You can use dsquery (on the DC) to retrieve the whenCreated attribute for any object. For example, for user with “pre-Windows 2000 logon” name “jsmith”:
1 | <samp> dsquery * -filter "(sAMAccountName=jsmith)" -attr whenCreated</samp> |
Alternativily you can list all DC user along with creadtion date.
On the server, open a CMD.EXE prompt and type:
dsquery * domainroot -filter “(&(objectCategory=Person)(objectClass=User))” -attr distinguishedName sAMAccountName whenCreated -Limit 0
