Re: Who created the AD Object ?


Re: Who created the AD Object ?

I did some research and it doesn’t seem like you can identify the creator of an Active Directory object unless you have enabled Auditing for that event, except if you go through security logs – someone said they had done it that way although I think that person had altered logging, I do not think that event is logged default.

Copy Paste from


Each Active Directory object has an owner. She can always control the permissions for her object. That is, she can decide who can access that object and in what way. Of course, anyone who has the Modify Permissions permission can control permissions, too.

By default, the owner is the user who created the object. However
– If the creator is a member of Domain Admins, that group is the owner.
– If the creator is not a member of Domain Admins, but is a member of Administrators, the latter group is the owner.