Windows EventInformation
Windows Event ID 4739 – Microsoft-Windows-Security-Auditing: User Account Changed
Event ID 4739 logs when a user account is modified in Active Directory or local security database, capturing changes to account properties, group memberships, and security settings for audit compliance.