Event ID:
4739
Category:
Policy Change
Subcategory:
Authentication Policy Change
Supported on:
Windows Vista, Windows Server 2008
Domain Policy was changed.
Change Type:  %1 modified
Subject:
 Security ID:  %4
 Account Name:  %5
 Account Domain:  %6
 Logon ID:  %7
Domain:
 Domain Name:  %2
 Domain ID:  %3
Changed Attributes:
 Min. Password Age: %9
 Max. Password Age: %10
 Force Logoff:  %11
 Lockout Threshold: %12
 Lockout Observation Window: %13
 Lockout Duration: %14
 Password Properties: %15
 Min. Password Length: %16
 Password History Length: %17
 Machine Account Quota: %18
 Mixed Domain Mode: %19
 Domain Behavior Version: %20
 OEM Information: %21
Additional Information:
 Privileges:  %8
