---
title: Discover Newly Users
slug: kronpam-reference-guide-3-5-0/discover-newly-users
description: Improve system security and prevent unauthorized access with Kron PAM's user checking feature. Identify and manage new local, database, and LDAP users on Active Directory to eliminate potential backdoors. Stay in control by receiving notifications and tak
docTags: 
createdAt: 2022-07-29T12:57:22.000Z
---

Kron PAM can check for new local users on target systems, database users, and LDAP users on Active Directory created after the Password Vault configuration of that system. This feature secures unwanted connections. If there is a local user created on the target system, other than a Kron PAM Password Vault account, this could create a backdoor to the system - anybody can log in to the system using this local user and the session will not run over Kron PAM. In addition, the groups belonging to local accounts on the system are also displayed, exposing the user groups.


To prevent this, Kron PAM checks for new local users created on the target device and notifies the admin if any are detected. The admin can then take manual action, like deleting the user from the system or adding the user to Kron PAM’s Password Vault/SAPM.
To do this:

1. Navigate to **Secrets > Vault.**
2. Search on the** Advanced Search Field.**
3. After the accounts are listed, click the** Options** button for one of the accounts.
4. Select **Check New Accounts** from the menu.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/5nM2Yf8uVgacO__GjX-AG_image.png "Checking for New Accounts")

Password Vault will check the users and a pop-up window will inform the user about the process. After that, the new user list can be viewed. To check for new users:

1. Open the **Newly Discovered Users** tab from** Audit.**
2. Fill in the fields used to filter the search.
3. Click **Search.**

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/OQvnr3Yx610CuJiJqv3dE_image.png "Newly Discovered Users screen")