Home
Resources
Training
About Us
eStore

>

resources > security log resource center > encyclopedia > event 630

 

 

 

 

 

 

 

Latest Blog: Log monitoring and the Terry Childs/City of San Francisco debacle

  

Windows Security Log Events by ID

look up more events by Event ID or Category

Event ID

630

Title

User Account Deleted
Type: Example: Randy's Comments:
Success

OS:

Windows 2000
Windows 2003

Category:

Account Management

User Account Deleted:
Target Account Name:alice
Target Domain:ELMW2
Target Account ID:alice
DEL:a049d836-eeed-44c3-966b-80b829749bc6
Caller User Name:Administrator
Caller Domain:ELMW2
Caller Logon ID:(0x0,0x139E79)
Privileges:-

Logged when one user (caller user) deletes another user account (target account). This event is only logged by W3.

Next:

Get all the tools you need in one newsletter!
Free log parser scripts, clear explanations of Microsoft's latest security bulletins, and more. View a sample issue.
Email Address:
Your email address will not be shared. You may unsubscribe at any time.


Upcoming Webinars by Randy Franklin Smith

IT Audit: Understanding Active Directory Structure and How It Makes Auditing AD Different

Security Log Secrets: Auditing Unauthorized, Unrecognized Software

Filling the Gap in Windows Configuration Baselining


Additional Links

A
D
V

NEW! GFI EventsManager 8 Extends Event Management Capabilities. Find Out More.

Get Randy's Security Log Resource Kit


Ultimate Windows Security is a division of Monterey Technology Group, Inc. ©2006-2007 Monterey Technology Group, All rights reserved.
Disclaimer: We do our best to provide quality information and expert commentary but use all information at your own risk.

Site Map