Hi,
I am trying to identify exactly what got changed in a user's account (W2K domain).
I know that a change will create a Security log record, EventID 642, category
"Account Management", type "Success". It will identify the account that got changed
("Target Account ID") and who made the change ( "Caller User Name"). But how do you
tell *exactly* what changed? Is there additional logging that must be enabled? Thank
for any info!
Mike Thommes
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
