Decoding UAC Flags Values in events 4720, 4738, 4741, and 4742

In Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2, there are four events that contain a user account control (UAC) flags value: 4720 – user account creation 4738 – user account change 4741 – computer account creation 4742 – computer account change This value is a bitmask value, and it’s represented…

0