Hi,
For domain account, whencreated attributes will tell when the account was created, but for local account there is no such attribute.
But when we create local account, there will create audit logs under security log.
Event 4720: A user account was created.
Event 4722: A user account was enbaled.
Event 4738: A user account was changed.
Event 4732: A member was added to a security-enabled local group.
Hope this helps.
Regards,
Yan Li
Yan Li
TechNet Community Support
There is an amazing pack of free network admin tools.
click here to download it