Page:1/3
10/3/2005 3:27:14 PM
All user account changes
Description
Allows reporting on all collected events from the monitored systems.
For more information on various Windows events, go to :
Parameters
Database Servers
All
Computers
All
Accounts
All
Sources
Security
Categories
Account Management
IDs
624, 625, 626, 627, 628, 629, 630, 642, 644
Logs
Security
Types
All
Message Search Criteria
None
Time Frame
Last 1 Week(s)
Start Date Time
2005-09-25 00:00:00
End Date Time
2005-10-02 00:00:00
Date / Time
Id
Log
Type
Category
Source
Computer
Account
LOGCASTER SERVER
10/1/2005 8:42:32 PM
627
Security
Success Audit
Account Management
Security
VPNSERVER
SYSTEM
Change Password Attempt:
Target Account Name: TsInternetUser
Target Domain: VPNSERVER
Target Account ID: VPNSERVER\TsInternetUser
Caller User Name: VPNSERVER$
Caller Domain: SHARKS
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 
LOGCASTER SERVER
10/1/2005 4:07:11 AM
627
Security
Failure Audit
Account Management
Security
CEREBUS
SYSTEM
Change Password Attempt:
Target Account Name: TsInternetUser
Target Domain: CEREBUS
Target Account ID: CEREBUS\TsInternetUser
Caller User Name: CEREBUS$
Caller Domain: 38THPARALLEL
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 
LOGCASTER SERVER
10/1/2005 3:04:48 AM
627
Security
Success Audit
Account Management
Security
LC2KSRV4
SYSTEM
Change Password Attempt:
Target Account Name: TsInternetUser
Target Domain: LC2KSRV4
Target Account ID: LC2KSRV4\TsInternetUser
Caller User Name: LC2KSRV4$
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 
LOGCASTER SERVER
10/1/2005 3:04:14 AM
627
Security
Failure Audit
Account Management
Security
RIPPLE_BACKUP
SYSTEM
Change Password Attempt:
Target Account Name: TsInternetUser
Target Domain: RIPPLE_BACKUP
Target Account ID: RIPPLE_BACKUP\TsInternetUser
Caller User Name: RIPPLE_BACKUP$
Caller Domain: SHARKS
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 
LOGCASTER SERVER
9/30/2005 8:42:32 PM
627
Security
Success Audit
Account Management
Security
VPNSERVER
SYSTEM
Change Password Attempt:
Target Account Name: TsInternetUser
Target Domain: VPNSERVER
Target Account ID: VPNSERVER\TsInternetUser
Caller User Name: VPNSERVER$
Caller Domain: SHARKS
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 
LOGCASTER SERVER
9/30/2005 4:07:11 AM
627
Security
Success Audit
Account Management
Security
CEREBUS
SYSTEM
Change Password Attempt:
Target Account Name: TsInternetUser
Target Domain: CEREBUS
Target Account ID: CEREBUS\TsInternetUser
Caller User Name: CEREBUS$
Caller Domain: 38THPARALLEL
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 
LOGCASTER SERVER
9/30/2005 3:04:48 AM
627
Security
Success Audit
Account Management
Security
LC2KSRV4
SYSTEM
Change Password Attempt:
Target Account Name: TsInternetUser
Target Domain: LC2KSRV4
Target Account ID: LC2KSRV4\TsInternetUser
Caller User Name: LC2KSRV4$
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 
LOGCASTER SERVER
9/30/2005 3:04:14 AM
627
Security
Failure Audit
Account Management
Security
RIPPLE_BACKUP
SYSTEM
Change Password Attempt:
Target Account Name: TsInternetUser
Target Domain: RIPPLE_BACKUP
Target Account ID: RIPPLE_BACKUP\TsInternetUser
Caller User Name: RIPPLE_BACKUP$
Caller Domain: SHARKS
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 
LOGCASTER SERVER
9/29/2005 8:42:32 PM
627
Security
Success Audit
Account Management
Security
VPNSERVER
SYSTEM
Change Password Attempt:
Target Account Name: TsInternetUser
Target Domain: VPNSERVER
Target Account ID: VPNSERVER\TsInternetUser
Caller User Name: VPNSERVER$
Caller Domain: SHARKS
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 
LOGCASTER SERVER
9/29/2005 10:20:44 AM
628
Security
Success Audit
Account Management
Security
HERCULES
Everyone
User Account password set:
Target Account Name: RIPPLETEST$
Target Domain: SHARKS
Target Account ID: SHARKS\RIPPLETEST$
Caller User Name: HERCULES$
Caller Domain: SHARKS
Caller Logon ID: (0x0,0x3E7)
 
