| Event Id | 520 |
| Source | Security |
| Description | The system time was changed.      
Process ID: <Process ID>      
Process Name: <Process Name>      
Primary User Name: <Primary User Name>      
Primary Domain: <Primary Domain>      
Primary Logon ID:<Primary Logon ID>      
Client User Name: <Client User Name>      
Client Domain: <Client Domain>      
Client Logon ID: <Client Logon ID>      
Previous Time: <Previous Time>      
New Time: <New Time>     
|
| Event Information | According to Microsoft : Cause : The computer's clock was changed. It might have been synchronized with a time server on the Internet or an intranet, or a user might have manually set the system time. This message is logged for informational purposes only. Resolution : No user action is required. |
| Reference Links | Event ID 520 from Source Security Alternate Event ID in Vista and Windows Server 2008 is 4616. |