5 pts.
 Audit policy change Eventid 644
Hi i noticed the username doing the change is always the computer account even if it is changed by a user account. How could we se which user account did it?

Software/Hardware used:
ASKED: May 5, 2009  8:27 AM
UPDATED: May 5, 2009  12:29 PM

Answer Wiki:
Last Wiki Answer Submitted:  Be the first to answer this question.
All Answer Wiki Contributors:  Be the first to answer this question.
To see all answers submitted to the Answer Wiki: View Answer History.


Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _