What is the Windows Event ID for a user account being created?Format: Windows Event ID Number

The Windows Event ID for a user account being created is 4720.

This event is logged in the Security log of the Windows Operating System whenever a new user account is created. When a user account is added, it provides crucial information, such as the account name, the identifier of the account that created the new account, and the domain in which the account was created. Monitoring these events is essential for auditing and security purposes, as it helps track user account management activities within an organization.

If you're setting up logs for monitoring or auditing purposes, it's beneficial to frequently check for Event ID 4720, especially in environments where user accounts might frequently change or be created, ensuring that unauthorized creations can be detected promptly.