Accounts Disabled

This query will return results for accounts disabled on a windows 2008 or newer operating system for a given time range:

Continue Reading →

Accounts Enabled

This query will return results on all accounts enabled for a given time range. It is using EventCodes for windows 2008 and newer operating systems:

Continue Reading →