Forum

Ultimate Windows Security Forum » Security Log » 624 - User Account Created » administrator privilege

administrator privilege Expand / Collapse
Rate Topic
Display Mode
Topic Options
Author
Message
Gcetech
Posted 8/11/2010 10:01:02 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 8/11/2010 9:43:22 AM
Posts: 1, Visits: 0
Hello,

i'm french and my english is not perfect. I work on a RSA Envision plateform and I want to make a report with event viewer log with the create user and also the administror privilege.

I use the eventid 624, but i dont know where I can see if this user is administrator. In witch Eventid can I have find this reference.

I use also eventid 684 but i haven't also the administrator users.

thank you

Post #426
RandyFranklinSmith
Posted 8/28/2010 4:59:38 PM
Expert

ExpertExpertExpertExpertExpertExpertExpertExpert

Group: Administrators
Last Login: 4/20/2009 7:57:33 AM
Posts: 329, Visits: 0
- I use the eventid 624, but i dont know where I can see if this user is administrator. In witch Eventid can I have find this reference.

To see who created the account look at

  • Caller User Name:
  • Caller Domain:

    • - I use also eventid 684 but i haven't also the administrator users.

    I don't think this is what you are looking for

    Post #444
    « Prev Topic | Next Topic »


    Permissions Expand / Collapse

    All times are GMT -5:00, Time now is 4:11pm