Author Posts

February 9, 2016 at 8:07 pm

Hi All,
i want to ask that is there a way for getting all users which has been created manually in Active Directory. i don't want to get automatically created accounts.

February 9, 2016 at 9:10 pm

@ali-asghar, I do not understand your question. What do you mean "created automatically" vs "created manually". The only 3 user accounts that are created by default in a new AD domain are "Administrator", "krbtgt", and "Guest". Any other account besides these three could have been created manually or "automatically" by some third party product or process. It would then be up to the third party product to include some kind of indicator that it was created automatically by that process because AD will not know the different between you creating it or some other automated process creating it.

February 10, 2016 at 1:58 am

@curtis, thanks for replying .
from automatically i mean user created by third party product or process when we install the product. anyway thanks.I got the point and sorted out the reason.

February 10, 2016 at 2:06 am

Only way I can think of discovering this is to turn on AD logging so that you can track new user accounts being created. Most applications will create accounts in the Users container (because they know its guaranteed to be present) If you don't use that container for standard user accounts you'll catch the majority of the 'automatically' created accounts

February 10, 2016 at 4:05 am

Maybe you can search by date?