| Event Id | 645 |
| Source | Security |
| Description | Computer Account Created: New Account Name: < New Account Name > New Domain: < New Domain> New Account ID: < New Account ID> Caller User Name: < Caller User Name> Caller Domain: < Caller Domain> Caller Logon ID: < Caller Logon ID> Privileges < Privileges> Attributes: Sam Account Name: < Sam Account Name> Display Name: < Display Name> User Principal Name: < User Principal Name> Home Directory: < Home Directory> Home Drive: < Home Drive> Script Path: < Script Path> Profile Path: < Profile Path> User Workstations: < User Workstations> Password Last Set: < Password Last Set> Account Expires: < Account Expires> Primary Group ID: < Primary Group ID> AllowedToDelegateTo: < AllowedToDelegateTo> Old UAC Value: < Old UAC Value> New UAC Value: < New UAC Value> User Account Control: Account Disabled 'Password Not Required' - Enabled 'Workstation Trust Account' - Enabled User Parameters: < User Parameters> Sid History: < Sid History> Logon Hours: DNS Host Name: < DNS Host Name> Service Principal Names: < Service Principal Names> |
| Event Information | Cause : This event is logged when a computer account was created in a Domain controller. Resolution : This is an information event and no user action is required. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.