WinSecWiki > Security Settings > Local Policies > Audit Policy > Account Management > Computer Account

Computer Account Management

This category is only logged on domain controllers. To configure this on Server 2008 and Vista you must use auditpol. Windows 7 and Server 2008 R2 can use Group Policy.

Coverage on events generated by this category are currently in the Security Log Encyclopedia:

Event ID	Title
4741	A computer account was created.
4742	A computer account was changed.
4743	A computer account was deleted.

Back to top

 

Upcoming Webinars Patch Faster, Break Less: A Practical Guide to Windows 11 OS and 3rd Party Application Updates AI Security Hands-On: Understanding and Red Teaming the LLM as a Black Box Inside Entra ID Authentication: How Tokens, MFA, and Conditional Access Work and Where Attackers Break the Chain

Additional Resources