Can not find Event with 4741 on windows server 2019

Volodymyr Vystavkin 0 Reputation points
2023-11-21T19:16:59.4933333+00:00

Hi

As I think, we could find out who joined a computer to the domain by checking event viewer.
I could look on my domain controllers in the security log for Event 4741 however i can't not find a log with this id on windows server 2019

Or getting a list of computer who joined to a domain by using powershell.

Get-ADComputer -Filter * -Properties ms-DS-CreatorSID | Where-Object -FilterScript { $_."ms-DS-CreatorSID"
 -ne $Null } | Format-Table -AutoSize -Property Name,@{Label='User';Expression={(New-Object 
System.Security.Principal.SecurityIdentifier($_."mS-DS-CreatorSID".Value)).Translate
([System.Security.Principal.NTAccount]).Value}}

The following link can be for your refernece.
https://www.petenetlive.com/KB/Article/0001536

Windows Server 2019
Windows Server 2019
A Microsoft server operating system that supports enterprise-level management updated to data storage.
3,599 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Anonymous
    2023-11-21T19:24:28.3266667+00:00

    Might be that the auditing was not yet set up.

    https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-computer-account-management

    --please don't forget to close up the thread here by marking answer if the reply is helpful--


  2. Daisy Zhou 21,046 Reputation points Microsoft Vendor
    2023-11-22T06:28:11.8166667+00:00

    Hello Volodymyr Vystavkin,

    Thank you for posting in Q&A forum.

    Did you try to add one machine to domain? Or did you create one machine on the Domain Controller?

    In my lab, after I create a machine in the domain, I can see event ID 4741 below.

    You can try to add one machine to domain or create one machine on the Domain Controller, and then check if you can see event ID 4741 via Security log.
    User's image

    I hope the information above is helpful.

    If you have any question or concern, please feel free to let us know.

    Best Regards,
    Daisy Zhou

    0 comments No comments