If you enable auditing on user account management (in domain controllers
GPO), you will have an event in security log when account is created,
modified,....
You might check the Owner via the Security Tab. If there are multiple
people using the account (like Administrator) then you won't be able to
tell. Also, the previous owner could have changed it to a new owner. But it
is a place to look.
Check the properties of the user.
Go to the Security tab and click advanced then click
owner.
This will show who created the account.
Ask a Question
Want to reply to this thread or ask your own question?
You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.
