You might be able to find out who created it by looking at the Owner in the 
Security tab.  However if the account used to create the object is a member of 
Domain Admins it will show this as owner instead of the specific user's name.

There was a discussion thread on this a couple of days ago.

---------- Original Message ----------------------------------
From: "Mitch Reid" <[EMAIL PROTECTED]>
Date:  Mon, 4 Dec 2006 15:14:50 -0500

We had a few user accounts that were deleted and then recreated and nobody
will take responsibility.
I used ADSIedit to verify the creation date/time.

While auditing is enabled, the Security log rolled and we missed the event
(yes I know it's an issue).

Is there a way to see who created the the user object?

Thanks, Mitch.


Sent via the WebMail system at

List info   :
List FAQ    :
List archive:

Reply via email to