Windows Security Log Event ID 671

Operating Systems Windows Server 2000
Windows 2003 and XP
CategoryAccount Management
Type Success
Corresponding events
in Windows 2008
and Vista

671: User Account Unlocked

On this page

This event gets logged twice (duplicated)

Free Security Log Resources by Randy

Description Fields in 671

  •  Target Account Name: %1
  •  Target Domain:  %2
  •  Target Account ID: %3
  •  Caller User Name: %4
  •  Caller Domain: %5
  •  Caller Logon ID: %6

Supercharger Enterprise


Examples of 671

User Account Unlocked:
Target Account Name:harold
Target Domain:ELM
Target Account ID:ELM\harold
Caller User Name:administrator
Caller Domain:ELM
Caller Logon ID:(0x0,0x158EB7)

Top 10 Windows Security Events to Monitor

Free Tool for Windows Event Collection


Additional Resources