Administrator user account changes

Description


Allows reporting on all collected events from the monitored systems.
For more information on various Windows events, go to :	http://www.microsoft.com/technet/support/eventserrors.mspx

Parameters


Database Servers	All
Computers	All
Accounts	All
Sources	Security
Categories	Account Management
IDs	624, 625, 626, 627, 628, 629, 630, 642, 644
Logs	Security
Types	All
Message Search Criteria	Include events with any of the message text keywords: Administrator prefixed by qualifier: Target Account Name
Time Frame	Last 4 Month(s)
Start Date Time	2005-07-01 00:00:00
End Date Time	2005-11-01 00:00:00


Server	Date / Time	Id	Log	Type	Category	Source	Computer	Account
LOGCASTER SERVER	9/28/2005 6:27:57 PM	644	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Locked Out: Target Account Name: Administrator Target Account ID: RIPPLE_BACKUP\Administrator Caller Machine Name: RTBUILDBOX Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7)
LOGCASTER SERVER	9/28/2005 6:27:57 PM	642	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Changed: Account Locked. Target Account Name: Administrator Target Domain: RIPPLE_BACKUP Target Account ID: RIPPLE_BACKUP\Administrator Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7) Privileges: -
LOGCASTER SERVER	9/26/2005 5:13:40 PM	644	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Locked Out: Target Account Name: Administrator Target Account ID: RIPPLE_BACKUP\Administrator Caller Machine Name: RT2K3EDS2 Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7)
LOGCASTER SERVER	9/26/2005 5:13:40 PM	642	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Changed: Account Locked. Target Account Name: Administrator Target Domain: RIPPLE_BACKUP Target Account ID: RIPPLE_BACKUP\Administrator Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7) Privileges: -
LOGCASTER SERVER	9/23/2005 11:08:25 AM	644	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Locked Out: Target Account Name: Administrator Target Account ID: RIPPLE_BACKUP\Administrator Caller Machine Name: RT2K3EDS2 Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7)
LOGCASTER SERVER	9/23/2005 11:08:25 AM	642	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Changed: Account Locked. Target Account Name: Administrator Target Domain: RIPPLE_BACKUP Target Account ID: RIPPLE_BACKUP\Administrator Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7) Privileges: -
LOGCASTER SERVER	9/22/2005 9:53:37 AM	644	Security	Success Audit	Account Management	Security	LOGCASTERPROD	SYSTEM
User Account Locked Out: Target Account Name: Administrator Target Account ID: LOGCASTERPROD\Administrator Caller Machine Name: PETERSLAPTOP Caller User Name: LOGCASTERPROD$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7)
LOGCASTER SERVER	9/20/2005 9:14:15 AM	642	Security	Success Audit	Account Management	Security	LOGCASTERPROD	truger
User Account Changed: Target Account Name: Administrator Target Domain: LOGCASTERPROD Target Account ID: LOGCASTERPROD\Administrator Caller User Name: truger Caller Domain: SHARKS Caller Logon ID: (0x0,0x13C0B5) Privileges: - Changed Attributes: Sam Account Name: Administrator Display Name: <value not set> User Principal Name: - Home Directory: <value not set> Home Drive: <value not set> Script Path: <value not set> Profile Path: <value not set> User Workstations: <value not set> Password Last Set: 9/20/2005 9:14:15 AM Account Expires: <never> Primary Group ID: 513 AllowedToDelegateTo: - Old UAC Value: 0xD0370 New UAC Value: 0xD0370 User Account Control: - User Parameters: - Sid History: - Logon Hours: <value changed, but not displayed>
LOGCASTER SERVER	9/20/2005 9:14:15 AM	628	Security	Success Audit	Account Management	Security	LOGCASTERPROD	truger
User Account password set: Target Account Name: Administrator Target Domain: LOGCASTERPROD Target Account ID: LOGCASTERPROD\Administrator Caller User Name: truger Caller Domain: SHARKS Caller Logon ID: (0x0,0x13C0B5)
LOGCASTER SERVER	9/17/2005 5:38:40 PM	644	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Locked Out: Target Account Name: Administrator Target Account ID: RIPPLE_BACKUP\Administrator Caller Machine Name: RTBUILDBOX Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7)
LOGCASTER SERVER	9/17/2005 5:38:40 PM	642	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Changed: Account Locked. Target Account Name: Administrator Target Domain: RIPPLE_BACKUP Target Account ID: RIPPLE_BACKUP\Administrator Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7) Privileges: -
LOGCASTER SERVER	9/17/2005 5:36:04 PM	644	Security	Success Audit	Account Management	Security	LOGCASTERPROD	SYSTEM
User Account Locked Out: Target Account Name: Administrator Target Account ID: LOGCASTERPROD\Administrator Caller Machine Name: RTBUILDBOX Caller User Name: LOGCASTERPROD$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7)
LOGCASTER SERVER	9/16/2005 12:35:40 PM	644	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Locked Out: Target Account Name: Administrator Target Account ID: RIPPLE_BACKUP\Administrator Caller Machine Name: RTBUILDBOX Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7)
LOGCASTER SERVER	9/16/2005 12:35:40 PM	642	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Changed: Account Locked. Target Account Name: Administrator Target Domain: RIPPLE_BACKUP Target Account ID: RIPPLE_BACKUP\Administrator Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7) Privileges: -
LOGCASTER SERVER	9/12/2005 4:27:16 PM	644	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Locked Out: Target Account Name: Administrator Target Account ID: RIPPLE_BACKUP\Administrator Caller Machine Name: RT2K3EDS2 Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7)
LOGCASTER SERVER	9/12/2005 4:27:16 PM	642	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Changed: Account Locked. Target Account Name: Administrator Target Domain: RIPPLE_BACKUP Target Account ID: RIPPLE_BACKUP\Administrator Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7) Privileges: -
LOGCASTER SERVER	9/12/2005 3:46:13 PM	644	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Locked Out: Target Account Name: Administrator Target Account ID: RIPPLE_BACKUP\Administrator Caller Machine Name: RTBUILDBOX Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7)


