Thanks
Event Type: Success AuditEvent Source: SecurityEvent Category: Account Management Event ID: 642Date: 11/13/2011Time: 2:39:40 PMUser: ACME\administratorComputer: DC1Description:User Account Changed: Target Account Name: lkjh Target Domain: ACME Target Account ID: ACME\lkjh Caller User Name: administrator Caller Domain: ACME Caller Logon ID: (0x0,0x5EAF9DE) Privileges: - Changed Attributes: Sam Account Name: - Display Name: - User Principal Name: - Home Directory: - Home Drive: - Script Path: - Profile Path: - User Workstations: - Password Last Set: - Account Expires: 12/14/2011 12:00:00 AM Primary Group ID: - AllowedToDelegateTo: - Old UAC Value: - New UAC Value: - User Account Control: - User Parameters: - Sid History: - Logon Hours: <value changed, but not displayed>
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.