What event code trigger in event viewer when account restored from recycling bin or how do I get it?

Ken Dang 0 Reputation points
2023-03-22T17:29:18.52+00:00

I enable recycling bin and also file audit. I can see event code 4726 in event viewer when an object/account got deleted. But when I restored them I don't see anything that trigger in event viewer when restored. Event code 5138 is for when object was restored from the AD recycle bin , but I do not see that when I restored something. How can I get that code to event viewer?

Windows for business | Windows Server | User experience | Other
0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.