Event ID: 520

The system time was changed

The system time was changed.
    Process ID:         %1
    Process Name:       %2
    Primary User Name:  %3
    Primary Domain:     %4
    Primary Logon ID:   %5
    Client User Name:   %6
    Client Domain:      %7
    Client Logon ID:    %8
    Previous Time:      %10 %9
    New Time:           %12 %11


Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /category:System
How to enable Windows Auditing


Audit Category:
System
Corresponding Events:
4616


LEFT/RIGHT arrow keys for navigation

Back to List