Monitor and Server Health Group

Monitor pack for monitor Solution 7

The "Account Management" Audit policy is very detailed in Windows 2000 and in later service packs of Windows NT 4.0. By enabling success and failure auditing for this event category, you enable the following events:

•  
• 624 User Account Created
• 625 User Account Type Change
• 626 User Account Enabled
• 627 Change Password Attempt
• 628 User Account password set
• 629 User Account Disabled
• 630 User Account Deleted