Active Directory experts!!!

[172boost]

Anybody know how to find out who created a user account in active directory with having auditing enabled?

 

[nosluom]

you can't mate if my memory serves me correctly, you have to have auditing enabled

 

[172boost]

damn it!

 

[Mike_182]

Nope, auditing is required. However if you use a helpdesk solution, a good indication is whoever closed the call for the user request

 

[KDF]

Ye, as said without auditing on it wont log it.

Why not enable auditing now and next time you will know who it was

 

[Daz]

Forget auditing, I wanna know why you wanna know?

Rogue Active Directory use FTW!

 

[KDF]

There are only two people in my work that can make changes to active directory.

So if it wasn't me that made the changes I know exactly who to blame