mafioso1823
IS-IT--Management
I am auditing security events, and i am seeing in the event viewer this event happening every few minutes:
Event ID: 642 (0x0282)
Type: Success Audit
Description: User Account Changed
Target Account Name: %1 Target Domain: %2
Target Account ID: %3
Caller User Name: %4 Caller Domain: %5
Caller Logon ID: %6 Privileges: %7
Can someone tell me what causes this event because i see this event happening every few minutes and it keeps saying the user account that has been changed is the administrator and guest account.
I am going crazy trying to figure out what causes this event to occur, because i'm not sure if it is being caused by someone trying to hack us or what?
Any help will be very much appreciated, thank you.
Event ID: 642 (0x0282)
Type: Success Audit
Description: User Account Changed
Target Account Name: %1 Target Domain: %2
Target Account ID: %3
Caller User Name: %4 Caller Domain: %5
Caller Logon ID: %6 Privileges: %7
Can someone tell me what causes this event because i see this event happening every few minutes and it keeps saying the user account that has been changed is the administrator and guest account.
I am going crazy trying to figure out what causes this event to occur, because i'm not sure if it is being caused by someone trying to hack us or what?
Any help will be very much appreciated, thank you.