If auditing of account management for success is enabled in Domain
Controller Security policy you should see an event ID 645 in the security
log of the domain controller that created the user account. You can use the
free Event Comb from Microsoft to search security logs for specific Event
IDs and text strings such as computer/user names. --- Steve
> What is the Event created when a computer is joined to the domain and
> if none is made by default how do I set it to make one.
> Thanks
mackdaddy315 - 20 Jun 2006 21:05 GMT
found the following....
http://www.eventid.net/display.asp?eventid=646&eventno=1800&source=Security&phase=1
> If auditing of account management for success is enabled in Domain
> Controller Security policy you should see an event ID 645 in the security
[quoted text clipped - 5 lines]
> > if none is made by default how do I set it to make one.
> > Thanks