Event ID: 624

User Account Created

User Account Created:
    New Account Name:   %1
    New Domain: %2
    New Account ID: %3
    Caller User Name:   %4
    Caller Domain:  %5
    Caller Logon ID:    %6
    Privileges      %7
 Attributes:
    Sam Account Name:   %8
    Display Name:   %9
    User Principal Name:    %10
    Home Directory: %11
    Home Drive: %12
    Script Path:    %13
    Profile Path:   %14
    User Workstations:  %15
    Password Last Set:  %16
    Account Expires:    %17
    Primary Group ID:   %18
    AllowedToDelegateTo:    %19
    Old UAC Value:  %20
    New UAC Value:  %21
    User Account Control:   %22
    User Parameters:    %23
    Sid History:    %24
    Logon Hours:    %25


Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /category:"Account Management"
How to enable Windows Auditing


Operating Systems:
Windows 2003 Windows XP

Audit Category:
Account Management
Corresponding Events:
4720


LEFT/RIGHT arrow keys for navigation

Back to List