Event ID 4722 (enabled), 4725 (disabled), 4726 (deleted) are not visible in the output file
Mumprecht opened this issue · 1 comments
Mumprecht commented
I run the script with the paramter -report ADUserChanges. I see only the log entries with the EventID 4720 and 4738. Do I use the wrong key parameter?
Kindly
Urs
PrzemyslawKlys commented
ADUserStatus -> Events = 4722, 4725, 4767, 4723, 4724, 4726
ADUserChanges -> Events = 4720, 4738