Server	Date / Time	Id	Log	Type	Category	Source	Computer	Account
LOGCASTER SERVER	9/12/2005 3:46:13 PM	642	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Changed: Account Locked. Target Account Name: Administrator Target Domain: RIPPLE_BACKUP Target Account ID: RIPPLE_BACKUP\Administrator Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7) Privileges: -
LOGCASTER SERVER	9/6/2005 12:35:33 PM	644	Security	Success Audit	Account Management	Security	HERCULES	Everyone
User Account Locked Out: Target Account Name: Administrator Target Account ID: SHARKS\Administrator Caller Machine Name: RT2K3EDS2 Caller User Name: HERCULES$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7)
LOGCASTER SERVER	9/6/2005 12:35:33 PM	642	Security	Success Audit	Account Management	Security	HERCULES	Everyone
User Account Changed: Account Locked. Target Account Name: Administrator Target Domain: SHARKS Target Account ID: SHARKS\Administrator Caller User Name: HERCULES$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7) Privileges: -
LOGCASTER SERVER	9/2/2005 1:43:02 PM	644	Security	Success Audit	Account Management	Security	LOGCASTERPROD	SYSTEM
User Account Locked Out: Target Account Name: Administrator Target Account ID: LOGCASTERPROD\Administrator Caller Machine Name: LOGCASTERPROD Caller User Name: LOGCASTERPROD$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7)
LOGCASTER SERVER	9/1/2005 7:34:25 PM	644	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Locked Out: Target Account Name: Administrator Target Account ID: RIPPLE_BACKUP\Administrator Caller Machine Name: RTBUILDBOX Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7)
LOGCASTER SERVER	9/1/2005 7:34:25 PM	642	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Changed: Account Locked. Target Account Name: Administrator Target Domain: RIPPLE_BACKUP Target Account ID: RIPPLE_BACKUP\Administrator Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7) Privileges: -
LOGCASTER SERVER	8/31/2005 5:27:25 PM	644	Security	Success Audit	Account Management	Security	LOGCASTERPROD	SYSTEM
User Account Locked Out: Target Account Name: Administrator Target Account ID: LOGCASTERPROD\Administrator Caller Machine Name: RTBUILDBOX Caller User Name: LOGCASTERPROD$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7)
LOGCASTER SERVER	8/31/2005 4:12:33 PM	644	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Locked Out: Target Account Name: Administrator Target Account ID: RIPPLE_BACKUP\Administrator Caller Machine Name: RTBUILDBOX Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7)
LOGCASTER SERVER	8/31/2005 4:12:33 PM	642	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Changed: Account Locked. Target Account Name: Administrator Target Domain: RIPPLE_BACKUP Target Account ID: RIPPLE_BACKUP\Administrator Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7) Privileges: -
LOGCASTER SERVER	8/31/2005 3:48:08 PM	644	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Locked Out: Target Account Name: Administrator Target Account ID: RIPPLE_BACKUP\Administrator Caller Machine Name: RT2K3EDS2 Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7)
LOGCASTER SERVER	8/31/2005 3:48:08 PM	642	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Changed: Account Locked. Target Account Name: Administrator Target Domain: RIPPLE_BACKUP Target Account ID: RIPPLE_BACKUP\Administrator Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7) Privileges: -
LOGCASTER SERVER	8/29/2005 12:36:33 PM	644	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Locked Out: Target Account Name: Administrator Target Account ID: RIPPLE_BACKUP\Administrator Caller Machine Name: RT2K3EDS2 Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7)
LOGCASTER SERVER	8/29/2005 12:36:33 PM	642	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Changed: Account Locked. Target Account Name: Administrator Target Domain: RIPPLE_BACKUP Target Account ID: RIPPLE_BACKUP\Administrator Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7) Privileges: -
