|
|
|
Forum Newbie
Group: Forum Members
Last Login: 1/9/2012 2:37:54 PM
Posts: 1,
Visits: 0
|
|
We have a client that wants to monitor when a previously disabled user gets enabled again. There is an event for a user getting enabled, but apparently it is fired when a user is created as well.
If an existing disabled user gets enabled, will this show up in 642?
|
|
|
|
|
Security Log Nerd
Group: Administrators
Last Login: 4/16/2009 1:11:51 PM
Posts: 49,
Visits: 0
|
|
| For Windows XP event 642 will be produced but it doesn't really tell you what happened. Look for event 626 instead. Server 2003 may give the needed info but we think event 626 is better.
|
|
|
|