This report provides a list of all User Account Management
events logged during the specified time period. The list is grouped
by server where the event is generated and sorted by time. The
report includes the following events from the Security event
log:
624—User account created
627—Change password attempt
628—User account password set
630—User account deleted
642—User account changed, including user account
enabled/disabled changes
The columns of this report are defined as follows:
Server
Specifies the name of the server where the user account was
changed.
Event Time
Specifies the time when the event was generated.
Target User Account
Specifies the user account which was changed.
Event #
Specifies the event number.
Event Description
Specifies brief description of the change applied.
Change Applied By
Specifies the user account that applied the change
Data in some columns will not be available if event parameters
are not getting stored for the events. To get data in all columns,
confirm that event parameters are getting stored by the rules
collecting user account change events.