Event ID 4720 – A user account was created

This event is logged every time when an user account is created in Active Directory.This event generates on domain controllers, member servers, and workstations.

Why should event ID 4720 be monitored?

• Preventing misuse of privileges
• Potential harmful activity detection
• Operational reasons include gathering information on user activities such as user attendance, peak logon periods, and so on.
• Mandatory compliance

Expert advice:

AD Audit monitors and alarms The User Life cycle Changes such as user account creation, deletion, and modification in real-time make Active Directory auditing considerably easier.

How to create AD Domain User

• Right-click Users in the Active Directory Users and Computers dialogue box.
• Select New > User.
• Enter the domain user information.
• Click Next after the user information is configured.
• Enter and confirm the user password.
• Click Finish after you confirm the user information.

How to create AD group

• In the Active Directory Users and Computers dialog box, right-click Users.
• Choose New > Group
• Enter Group name.
• Set Group scope to Global.
• Set Group type to Security.
• Click OK.

So, that’s all in this blog. I will meet you soon with some other stuff. Have a nice day !!!

Recommended contents

RODC Installation Guide- Step by step guide to install read only domain controller

RODC Filtered Attribute Set

Installing and configuring a RODC in Windows Server-2012

How to find the GUID of Domain Controller

Group Policy Understanding Group Policy Preferences

Group Policy Verification Tool GPOTool Exe

Group Policy Health Check on Specific Domain Controller

What is Netlogon Folder in Active Directory

How to Create Custom Attributes in Active Directory

How Can I Check the Tombstone Lifetime of My Active Directory Forest

How to Determine a Computers AD Site From the Command Line

How to Check the Active Directory Database Integrity

How to Check the Active Directory Database Integrity

Disabling and Enabling the Outbound Replication

DFS Replication Service Stopped Replication

What is Strict Replication Consistency

The replication operation failed because of a schema mismatch between the servers involved

Troubleshooting ad replication error 8418 the replication operation failed because of a schema mismatch between the servers

How to export replication information in txt file

Repadmin Replsummary

Enabling the outbound replication

Guys please don’t forget to like and share the post. You can also share the feedback on below windows techno email id.

If you have any questions feel free to contact us on admin@windowstechno.com also follow us on facebook@windowstechno to get updates about new blog posts.