LOGCASTER SERVER
9/29/2005 4:07:11 AM
627
Security
Failure Audit
Account Management
Security
CEREBUS
SYSTEM
Change Password Attempt:
Target Account Name: TsInternetUser
Target Domain: CEREBUS
Target Account ID: CEREBUS\TsInternetUser
Caller User Name: CEREBUS$
Caller Domain: 38THPARALLEL
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 
LOGCASTER SERVER
9/29/2005 3:04:48 AM
627
Security
Success Audit
Account Management
Security
LC2KSRV4
SYSTEM
Change Password Attempt:
Target Account Name: TsInternetUser
Target Domain: LC2KSRV4
Target Account ID: LC2KSRV4\TsInternetUser
Caller User Name: LC2KSRV4$
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 
LOGCASTER SERVER
9/29/2005 3:04:14 AM
627
Security
Failure Audit
Account Management
Security
RIPPLE_BACKUP
SYSTEM
Change Password Attempt:
Target Account Name: TsInternetUser
Target Domain: RIPPLE_BACKUP
Target Account ID: RIPPLE_BACKUP\TsInternetUser
Caller User Name: RIPPLE_BACKUP$
Caller Domain: SHARKS
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 
LOGCASTER SERVER
9/28/2005 8:42:32 PM
627
Security
Success Audit
Account Management
Security
VPNSERVER
SYSTEM
Change Password Attempt:
Target Account Name: TsInternetUser
Target Domain: VPNSERVER
Target Account ID: VPNSERVER\TsInternetUser
Caller User Name: VPNSERVER$
Caller Domain: SHARKS
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 
LOGCASTER SERVER
9/28/2005 6:27:57 PM
642
Security
Success Audit
Account Management
Security
RIPPLE_BACKUP
SYSTEM
User Account Changed:
Account Locked.
Target Account Name: Administrator
Target Domain: RIPPLE_BACKUP
Target Account ID: RIPPLE_BACKUP\Administrator
Caller User Name: RIPPLE_BACKUP$
Caller Domain: SHARKS
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 
LOGCASTER SERVER
9/28/2005 6:27:57 PM
644
Security
Success Audit
Account Management
Security
RIPPLE_BACKUP
SYSTEM
User Account Locked Out:
Target Account Name: Administrator
Target Account ID: RIPPLE_BACKUP\Administrator
Caller Machine Name: RTBUILDBOX
Caller User Name: RIPPLE_BACKUP$
Caller Domain: SHARKS
Caller Logon ID: (0x0,0x3E7)
 
LOGCASTER SERVER
9/28/2005 4:07:10 AM
627
Security
Success Audit
Account Management
Security
CEREBUS
SYSTEM
Change Password Attempt:
Target Account Name: TsInternetUser
Target Domain: CEREBUS
Target Account ID: CEREBUS\TsInternetUser
Caller User Name: CEREBUS$
Caller Domain: 38THPARALLEL
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 

