an NT4 domain. It has been dispensed with accordingly. Thanks again! Mike Thommes -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Almeida Pinto, Jorge de Sent: Wednesday, June 29, 2005 1:09 PM To: [email protected]; [email protected] Subject: RE: [ActiveDir] OT: "scheduler" account? nope... not a default account in AD..... * see the creation date to see if you remember what happened on that date * see the owner to see to who caused the creation Cheers, #JORGE# ________________________________ From: [EMAIL PROTECTED] on behalf of Thommes, Michael M. Sent: Wed 6/29/2005 6:33 PM To: [email protected] Subject: [ActiveDir] OT: "scheduler" account? I have found a user account in my AD named "Scheduler" with a Display name of "Scheduler Service Account" and a Description of "Gives the Scheduler network access". I don't know where it comes from. I don't see it in child domain ADs. Does anyone know the origin of this account? Maybe some software installation did it? TIA! Mike Thommes List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
