Windows Security Log Event ID 630
Operating Systems Windows Server 2000
Windows XP
Windows Server 2003
Category Account Management
Type Success
Corresponding events
in Windows 2008
and Vista 		4726  
Discussions on Event ID 630

630: User Account Deleted

On this page

Logged when one user (caller user) deletes another user account (target account).

Free Security Log Quick Reference Chart

Description Fields in 630
  • Target Account Name: %1
  • Target Domain: %2
  • Target Account ID: %3
  • Caller User Name: %4
  • Caller Domain: %5
  • Caller Logon ID: %6
  • Privileges: %7

Top 10 Events to Monitor

Examples of 630

User Account Deleted:
  Target Account Name: Dave
  Target Domain: MS0
  Target Account ID: %{S-1-5-21-1234561642-881234518-725345543-1010}
  Caller User Name: Administrator
  Caller Domain: ACME
  Caller Logon ID: (0x0,0xD44E)
  Privileges: -

Keep me up-to-date on the Windows Security Log.
Email*:
*We will NOT share this
Mini-Seminars Covering Event ID 630
Discussions on Event ID 630

 

Upcoming Webinars
Additional Resources