Event ID: 698

An attempt to set the Directory Services Restore Mode administrator password has been made

An attempt to set the Directory Services Restore Mode administrator password has been made.
    Caller Username:    %1
    Caller Domain:  %2
    Caller Logon ID:    %3
    Caller Workstation: %4
    Status Code:    %5

Lookup Audit Policy Configuration Settings


  C:\> AuditPol.exe /get /category:"Account Management"

How to enable Windows Auditing

Recommended Audit Policy

Operating Systems:

Windows 2003 Windows XP

Audit Category:

Account Management

LEFT/RIGHT arrow keys for navigation

Back to List