Event ID: 4782The password hash an account was accessed
The password hash an account was accessed. Subject: Security ID: %3 Account Name: %4 Account Domain: %5 Logon ID: %6 Target Account: Account Name: %1 Account Domain: %2
This event generates on domain controllers during password migration of an account using Active Directory Migration Toolkit.
Typically “Subject\Security ID” is the SYSTEM account.
Lookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /subcategory:"Other Account Management Events"
LEFT/RIGHT arrow keys for navigationBack to List