Share via

Can "Display Name" or "Full Name" be added to 4740 event?

MICHAEL HENDERSON 1 Reputation point
2022-04-11T14:47:15.27+00:00

We need to retrieve the Full Name of an AD user when locked out. It is possible to add that as an attribute or Other information in the Event 4740?

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,635 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Ian Xue (Shanghai Wicresoft Co., Ltd.) 34,271 Reputation points Microsoft Vendor
    2022-04-19T08:23:21.643+00:00

    Hi,

    Unfortunately, you cannot add other attributes to an event. However, you can filter the event log with PowerShell and get the DisplayName attribute of the domain account that is locked out using the Get-ADUser cmdlet.

    Best Regards,
    Ian Xue

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.