Re: User Account and Rights questions

Thanks for the information. This account was created in a stand alone
server, rights have not been modified. I need to find out when and who this
account was created. Any registry key where I can lokk at it?



"Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message
news:ev9FrtCJGHA.3856@xxxxxxxxxxxxxxxxxxxxxxx
> In AD, if the account object still exists one may look at the create
> timestamp.
> The Owner attribute will often tell what account created the object, but
> this
> can be changed, and it can only say such as Domain Admins for some cases.
> As to accounts that no longer exist, or for what rights were given at
> creation,
> there is not much of anything in the running system that says (unless the
> rights
> have not been changed since creation, the fact of which one could
> theoretically
> determine from the security log if account management event success is
> audited).
>
>
> "WhiteJul" <whitejul@xxxxxxxxxxx> wrote in message
> news:%23J7ksvBJGHA.1188@xxxxxxxxxxxxxxxxxxxxxxx
>> Is there any wy to find out when a user account was created and what
>> rights were assigned to that account?
>>
>> Thanks for any tip.
>>
>> White
>>
>
>


.

Relevant Pages

  • Re: Prevent changes to Administrator password
    ... What I am trying to do is give Taz1972 some options to minimize the risk or make it harder for a lower-level DA to reset the password for the EA account. ... * This posting is provided "AS IS" with no warranties and confers no rights! ... > By adding the Deny Write Permissions ACE, ... > permission to modify the ACL on AdminSDHolder. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Windows 2003 Users vs Software
    ... You need to have both an admin and a limited account ... >> as a limited user, to effect, "the software has not been installed ... The users do not have rights to install programs. ...
    (microsoft.public.security)
  • Re: Incoming E-Mail - cant create contact in OU
    ... already have the application pool delegated rights to the OU. ... In my experience it is because you didn't quite delegate enough rights to ... the account in the OU. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Incoming E-Mail - cant create contact in OU
    ... Go to the OU in security/advanced I added my sharepoint application pool ... that account a little (if the web app is compromised or something, ... Now I understand that you have given the account "full rights" of the OU, ... So I started with giving the app pool account domain admins permissions then ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Reboot command no longer works in Task Scheduler
    ... User rights assignment are set with a GPO located under Computer configuration, windows settings, security settings,local policies. ... Check there if the account, even the domain admin has the needed rights. ...
    (microsoft.public.win2000.general)