#user-management

2 articles

Windows Events2

Windows Event Viewer displaying security audit logs for user account management monitoring

Windows Event ID 5633 – Security-Auditing: User Account Management Audit Event

Event ID 5633 tracks user account management operations in Windows security auditing, firing when user accounts are created, modified, or deleted through administrative actions.

March 1812 min

Windows security monitoring dashboard displaying Event ID 4765 user management failure events

Event 4765

Microsoft-Windows-Security-Auditing

Windows EventWarning

Windows Event ID 4765 – Microsoft-Windows-Security-Auditing: User Account Management Failure

Event ID 4765 indicates a failed attempt to manage user account properties or group memberships in Active Directory, typically due to insufficient permissions or policy violations.

March 1812 min