Event Id520
SourceSecurity
DescriptionThe system time was changed.
      Process ID: <Process ID>
      Process Name: <Process Name>
      Primary User Name: <Primary User Name>
      Primary Domain: <Primary Domain>
      Primary Logon ID:<Primary Logon ID>
      Client User Name: <Client User Name>
      Client Domain: <Client Domain>
      Client Logon ID: <Client Logon ID>
      Previous Time: <Previous Time>
      New Time: <New Time>     

Event InformationAccording to Microsoft :
Cause :
The computer's clock was changed. It might have been synchronized with a time server on the Internet or an intranet, or a user might have manually set the system time. This message is logged for informational purposes only.
Resolution :
No user action is required.
Reference LinksEvent ID 520 from Source Security
Alternate Event ID in Vista and Windows Server 2008 is 4616.


  Did this information help you to resolve the problem?
  Yes: My problem was resolved.
  No: The information was not helpful / Partially helpful.
  Comments:

Captcha  Refresh