Page:1/2
10/4/2005 4:45:50 PM
User accounts creations and deletions
Description
Allows reporting on all collected events from the monitored systems.
For more information on various Windows events, go to :
http://www.microsoft.com/technet/support/eventserrors.mspx
Parameters
Database Servers
All
Computers
All
Accounts
All
Sources
Security
Categories
Account Management
IDs
624,626,629,630
Logs
Security
Types
All
Message Search Criteria
None
Time Frame
Last 4 Month(s)
Start Date Time
2005-07-01 00:00:00
End Date Time
2005-11-01 00:00:00
Server
Date / Time
Id
Log
Type
Category
Source
Computer
Account
LOGCASTER SERVER
9/26/2005 6:50:27 PM
629
Security
Success Audit
Account Management
Security
LCNTPDC1
Administrator
User Account Disabled:
Target Account Name: tester4
Target Domain: LCLAB1
Target Account ID: S-1-5-21-1287529892-1147808573-1947940980-1175
Caller User Name: Administrator
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x225CAE5)
  
LOGCASTER SERVER
9/26/2005 5:50:23 PM
626
Security
Success Audit
Account Management
Security
LCNTPDC1
Administrator
User Account Enabled:
Target Account Name: tester4
Target Domain: LCLAB1
Target Account ID: S-1-5-21-1287529892-1147808573-1947940980-1175
Caller User Name: Administrator
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x225CAE5)
  
LOGCASTER SERVER
9/26/2005 4:21:13 PM
629
Security
Success Audit
Account Management
Security
LCNTPDC1
Administrator
User Account Disabled:
Target Account Name: ssundar
Target Domain: LCLAB1
Target Account ID: S-1-5-21-1287529892-1147808573-1947940980-1107
Caller User Name: Administrator
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x225CAE5)
  
LOGCASTER SERVER
9/26/2005 4:21:04 PM
629
Security
Success Audit
Account Management
Security
LCNTPDC1
Administrator
User Account Disabled:
Target Account Name: tester4
Target Domain: LCLAB1
Target Account ID: S-1-5-21-1287529892-1147808573-1947940980-1175
Caller User Name: Administrator
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x225CAE5)
  
LOGCASTER SERVER
9/23/2005 12:15:01 PM
630
Security
Success Audit
Account Management
Security
LCNTPDC1
Administrator
User Account Deleted:
Target Account Name: tester2
Target Domain: LCLAB1
Target Account ID: S-1-5-21-1287529892-1147808573-1947940980-1173
Caller User Name: Administrator
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x225470E)
Privileges: -
  
LOGCASTER SERVER
9/23/2005 12:14:36 PM
630
Security
Success Audit
Account Management
Security
LCNTPDC1
Administrator
User Account Deleted:
Target Account Name: test user
Target Domain: LCLAB1
Target Account ID: S-1-5-21-1287529892-1147808573-1947940980-1168
Caller User Name: Administrator
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x225470E)
Privileges: -
  
LOGCASTER SERVER
9/23/2005 12:02:04 PM
626
Security
Success Audit
Account Management
Security
LCNTPDC1
Administrator
User Account Enabled:
Target Account Name: tester4
Target Domain: LCLAB1
Target Account ID: S-1-5-21-1287529892-1147808573-1947940980-1175
Caller User Name: Administrator
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x2249C3B)
  
LOGCASTER SERVER
9/23/2005 12:02:03 PM
624
Security
Success Audit
Account Management
Security
LCNTPDC1
Administrator
User Account Created:
New Account Name: tester4
New Domain: LCLAB1
New Account ID: S-1-5-21-1287529892-1147808573-1947940980-1175
Caller User Name: Administrator
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x2249C3B)
Privileges -
  
LOGCASTER SERVER
9/23/2005 12:01:10 PM
630
Security
Success Audit
Account Management
Security
LCNTPDC1
Administrator
User Account Deleted:
Target Account Name: tester3
Target Domain: LCLAB1
Target Account ID: S-1-5-21-1287529892-1147808573-1947940980-1174
Caller User Name: Administrator
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x2249C3B)
Privileges: -
  
LOGCASTER SERVER
9/23/2005 11:56:52 AM
624
Security
Success Audit
Account Management
Security
LCNTPDC1
Administrator
User Account Created:
New Account Name: tester3
New Domain: LCLAB1
New Account ID: S-1-5-21-1287529892-1147808573-1947940980-1174
Caller User Name: Administrator
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x2249C3B)
Privileges -
  
