I have a couple departments who are delegated the ability to create and
manage users accounts in their respective OUs. This is good for them but
sometimes I need to know what they ahve done. For example, I need to know
what admin user created a particular user account. Is this information
stored in AD and accessible via scripting? Or is the only way to know this
by using object auditing? How can I report on what admin created a user,
etc.?

Thanks,

Jeff

Jeff says...
> I have a couple departments who are delegated the ability to create and
> manage users accounts in their respective OUs. This is good for them but
> sometimes I need to know what they ahve done. For example, I need to know
> what admin user created a particular user account. Is this information
> stored in AD and accessible via scripting? Or is the only way to know this
> by using object auditing? How can I report on what admin created a user,
> etc.?
>
> Thanks,
>
> Jeff
>
Hi Jeff,

if you have just delegated the rights, and they are not domain admins, you can
look at the Owner of the User object in AD. It's in the security tab (available
in Advanced View) and you'll have to click advanced to get the owner tab.

I guess that's the easiest way.

Gruesse - Sincerely,

Ulf B. Simon-Weidner

Thanks, That helps.

Jeff


"Ulf B. Simon-Weidner" <nospam2-(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Jeff says...
> > I have a couple departments who are delegated the ability to create and
> > manage users accounts in their respective OUs. This is good for them
but
> > sometimes I need to know what they ahve done. For example, I need to
know
> > what admin user created a particular user account. Is this information
> > stored in AD and accessible via scripting? Or is the only way to know
this
> > by using object auditing? How can I report on what admin created a user,
> > etc.?
> >
> > Thanks,
> >
> > Jeff
> >
> Hi Jeff,
>
> if you have just delegated the rights, and they are not domain admins, you
can
> look at the Owner of the User object in AD. It's in the security tab
(available
> in Advanced View) and you'll have to click advanced to get the owner tab.
>
> I guess that's the easiest way.
>
> Gruesse - Sincerely,
>
> Ulf B. Simon-Weidner