| Event Id | 4739 |
| Source | Microsoft-Windows-Security-Auditing |
| Description | Domain Policy was changed. Change Type: Lockout Policy modified Subject: Security ID: <Security ID> Account Name: <Account Name> Account Domain: <Domain name> Logon ID: <Logon ID> Domain: Domain Name: <Domain name> Domain ID: <Domain name> Changed Attributes: Min. Password Age: Max. Password Age: Force Logoff: Lockout Threshold: 7 Lockout Observation Window: 1800 Lockout Duration: 1800 Password Properties: Min. Password Length: Password History Length: Machine Account Quota: Mixed Domain Mode: Domain Behavior Version: OEM Information: Additional Information: Privileges: |
| Event Information | Cause : This log is generated when computer's Security Settings\Account Policy or Account Lockout Policy policy was modified - either via Local Security Policy or Group Policy in Active Directory. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.