Page:2/3
10/3/2005 3:27:14 PM
Date / Time
Id
Log
Type
Category
Source
Computer
Account
LOGCASTER SERVER
9/28/2005 3:04:48 AM
627
Security
Success Audit
Account Management
Security
LC2KSRV4
SYSTEM
Change Password Attempt:
Target Account Name: TsInternetUser
Target Domain: LC2KSRV4
Target Account ID: LC2KSRV4\TsInternetUser
Caller User Name: LC2KSRV4$
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 
LOGCASTER SERVER
9/28/2005 3:04:14 AM
627
Security
Failure Audit
Account Management
Security
RIPPLE_BACKUP
SYSTEM
Change Password Attempt:
Target Account Name: TsInternetUser
Target Domain: RIPPLE_BACKUP
Target Account ID: RIPPLE_BACKUP\TsInternetUser
Caller User Name: RIPPLE_BACKUP$
Caller Domain: SHARKS
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 
LOGCASTER SERVER
9/27/2005 10:04:01 PM
642
Security
Success Audit
Account Management
Security
LCNTPDC1
SYSTEM
User Account Changed:
Target Account Name: LCNTSRV1$
Target Domain: LCLAB1
Target Account ID: S-1-5-21-1287529892-1147808573-1947940980-1067
Caller User Name: SYSTEM
Caller Domain: NT AUTHORITY
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 
LOGCASTER SERVER
9/27/2005 10:04:01 PM
628
Security
Success Audit
Account Management
Security
LCNTPDC1
SYSTEM
User Account password set:
Target Account Name: LCNTSRV1$
Target Domain: LCLAB1
Target Account ID: S-1-5-21-1287529892-1147808573-1947940980-1067
Caller User Name: SYSTEM
Caller Domain: NT AUTHORITY
Caller Logon ID: (0x0,0x3E7)
 
LOGCASTER SERVER
9/27/2005 8:42:32 PM
627
Security
Success Audit
Account Management
Security
VPNSERVER
SYSTEM
Change Password Attempt:
Target Account Name: TsInternetUser
Target Domain: VPNSERVER
Target Account ID: VPNSERVER\TsInternetUser
Caller User Name: VPNSERVER$
Caller Domain: SHARKS
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 
LOGCASTER SERVER
9/27/2005 4:07:11 AM
627
Security
Failure Audit
Account Management
Security
CEREBUS
SYSTEM
Change Password Attempt:
Target Account Name: TsInternetUser
Target Domain: CEREBUS
Target Account ID: CEREBUS\TsInternetUser
Caller User Name: CEREBUS$
Caller Domain: 38THPARALLEL
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 
LOGCASTER SERVER
9/27/2005 3:04:48 AM
627
Security
Success Audit
Account Management
Security
LC2KSRV4
SYSTEM
Change Password Attempt:
Target Account Name: TsInternetUser
Target Domain: LC2KSRV4
Target Account ID: LC2KSRV4\TsInternetUser
Caller User Name: LC2KSRV4$
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 
LOGCASTER SERVER
9/27/2005 3:04:14 AM
627
Security
Failure Audit
Account Management
Security
RIPPLE_BACKUP
SYSTEM
Change Password Attempt:
Target Account Name: TsInternetUser
Target Domain: RIPPLE_BACKUP
Target Account ID: RIPPLE_BACKUP\TsInternetUser
Caller User Name: RIPPLE_BACKUP$
Caller Domain: SHARKS
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 
LOGCASTER SERVER
9/26/2005 8:42:32 PM
627
Security
Success Audit
Account Management
Security
VPNSERVER
SYSTEM
Change Password Attempt:
Target Account Name: TsInternetUser
Target Domain: VPNSERVER
Target Account ID: VPNSERVER\TsInternetUser
Caller User Name: VPNSERVER$
Caller Domain: SHARKS
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 
LOGCASTER SERVER
9/26/2005 6:50:41 PM
642
Security
Success Audit
Account Management
Security
LCNTPDC1
Administrator
User Account Changed:
Target Account Name: ssundar
Target Domain: LCLAB1
Target Account ID: S-1-5-21-1287529892-1147808573-1947940980-1107
Caller User Name: Administrator
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x225CAE5)
Privileges: -
 