LOGCASTER SERVER	8/29/2005 12:33:22 PM	644	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Locked Out: Target Account Name: Administrator Target Account ID: RIPPLE_BACKUP\Administrator Caller Machine Name: RT2K3EDS2 Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7)
LOGCASTER SERVER	8/29/2005 12:33:22 PM	642	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Changed: Account Locked. Target Account Name: Administrator Target Domain: RIPPLE_BACKUP Target Account ID: RIPPLE_BACKUP\Administrator Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7) Privileges: -
LOGCASTER SERVER	8/29/2005 12:23:59 PM	644	Security	Success Audit	Account Management	Security	LOGCASTERPROD	SYSTEM
User Account Locked Out: Target Account Name: Administrator Target Account ID: LOGCASTERPROD\Administrator Caller Machine Name: RTBUILDBOX Caller User Name: LOGCASTERPROD$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7)
LOGCASTER SERVER	8/29/2005 12:17:37 PM	644	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Locked Out: Target Account Name: Administrator Target Account ID: RIPPLE_BACKUP\Administrator Caller Machine Name: RTBUILDBOX Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7)
LOGCASTER SERVER	8/29/2005 12:17:37 PM	642	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Changed: Account Locked. Target Account Name: Administrator Target Domain: RIPPLE_BACKUP Target Account ID: RIPPLE_BACKUP\Administrator Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7) Privileges: -
LOGCASTER SERVER	8/29/2005 12:10:36 PM	644	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Locked Out: Target Account Name: Administrator Target Account ID: RIPPLE_BACKUP\Administrator Caller Machine Name: RTBUILDBOX Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7)
LOGCASTER SERVER	8/29/2005 12:10:36 PM	642	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Changed: Account Locked. Target Account Name: Administrator Target Domain: RIPPLE_BACKUP Target Account ID: RIPPLE_BACKUP\Administrator Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7) Privileges: -
LOGCASTER SERVER	8/27/2005 7:06:45 PM	644	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Locked Out: Target Account Name: Administrator Target Account ID: RIPPLE_BACKUP\Administrator Caller Machine Name: RTBUILDBOX Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7)
LOGCASTER SERVER	8/27/2005 7:06:45 PM	642	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Changed: Account Locked. Target Account Name: Administrator Target Domain: RIPPLE_BACKUP Target Account ID: RIPPLE_BACKUP\Administrator Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7) Privileges: -
LOGCASTER SERVER	8/27/2005 7:01:28 PM	644	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Locked Out: Target Account Name: Administrator Target Account ID: RIPPLE_BACKUP\Administrator Caller Machine Name: RTBUILDBOX Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7)
LOGCASTER SERVER	8/27/2005 7:01:28 PM	642	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Changed: Account Locked. Target Account Name: Administrator Target Domain: RIPPLE_BACKUP Target Account ID: RIPPLE_BACKUP\Administrator Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7) Privileges: -
LOGCASTER SERVER	8/27/2005 6:56:19 PM	644	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Locked Out: Target Account Name: Administrator Target Account ID: RIPPLE_BACKUP\Administrator Caller Machine Name: RTBUILDBOX Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7)
LOGCASTER SERVER	8/27/2005 6:56:19 PM	642	Security	Success Audit	Account Management	Security	RIPPLE_BACKUP	SYSTEM
User Account Changed: Account Locked. Target Account Name: Administrator Target Domain: RIPPLE_BACKUP Target Account ID: RIPPLE_BACKUP\Administrator Caller User Name: RIPPLE_BACKUP$ Caller Domain: SHARKS Caller Logon ID: (0x0,0x3E7) Privileges: -