---
title: Checking for New Users
slug: kronpam-reference-guide-legacy-ui-3-4-0/checking-for-new-users
description: Improve system security and prevent unauthorized access with Kron PAM's user checking feature. Identify and manage new local, database, and LDAP users on Active Directory to eliminate potential backdoors. Stay in control by receiving notifications and tak
docTags: 
createdAt: 2022-07-29T12:57:22.000Z
---

Kron PAM can check for new local users on target systems, database users and LDAP users on Active Directory created after the  Password Vault-SAPM configuration of that system. This feature secures unwanted connections. If there is a local user created on the target system, other than a Kron PAM Password Vault user, this could create a backdoor to the system - anybody can log in to the system using this local user and the session will not run over Kron PAM. In addition, the groups belonging to local accounts on the system are also displayed, exposing the user groups.


To prevent this, Kron PAM checks for new local users created on the target device and notifies the admin if any are detected. The admin can then take manual action, like deleting the user from the system or adding the user to Kron PAM’s Password Vault/SAPM.
To do this:

1. Navigate to **SAPM Management **> **SAPM Management**.
2. Click the **Search **button.
3. After the accounts are listed, click the **Options** button for one of the accounts.
4. Select **Check New Users** from the menu.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/SUZPlMEtsaXCmr_jexttI_image.png "Checking for New Users")

SAPM will check the users and a pop-up window will inform the user about the process. After that, the new user list can be viewed. To check for new users:

1. Open the **New Users Log** tab.
2. Fill in the fields used to filter the search.
3. Click **Search.**