Skip to content
Entralyzer Docs

Event ID 4720 - A user account was created

Overview:

  • Description: Event 4720 is generated whenever a new user account is created in Active Directory (AD). This can happen manually by an administrator or automatically through scripts, provisioning tools, or system processes. It’s an important event for auditing who and when a user account was created.
  • Category: Account Management
  • Log: Security log (on the domain controller)

Screenshot:

Entralyzer example of user created events