Current Windows Event ID


https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/appendix-l--events-to-monitor


~>  User Account


4720 624 Low A user account was created.

4722 626 Low A user account was enabled.

4723 627 Low An attempt was made to change an account's password.

4725 629 Low A user account was disabled.

4726 630 Low A user account was deleted.


4738 642 Low A user account was changed.

4740 644 Low A user account was locked out.


4767 671 Low A user account was unlocked.