| Event Id | 629 |
| Source | Security |
| Description | User Account Disabled: Target Account Name: <Target Account Name> Target Domain: <Target Domain> Target Account ID: <Target Account ID> Caller User Name: <Caller User Name> Caller Domain: <Caller Domain> Caller Logon ID: <Caller Logon ID> |
| Event Information | According to Microsoft : Cause : This event indicates that a user account has been disabled. There is no Failure Audit form for this audit event record. On computers running Windows 2000 Server or later, this Security event and Security event 626 are replaced by Security event 642. Resolution : The person with administrative rights for the computer should confirm that there are no security implications because of this change. |
| Reference Links | Event ID 629 from Source Security Alternate Event ID in Vista and Windows Server 2008 is 4725. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.