| Event Id | 671 |
| Source | Security |
| Description | User Account Unlocked: Target Account Name: <Account Name> Target Domain: <Domain Name> Target Account ID: <Target Account ID> Caller User Name: <User Name> Caller Domain: <Domain Name> Caller Logon ID: <Logon ID> |
| Event Information | Cause: This event is logged when you unlock an account that was locked out. Description contains following information: Target account name - User name whose account is unlocked . Target domain - Domain name of the user whose account is unlocked . Target account ID - Account ID of the user whose account unlocked . Caller user name - User name who unlocked the account . Caller domain - Domain name of the user who unlocked the account . Caller logon ID - Logon ID of the user who unlocked the account . User Action: Verify the target account name and the caller user name who unlocked the account is authorized. Note :This event is logged on windows 2000,xp and 2003 server operating system. |
| Reference Links | Alternate Event ID in Vista and Windows Server 2008 is 4767 |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.