Event Id4794
SourceMicrosoft-Windows-Security-Auditing
DescriptionAn attempt was made to set the Directory Services Restore Mode administrator password.

Subject:
      Security ID: <Security ID>
      Account Name: <Account Name>
      Account Domain: <Domain Name>
      Logon ID: <Logon ID>     

Additional Information:
      Caller Workstation: <Caller Workstation>
      Status Code:<Status Code>     

Event InformationCause :
This event is logged when an attempt was made to set the directory services restore mode ministrator password.
Reference Links


  Did this information help you to resolve the problem?
  Yes: My problem was resolved.
  No: The information was not helpful / Partially helpful.
  Comments:

Captcha  Refresh