How to find that what was changed ? Expand / Collapse
Author
Message
Posted 9/24/2013 9:49:15 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 10/29/2013 11:42:29 AM
Posts: 7, Visits: 6
I could not find any info to know what change was actually made in event ID 4742 or 646.

Could you explain that how we can find that what info was changed when these event occurs?

Most of the time the changed attributes does not have any values. What does that mean?

Please advise.
Post #1260
Posted 11/18/2013 9:48:19 PM
Supreme Being

Supreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme Being

Group: Moderators
Last Login: 11/14/2013 3:17:47 PM
Posts: 237, Visits: 0
 There are many potential Computer Account attributes that are optional and Windows does not list all of them in this event, but this event will still be logged when one of the optional attributes are changed.
Post #1289
Posted 1/20/2014 3:46:26 PM
Expert

ExpertExpertExpertExpertExpertExpertExpertExpert

Group: Administrators
Last Login: 4/20/2009 7:57:33 AM
Posts: 329, Visits: 0
You could use the Audit Directory Service Changes category to audit Write access to All Properties on Computer Accounts to find out what is being changed but likely it won't be of much interest anyway.
Post #1309
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 5:10am