Audit policy change Eventid 644
Hi i noticed the username doing the change is always the computer account even if it is changed by a user account. How could we se which user account did it?
Software/Hardware used:
Software/Hardware used:
ASKED:
May 5, 2009 8:27 AM
UPDATED:
May 5, 2009 12:29 PM
Answer Wiki:
Last Wiki Answer Submitted:
Be the first to answer this question.
All Answer Wiki Contributors:
Be the first to answer this question.
To see all answers submitted to the Answer Wiki: View Answer History.
RSS - Discussions Help
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
