3
1
I would like to know if windows remembers or logs(maybe event viewer) when a new user account is created then added to the administrators localgroup.
Ex..
A network account user creates a local user on a machine called anonuser
then adds it to the administrators localgroup all through the command line.
If another user wants to know who created anonuser
can that be accomplished?
Let's say all the event viewer logs are permanenty wiped. Is it still possible to discover who created
anonuser
? – Beall619 – 2017-03-11T18:53:13.5331@Beall619 In that case I don't think so. – DavidPostill – 2017-03-11T18:53:45.480
That's awesome. – Beall619 – 2017-03-11T18:55:04.230