In windows xp, is there a way to find out who created a local user account? If not, is there some way to correlate information that proves an individual may have created the account, such as log on time during account creation? Any information would be greatly appreciated.
In windows xp, is there a way to find out who created a local user account? If not, is there some way to correlate information that proves an individual may have created the account, such as log on time during account creation? Any information would be greatly appreciated.
Have you gone through the Event Logs around the time of the account creation?
In windows xp, is there a way to find out who created a local user account? If not, is there some way to correlate information that proves an individual may have created the account, such as log on time during account creation? Any information would be greatly appreciated.
Jonathan's***t the nail on the head…the only way to determine *who* created an account is through the Event Log, assuming that the appropriate logging was enabled. Even finding someone who was logged on to the system during the time that the account was created may require the Event Log, as well…although, if you know the method used (ie, if the person went through the Control Panel applet rather than using "net user" commands) you may find some indication of this in the UserAssist keys in the Registry.