Event ID 624
User Account CreatedUser Account Created: New Account Name: %1 New Domain: %2 New Account ID: %3 Caller User Name: %4 Caller Domain: %5 Caller Logon ID: %6 Privileges %7 Attributes: Sam Account Name: %8 Display Name: %9 User Principal Name: %10 Home Directory: %11 Home Drive: %12 Script Path: %13 Profile Path: %14 User Workstations: %15 Password Last Set: %16 Account Expires: %17 Primary Group ID: %18 AllowedToDelegateTo: %19 Old UAC Value: %20 New UAC Value: %21 User Account Control: %22 User Parameters: %23 Sid History: %24 Logon Hours: %25
Lookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /category:"Account Management"
Audit Category:
Account ManagementLEFT/RIGHT arrow keys for navigation
Back to List