event id 642

  • Thread starter Thread starter KJ
  • Start date Start date
K

KJ

I have seen multiple id 642 in event viewer showing the
name of enterprise administrator for account management.
These accounts have not yet been created but some have.
Should I be worried that these are showing up or could
ArcServe or Norton Enterprise 8.1 be stirring these up. We
run antivirus in managed mode.
 
We have been migrating Novell home folders over, could AD
be picking up on having a drive mapped to AD fileserver
from Novell box where I am copying pasting from? And this
is why it shows account management id 642 events?
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Auditing of "Account Management" events 642 & 685 1
Event Viewer 3
Event IDs 642 and 644 1
AD object security settings getting erased 10
change administrator password 1
Is someone accessing my computer? 1
Phony threshold warnings (event id 2013) 3
Unexplained 540 Events in Security log on W2K workstation in a dom 0

Back
Top