i'm french and my english is not perfect. I work on a RSA Envision plateform and I want to make a report with event viewer log with the create user and also the administror privilege.
I use the eventid 624, but i dont know where I can see if this user is administrator. In witch Eventid can I have find this reference.
I use also eventid 684 but i haven't also the administrator users.
To see who created the account look at
- I use also eventid 684 but i haven't also the administrator users.
I don't think this is what you are looking for