hello, i ahve windows 2008 r2 how i can know in which date the local accounts has been created? thanks.

There is no attribute of local objects that saves the object creation date. If the corresponding event is not in the system logs, there is no way to tell. Richard Mueller - MVP Directory Services

Hi, For domain account, whencreated attributes will tell when the account was created, but for local account there is no such attribute. But when we create local account, there will create audit logs under security log. Event 4720: A user account was created. Event 4722: A user account was enbaled. Event 4738: A user account was changed. Event 4732: A member was added to a security-enabled local group. Hope this helps. Regards, Yan Li Yan Li TechNet Community Support