Log Name: Security Source: Microsoft Windows Security Event ID: 4738 Keywords: Audit Success #### user account was changed. Subject: Security ID: devfsmendoza\useradmin Account Name: useradmin Account Domain: devfsmendoza Logon ID: 0x65F62 Target Account: Security ID: devfsmendoza\user1 Account Name: user1 Account Domain: devfsmendoza Changed Attributes: SAM Account Name: - Display Name: - User Principal Name: - Home Directory: - Home Drive: - Script Path: - Profile Path: - User Workstations: - Password Last Set: 24/2/2017 1:55:09 PM Account Expires: - Primary Group ID: - AllowedToDelegateTo: - Old UAC Value: - New UAC Value: - User Account Control: - User Parameters: - SID History: - Logon Hours: - Additional Information: Privileges: -