none
A user account was changed RRS feed

  • Вопрос

  • Добрый день!

    Постоянно получаю на сервере win 2008 сообщение в логах, вроди как не чего критичного, но хотелось бы понять что за изменения происходят и зачем. Не где не могу найти информацию по данному вопросу.

    Может кто подскажет?

    - System 
    
      - Provider 
    
       [ Name]  Microsoft-Windows-Security-Auditing 
       [ Guid]  {54849625-5478-4994-A5BA-3E3B0328C30D} 
     
       EventID 4738 
     
       Version 0 
     
       Level 0 
     
       Task 13824 
     
       Opcode 0 
     
       Keywords 0x8020000000000000 
     
      - TimeCreated 
    
       [ SystemTime]  2019-04-24T06:37:18.295693500Z 
     
       EventRecordID 245459258 
     
       Correlation 
     
      - Execution 
    
       [ ProcessID]  572 
       [ ThreadID]  2920 
     
       Channel Security 
     
       Computer headoffice 
     
       Security 
     
    
    - EventData 
    
      Dummy - 
      TargetUserName Guest 
      TargetDomainName  
      TargetSid S-1-5-21-1875082221-3626298645-183829505-501 
      SubjectUserSid S-1-5-18 
      SubjectUserName  
      SubjectDomainName 
      SubjectLogonId 0x3e7 
      PrivilegeList - 
      SamAccountName Guest 
      DisplayName %%1793 
      UserPrincipalName - 
      HomeDirectory %%1793 
      HomePath %%1793 
      ScriptPath %%1793 
      ProfilePath %%1793 
      UserWorkstations %%1793 
      PasswordLastSet 09.05.2018 11:53:18 
      AccountExpires 15.03.2019 0:00:00 
      PrimaryGroupId 513 
      AllowedToDelegateTo - 
      OldUacValue 0x15 
      NewUacValue 0x15 
      UserAccountControl - 
      UserParameters %%1793 
      SidHistory - 
      LogonHours %%1797 
    
    A user account was changed.
    
    Subject:
    	Security ID:		SYSTEM
    	Account Name:		SERVER$
    	Account Domain:		
    	Logon ID:		0x3e7
    
    Target Account:
    	Security ID:		\Guest
    	Account Name:		Guest
    	Account Domain:		SERVER
    
    Changed Attributes:
    	SAM Account Name:	Guest
    	Display Name:		<value not set>
    	User Principal Name:	-
    	Home Directory:		<value not set>
    	Home Drive:		<value not set>
    	Script Path:		<value not set>
    	Profile Path:		<value not set>
    	User Workstations:	<value not set>
    	Password Last Set:	09.05.2018 11:53:18
    	Account Expires:		15.03.2019 0:00:00
    	Primary Group ID:	513


    24 апреля 2019 г. 6:55

Ответы