LOGCASTER SERVER
9/26/2005 6:50:27 PM
642
Security
Success Audit
Account Management
Security
LCNTPDC1
Administrator
User Account Changed:
Target Account Name: tester4
Target Domain: LCLAB1
Target Account ID: S-1-5-21-1287529892-1147808573-1947940980-1175
Caller User Name: Administrator
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x225CAE5)
Privileges: -
 
LOGCASTER SERVER
9/26/2005 6:50:27 PM
629
Security
Success Audit
Account Management
Security
LCNTPDC1
Administrator
User Account Disabled:
Target Account Name: tester4
Target Domain: LCLAB1
Target Account ID: S-1-5-21-1287529892-1147808573-1947940980-1175
Caller User Name: Administrator
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x225CAE5)
 
LOGCASTER SERVER
9/26/2005 5:50:23 PM
642
Security
Success Audit
Account Management
Security
LCNTPDC1
Administrator
User Account Changed:
Target Account Name: tester4
Target Domain: LCLAB1
Target Account ID: S-1-5-21-1287529892-1147808573-1947940980-1175
Caller User Name: Administrator
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x225CAE5)
Privileges: -
 
LOGCASTER SERVER
9/26/2005 5:50:23 PM
628
Security
Success Audit
Account Management
Security
LCNTPDC1
Administrator
User Account password set:
Target Account Name: tester4
Target Domain: LCLAB1
Target Account ID: S-1-5-21-1287529892-1147808573-1947940980-1175
Caller User Name: Administrator
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x225CAE5)
 
LOGCASTER SERVER
9/26/2005 5:50:23 PM
626
Security
Success Audit
Account Management
Security
LCNTPDC1
Administrator
User Account Enabled:
Target Account Name: tester4
Target Domain: LCLAB1
Target Account ID: S-1-5-21-1287529892-1147808573-1947940980-1175
Caller User Name: Administrator
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x225CAE5)
 
LOGCASTER SERVER
9/26/2005 5:13:40 PM
642
Security
Success Audit
Account Management
Security
RIPPLE_BACKUP
SYSTEM
User Account Changed:
Account Locked.
Target Account Name: Administrator
Target Domain: RIPPLE_BACKUP
Target Account ID: RIPPLE_BACKUP\Administrator
Caller User Name: RIPPLE_BACKUP$
Caller Domain: SHARKS
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 
LOGCASTER SERVER
9/26/2005 5:13:40 PM
644
Security
Success Audit
Account Management
Security
RIPPLE_BACKUP
SYSTEM
User Account Locked Out:
Target Account Name: Administrator
Target Account ID: RIPPLE_BACKUP\Administrator
Caller Machine Name: RT2K3EDS2
Caller User Name: RIPPLE_BACKUP$
Caller Domain: SHARKS
Caller Logon ID: (0x0,0x3E7)
 
LOGCASTER SERVER
9/26/2005 4:21:18 PM
642
Security
Success Audit
Account Management
Security
LCNTPDC1
Administrator
User Account Changed:
Target Account Name: tester4
Target Domain: LCLAB1
Target Account ID: S-1-5-21-1287529892-1147808573-1947940980-1175
Caller User Name: Administrator
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x225CAE5)
Privileges: -
 
LOGCASTER SERVER
9/26/2005 4:21:13 PM
642
Security
Success Audit
Account Management
Security
LCNTPDC1
Administrator
User Account Changed:
Target Account Name: ssundar
Target Domain: LCLAB1
Target Account ID: S-1-5-21-1287529892-1147808573-1947940980-1107
Caller User Name: Administrator
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x225CAE5)
Privileges: -
 
LOGCASTER SERVER
9/26/2005 4:21:13 PM
629
Security
Success Audit
Account Management
Security
LCNTPDC1
Administrator
User Account Disabled:
Target Account Name: ssundar
Target Domain: LCLAB1
Target Account ID: S-1-5-21-1287529892-1147808573-1947940980-1107
Caller User Name: Administrator
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x225CAE5)
 
