4722: A user account was enabled
On this page
The user identified by Subject: enabed the user identified by Target Account:. This event is logged both for local SAM accounts and domain accounts. This event is always logged after event 4720 - user account creation. You will also see event ID 4738 informing you of the same information.
The user and logon session that performed the action.
Your entire Windows Event Collection environment on a single pane of glass.
Free.
A user account was enabled.
Subject:
Security ID: ACME-FR\administrator Account Name: administrator Account Domain: ACME-FR Logon ID: 0x20f9d
Target Account:
Security ID: ACME-FR\John.Locke Account Name: John.Locke Account Domain: ACME-FR
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection
Go To Event ID: Must be a 1-5 digit number No such event ID
Security Log Quick Reference Chart Download now!