WinSecWiki > Security Settings > Advanced Audit Policies > Account Management > Computer Account Management

Audit Computer Account Management

This category is only logged on domain controllers. To configure this on Server 2008 and Vista you must use auditpol. Windows 7 and Server 2008 R2 can use Group Policy.  

Coverage on events generated by this category are currently in the Security Log Encyclopedia: 

Event ID	Title
4741	A computer account was created.
4742	A computer account was changed.
4743	A computer account was deleted.

Back to top

 

Upcoming Webinars AD Certificate Services: A Massive Chunk of Windows Security Functionality Finally Gets the Security Research It Deserves Linux Security: Locking Down Admin Access with SSH and Sudo Understanding Broken Object Level Authorization: The Quiet Access Control Failure Undermining Today’s Apps Patching 3rd Party Apps on PCs Managed by Intune

Additional Resources