You might be able to find out who created it by looking at the Owner in the Security tab. However if the account used to create the object is a member of Domain Admins it will show this as owner instead of the specific user's name.
There was a discussion thread on this a couple of days ago. http://www.activedir.org/ma/default.aspx?msg=16424 Tony ---------- Original Message ---------------------------------- From: "Mitch Reid" <[EMAIL PROTECTED]> Reply-To: ActiveDir@mail.activedir.org Date: Mon, 4 Dec 2006 15:14:50 -0500 We had a few user accounts that were deleted and then recreated and nobody will take responsibility. I used ADSIedit to verify the creation date/time. While auditing is enabled, the Security log rolled and we missed the event (yes I know it's an issue). Is there a way to see who created the the user object? Thanks, Mitch. ________________________________________________________________ Sent via the WebMail system at mail.activedir.org List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
