Event ID 4722
A user account was enabledA user account was enabled.
Subject:
Security ID: %4
Account Name: %5
Account Domain: %6
Logon ID: %7
Target Account:
Security ID: %3
Account Name: %1
Account Domain: %2This event generates every time user or computer object is enabled.
For user accounts, this event generates on domain controllers, member servers, and workstations.
Auditing:
Always
Volume:
Low
ISO 27001:2013 A.9.2.1
NIST 800-171: 3.1.1
NIST SP 800-53: AC-2 (4)
CMMC v2 L1: AC.L1-3.1.1
PCI 3.2.1: 10.2.5
Microsoft Documentation
Lookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /subcategory:"User Account Management"
LEFT/RIGHT arrow keys for navigation
Back to List