Re: Info Date Account Windows 2000 Server

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 05/18/05 

Date: Wed, 18 May 2005 12:45:58 -0500

If the user has logged on locally you can check the date on the user's
profile folder as a general clue. Otherwise auditing of account management
would have to have been enabled and the log big enough to retain all the
security events unless old events have been archived. Once auditing of
account management has been enabled an event will be recorded when a user
has been created such as event ID 624. --- Steve

"its10" <its10@katamail.com> wrote in message
news:eup$nn4WFHA.2060@tk2msftngp13.phx.gbl...
> How can i know the user creation date on windows 2000 server ?
> On domain controller it's simple but on windows 2000 member server.....
>
> many thanks, bye
>
>

Relevant Pages

  • Re: Adding Computers to the Domain
    ... You would already have had to have auditing of account management in place to find ... --- Steve ... >> In the Domain Controller Security Policy enable auditing on account ...
    (microsoft.public.win2000.security)
  • Re: Domain admin users audit
    ... I don't receive any account management Event on Domain ... Controllers however i received all logon events, ... >Account Management auditing will cover the ...
    (microsoft.public.win2000.active_directory)
  • Re: Logging OU movement
    ... The answer to the original question is to use Auditing, ... Account Management is an easy to get things ... Set Auditing (ACLs) on the actually objects you wish to track using ...
    (microsoft.public.windows.server.active_directory)
  • Re: domain administrator account password reset
    ... If auditing is enabled (Account Management), it will show you that the ... administrator password has been changed. ... any questions should be posted in the NewsGroup ...
    (microsoft.public.win2000.active_directory)