Event ID 642 captured the following in the changed attributes:
User Account Control: 'Don't Expire Password' - Enabled
Can you please explain what the user did here?
Thanks