Event ID for group enumeration

N

Nathan Bob

Hi,

Similar to 4799 & 4798, are there any event IDs to monitor following activities that is performed on the workstations? By any chance, are there any entries recorded on the domain controller side as well?

net user /domain
net group /domain
net accounts
net accounts /domain

Continue reading...
 
You must log in or register to reply here.

Similar threads

N
netjoin event id 4097 error code 1355 using windows provisioning package.
Replies
0
Views
44
Nr2Stonehill
N
N
netjoin event id 4097 error code 1355 using windows provisioning package.
Replies
0
Views
42
Nr2Stonehill
N
E
How can I resolve constant cases of Event ID 4798? Which I believe is to be my root cause for internet disconnection problems.
Replies
0
Views
57
Elias Ochoa
E
Y
The AD replication is working fine (verified using repadmin commands and active directory sites and services- ), but event ID 4012 continues to appear
Replies
0
Views
26
Yaser vp
Y
J
Error in Configuring Kiosk Mode via Intune - Event ID 404 and 454
Replies
0
Views
108
Jamal Talibi
J
Back
Top Bottom