Monitor Pack (MS6) - Windows - Monitor Computer Account Management

The "Account Management" Audit policy is very detailed in Windows 2000 and in later service packs of Windows NT 4.0. By enabling success and failure auditing for this event category, you enable the following events:

• 645 Computer Account Created
• 646 Computer Account Changed
• 647 Computer Account Deleted