I'm trying to find out how to search for the date a domain account was created by looking through Event Viewer on the AD server. Any tips on how I can do this quickly? Thanks in advance!

You don't want to use the event viewer. You want to use ADSI edit, or and LDAP browser and read the WhenCreated propery of the object. Softera has a free ldap browser you can download. Or you can use a utility like Disable Accounts to general a report on many account's whencreated property at once. http://networkadminkb.com/KB/a242/disable-accounts.aspx

Hello, please see: http://blogs.technet.com/b/heyscriptingguy/archive/2007/11/08/hey-scripting-guy-how-can-i-get-the-name-and-whencreated-values-for-all-the-users-in-active-directory.aspxBest regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Can’t you see the “created” date in the user properties? Object tab? Or you can use a DSQUERY command. Dsqury * -filter (samaccountname=User1) –attr whenCreated Santhosh Sivarajan | MCTS, MCSE (W2K3/W2K/NT4), MCSA (W2K3/W2K/MSG), CCNA, Network+| Houston, TX Blogs - http://blogs.sivarajan.com/ This posting is provided AS IS with no warranties,and confers no rights.

Hello, please see: http://blogs.technet.com/b/heyscriptingguy/archive/2007/11/08/hey-scripting-guy-how-can-i-get-the-name-and-whencreated-values-for-all-the-users-in-active-directory.aspxBest regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Can’t you see the “created” date in the user properties? Object tab? Or you can use a DSQUERY command. Dsqury * -filter (samaccountname=User1) –attr whenCreated Santhosh Sivarajan | MCTS, MCSE (W2K3/W2K/NT4), MCSA (W2K3/W2K/MSG), CCNA, Network+| Houston, TX Blogs - http://blogs.sivarajan.com/ This posting is provided AS IS with no warranties,and confers no rights.