Article ID: 173059 - View products that this article applies to.
This article was previously published under Q173059
This article has been archived. It is offered "as is" and will no longer be updated.
When audit policies are set to log User and Group Management events, some Event IDs are not recorded in the event log when the event to which they refer occurs.
The following events should be recorded when auditing User and Group Management events:
To resolve this problem, obtain the latest service pack for Windows NT 4.0 or Windows NT Server 4.0,Terminal Server Edition. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/152734/EN-US/ )How to Obtain the Latest WindowsNT 4.0 Service Pack
Microsoft has confirmed that this is a problem in Windows NT 4.0 and Windows NT Server 4.0,Terminal Server Edition. This problem was first corrected in Windows NT 4.0 Service Pack 4.0 and Windows NTServer 4.0, Terminal Server Edition Service Pack 4.
Article ID: 173059 - Last Review: October 7, 2013 - Revision: 1.2