http://itknowledgeexchange.techtarget.com/itanswers Sun, 26 May 2013 01:32:32 +0000 en-US hourly 1 http://itknowledgeexchange.techtarget.com/itanswers/audit-policy-change-eventid-644/ http://itknowledgeexchange.techtarget.com/itanswers/audit-policy-change-eventid-644/#comments Tue, 05 May 2009 08:27:52 +0000 Ditchdog Hi i noticed the username doing the change is always the computer account even if it is changed by a user account. How could we se which user account did it?

]]> http://itknowledgeexchange.techtarget.com/itanswers/audit-policy-change-eventid-644/feed/ 0