User Account Disabled: Target Account Name: %1 Target Domain: %2 Target Account ID: %3 Caller User Name: %4 Caller Domain: %5 Caller Logon ID: %6

Details
Product: Windows Operating System
Event ID: 629
Source: Security
Version: 5.0
Component: Security Event Log
Symbolic Name: SE_AUDITID_USER_DISABLED
Message: User Account Disabled: Target Account Name: %1 Target Domain: %2 Target Account ID: %3 Caller User Name: %4 Caller Domain: %5 Caller Logon ID: %6
   
Explanation

This event indicates that a user account has been disabled. There is no Failure Audit form for this audit event record.

On computers running Windows 2000 Server or later, this Security event and Security event 626 are replaced by Security event 642.

   
User Action

The person with administrative rights for the computer should confirm that there are no security implications because of this change.

If you are running Windows 2000 Server or later, this message is no longer logged to Event Viewer. Instead, search for Security event 642 in Event Viewer.

Related:

Leave a Reply