When is user profile created

Defining user profiles is a key actiovity when designing interactive systems. The SlideShare family just got bigger. Home Explore Login Signup. Successfully reported this slideshow. We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads.

You can change your ad preferences anytime. User profiles. Upcoming SlideShare. Like this presentation? Why not share! Embed Size px.

Start on. Show related SlideShares at end. WordPress Shortcode. Next SlideShares. Download Now Download to read offline and view in fullscreen. Download Now Download Download to read offline. Personas Download Now Download Download to read offline. Using Personas in User Experience Design. User Profiling and Technology. How to build a persona - Introduction of the 7C model. Provisional Persona Workshop 1. Personas In Product Design. Value Proposition Design.

The user identified by Subject: created the user identified by New Account:. Attributes show some of the properties that were set at the time the account was created. Notice account is initially disabled. This event is logged both for local SAM accounts and domain accounts. You will see a series of other User Account Management events after this event as the remaining properties are punched down, password set and account finally enabled. A user account was created.

Locke Account Name: John. Locke acme-fr. Privileges -. Checking the Date Created property of their profile folder merely gives the date that folder was created, not necessarily the account itself.

I can see, looking at the source code for the chntpw utility that the value is stored in the "F" registry key for each account. Quoth the source code:. The regripper forensics project has a plugin, samparse that will report the account creation date. To his benefit maybe he isn't away of the chntpw utility, which is where I started my search for information about undocumented SAM structures.

The only way to actually know would be to have account management auditing enabled on the compute r when the account was created. The article says Active Directory, but the same applies to local accounts as well; I checked. Without that, the closest you can come is by checking the creation date on the user's registry hive, ntuser. Unfortunately for you, this is a case of "if you didn't log it, then that information doesn't exist. I was about to give you a POC PowerShell script to extract and parse out the creation time, but I realized that chntpw 's logic is incorrect.

The value it calls the creation time is actually the password last set time, although these values are the same upon the initial account creation. See here for an exhaustive description of the SAM. Evan's second link, for samparse , might get it right though. Looking at its actually does work.

If you look at its source here , line I'm pretty sure that is actually the last write time of the key. I you want to stick with more built-in tools, here is a series of Scripting Guy articles explaining how via PowerShell:. You can right click the appropriate user account and go to properties and it will show you a date created, this should be the same as the creation of the user account.

Sign up to join this community. The best answers are voted up and rise to the top. Stack Overflow for Teams — Collaborate and share knowledge with a private group. Create a free Team What is Teams?

Learn more. How to find the creation date of a local user account?