|Product:||Windows Operating System|
|Component:||Security Event Log|
|Message:||User Account Disabled: Target Account Name: %1 Target Domain: %2 Target Account ID: %3 Caller User Name: %4 Caller Domain: %5 Caller Logon ID: %6|
This event indicates that a user account has been disabled. There is no Failure Audit form for this audit event record.
On computers running Windows 2000 Server or later, this Security event and Security event 626 are replaced by Security event 642.
The person with administrative rights for the computer should confirm that there are no security implications because of this change.
If you are running Windows 2000 Server or later, this message is no longer logged to Event Viewer. Instead, search for Security event 642 in Event Viewer.