| Details | |
| Product: | Windows Operating System |
| Event ID: | 626 |
| Source: | Security |
| Version: | 5.0 |
| Component: | Security Event Log |
| Symbolic Name: | SE_AUDITID_USER_ENABLED |
| Message: | User Account Enabled: Target Account Name: %1 Target Domain: %2 Target Account ID: %3 Caller User Name: %4 Caller Domain: %5 Caller Logon ID: %6 |
| Explanation | |
|
This event indicates that a disabled user account has been re-enabled. There can be security implications for this action. On computers running Windows 2000 Server or later, this Security event and Security event 629 are replaced by Security event 642. |
|
| User Action | |
|
The person with administrative rights for the computer should confirm that there are no security implications because of this change. If you are running Windows 2000 Server or later, this message is no longer logged to Event Viewer. Instead, search for Security event 642 in Event Viewer. |
|