LOGCASTER SERVER
9/23/2005 11:56:52 AM
626
Security
Success Audit
Account Management
Security
LCNTPDC1
Administrator
User Account Enabled:
Target Account Name: tester3
Target Domain: LCLAB1
Target Account ID: S-1-5-21-1287529892-1147808573-1947940980-1174
Caller User Name: Administrator
Caller Domain: LCLAB1
Caller Logon ID: (0x0,0x2249C3B)
  
LOGCASTER SERVER
9/23/2005 9:14:50 AM
630
Security
Success Audit
Account Management
Security
HERCULES
truger
User Account Deleted:
Target Account Name: cogletree
Target Domain: SHARKS
Target Account ID: %{S-1-5-21-796845957-1958367476-725345543-1641}
Caller User Name: truger
Caller Domain: SHARKS
Caller Logon ID: (0x0,0x16AB4EF0)
Privileges: -
  
LOGCASTER SERVER
9/13/2005 4:46:13 PM
624
Security
Success Audit
Account Management
Security
LOGCASTERPROD
venkat
User Account Created:
New Account Name: RTRU
New Domain: LOGCASTERPROD
New Account ID: LOGCASTERPROD\RTRU
Caller User Name: venkat
Caller Domain: SHARKS
Caller Logon ID: (0x0,0x14BD85)
Privileges -
Attributes:
Sam Account Name: RTRU
Display Name: <value not set>

User Principal Name: -
Home Directory: <value not set>

Home Drive: <value not set>

Script Path: <value not set>

Profile Path: <value not set>

User Workstations: <value not set>

Password Last Set: <never>

Account Expires: <never>

Primary Group ID: 513
AllowedToDelegateTo: -
Old UAC Value: 0xD01C8
New UAC Value: 0xD01C8
User Account Control: -
User Parameters: <value not set>

Sid History: -
Logon Hours: <value changed, but not displayed>
  
LOGCASTER SERVER
9/13/2005 4:46:13 PM
626
Security
Success Audit
Account Management
Security
LOGCASTERPROD
venkat
User Account Enabled:
Target Account Name: RTRU
Target Domain: LOGCASTERPROD
Target Account ID: LOGCASTERPROD\RTRU
Caller User Name: venkat
Caller Domain: SHARKS
Caller Logon ID: (0x0,0x14BD85)
  
LOGCASTER SERVER
8/25/2005 9:41:56 AM
630
Security
Success Audit
Account Management
Security
HERCULES
truger
User Account Deleted:
Target Account Name: jivey
Target Domain: SHARKS
Target Account ID: %{S-1-5-21-796845957-1958367476-725345543-1149}
Caller User Name: truger
Caller Domain: SHARKS
Caller Logon ID: (0x0,0x4319861)
Privileges: -
  
LOGCASTER SERVER
8/25/2005 9:41:14 AM
630
Security
Success Audit
Account Management
Security
HERCULES
truger
User Account Deleted:
Target Account Name: logcastertest
Target Domain: SHARKS
Target Account ID: %{S-1-5-21-796845957-1958367476-725345543-1215}
Caller User Name: truger
Caller Domain: SHARKS
Caller Logon ID: (0x0,0x4319861)
Privileges: -
  
LOGCASTER SERVER
8/25/2005 9:41:10 AM
630
Security
Success Audit
Account Management
Security
HERCULES
truger
User Account Deleted:
Target Account Name: kslattery
Target Domain: SHARKS
Target Account ID: %{S-1-5-21-796845957-1958367476-725345543-1217}
Caller User Name: truger
Caller Domain: SHARKS
Caller Logon ID: (0x0,0x4319861)
Privileges: -
  
Page:2/2
10/4/2005 4:45:50 PM
Server
Date / Time
Id
Log
Type
Category
Source
Computer
Account
LOGCASTER SERVER
8/25/2005 9:40:10 AM
630
Security
Success Audit
Account Management
Security
HERCULES
truger
User Account Deleted:
Target Account Name: sandrat
Target Domain: SHARKS
Target Account ID: %{S-1-5-21-796845957-1958367476-725345543-1188}
Caller User Name: truger
Caller Domain: SHARKS
Caller Logon ID: (0x0,0x4319861)
Privileges: -
  
LOGCASTER SERVER
8/25/2005 9:22:01 AM
624
Security
Success Audit
Account Management
Security
HERCULES
truger
User Account Created:
New Account Name: fvessells
New Domain: SHARKS
New Account ID: SHARKS\fvessells
Caller User Name: truger
Caller Domain: SHARKS
Caller Logon ID: (0x0,0x4319861)
Privileges -