UltimateWindowsSecurity.com Forum / Ultimate Windows Security Forum / Security Log / 624 - User Account Created / administrator privilege / Latest Posts

RE: administrator privilege

RandyFranklinSmith — Sat, 28 Aug 2010 16:59:38 GMT

- I use the eventid 624, but i dont know where I can see if this user is administrator. In witch Eventid can I have find this reference.

To see who created the account look at

Caller User Name:

Caller Domain:

- I use also eventid 684 but i haven't also the administrator users.

I don't think this is what you are looking for

administrator privilege

Gcetech — Wed, 11 Aug 2010 10:01:02 GMT

Hello,

i'm french and my english is not perfect. I work on a RSA Envision plateform and I want to make a report with event viewer log with the create user and also the administror privilege.

I use the eventid 624, but i dont know where I can see if this user is administrator. In witch Eventid can I have find this reference.

I use also eventid 684 but i haven't also the administrator users.

thank you