Event ID 645
Computer Account CreatedComputer Account Created:
New Account Name: %1
New Domain: %2
New Account ID: %3
Caller User Name: %4
Caller Domain: %5
Caller Logon ID: %6
Privileges %7
Attributes:
Sam Account Name: %8
Display Name: %9
User Principal Name: %10
Home Directory: %11
Home Drive: %12
Script Path: %13
Profile Path: %14
User Workstations: %15
Password Last Set: %16
Account Expires: %17
Primary Group ID: %18
AllowedToDelegateTo: %19
Old UAC Value: %20
New UAC Value: %21
User Account Control: %22
User Parameters: %23
Sid History: %24
Logon Hours: %25
DNS Host Name: %26
Service Principal Names: %27Lookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /category:"Account Management"
Audit Category:
Account ManagementLEFT/RIGHT arrow keys for navigation
Back to List