WinSecWiki > Security Settings > Local Policies > Audit Policy > Account Management > Computer Account

Computer Account Management

This category is only logged on domain controllers. To configure this on Server 2008 and Vista you must use auditpol. Windows 7 and Server 2008 R2 can use Group Policy.

Coverage on events generated by this category are currently in the Security Log Encyclopedia:

Event ID	Title
4741	A computer account was created.
4742	A computer account was changed.
4743	A computer account was deleted.

Back to top

 

Upcoming Webinars Anatomy of a Cloud Hack: The Cloudflare/Okta Compromise – A Story of Tokens, Lateral Movement, Persistence and the Salvation of Zero Trust and Hard MFA Tokens

Additional Resources