LOGCASTER SERVER
9/26/2005 4:21:04 PM
642
Security
Success Audit
Account Management
Security
LCNTPDC1
Administrator
User Account Changed:
Target Account Name: tester4
Target Domain: LCLAB1
Target Account ID: S-1-5-21-1287529892-1147808573-1947940980-1175
Caller User Name: Administrator
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x225CAE5)
Privileges: -
 
LOGCASTER SERVER
9/26/2005 4:21:04 PM
629
Security
Success Audit
Account Management
Security
LCNTPDC1
Administrator
User Account Disabled:
Target Account Name: tester4
Target Domain: LCLAB1
Target Account ID: S-1-5-21-1287529892-1147808573-1947940980-1175
Caller User Name: Administrator
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x225CAE5)
 
LOGCASTER SERVER
9/26/2005 4:11:54 PM
644
Security
Success Audit
Account Management
Security
LCNTPDC1
SYSTEM
User Account Locked Out:
Target Account Name: tester4
Target Account ID: S-1-5-21-1287529892-1147808573-1947940980-1175
Caller Machine Name: RTENGDEV2
Caller User Name: SYSTEM
Caller Domain: NT AUTHORITY
Caller Logon ID: (0x0,0x3E7)
 
LOGCASTER SERVER
9/26/2005 4:06:38 PM
642
Security
Success Audit
Account Management
Security
LCNTPDC1
Administrator
User Account Changed:
Target Account Name: tester4
Target Domain: LCLAB1
Target Account ID: S-1-5-21-1287529892-1147808573-1947940980-1175
Caller User Name: Administrator
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x225CAE5)
Privileges: -
 
LOGCASTER SERVER
9/26/2005 4:06:38 PM
628
Security
Success Audit
Account Management
Security
LCNTPDC1
Administrator
User Account password set:
Target Account Name: tester4
Target Domain: LCLAB1
Target Account ID: S-1-5-21-1287529892-1147808573-1947940980-1175
Caller User Name: Administrator
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x225CAE5)
 
LOGCASTER SERVER
9/26/2005 4:07:10 AM
627
Security
Success Audit
Account Management
Security
CEREBUS
SYSTEM
Change Password Attempt:
Target Account Name: TsInternetUser
Target Domain: CEREBUS
Target Account ID: CEREBUS\TsInternetUser
Caller User Name: CEREBUS$
Caller Domain: 38THPARALLEL
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 

Page:3/3
10/3/2005 3:27:14 PM
Date / Time
Id
Log
Type
Category
Source
Computer
Account
LOGCASTER SERVER
9/26/2005 3:04:48 AM
627
Security
Success Audit
Account Management
Security
LC2KSRV4
SYSTEM
Change Password Attempt:
Target Account Name: TsInternetUser
Target Domain: LC2KSRV4
Target Account ID: LC2KSRV4\TsInternetUser
Caller User Name: LC2KSRV4$
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 
LOGCASTER SERVER
9/26/2005 3:04:14 AM
627
Security
Failure Audit
Account Management
Security
RIPPLE_BACKUP
SYSTEM
Change Password Attempt:
Target Account Name: TsInternetUser
Target Domain: RIPPLE_BACKUP
Target Account ID: RIPPLE_BACKUP\TsInternetUser
Caller User Name: RIPPLE_BACKUP$
Caller Domain: SHARKS
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 
LOGCASTER SERVER
9/25/2005 8:42:32 PM
627
Security
Success Audit
Account Management
Security
VPNSERVER
SYSTEM
Change Password Attempt:
Target Account Name: TsInternetUser
Target Domain: VPNSERVER
Target Account ID: VPNSERVER\TsInternetUser
Caller User Name: VPNSERVER$
Caller Domain: SHARKS
Caller Logon ID: (0x0,0x3E7)
Privileges: -
 
LOGCASTER SERVER