|
|
|
Forum Newbie
Group: Forum Members
Last Login: 5/1/2012 12:33:19 PM
Posts: 1,
Visits: 0
|
|
| I know this event always follows the user creation event, but I'm trying to identify the specific situation where a previously disabled account is re-enabled. Does that fire this same message, and if so, is there anything about it that is unique?
|
|
|
|
|
Supreme Being
Group: Moderators
Last Login: 11/14/2013 3:17:47 PM
Posts: 237,
Visits: 0
|
|
| I would look to see if 4722-user enabled followed 4720-a user account was created. If you do not see a 4720 then the account could have been re-enabled. These events should appear close together.
|
|
|
|