Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
sertanulucan
Explorer

Harmony Endpoint Event ID:4720 About

Hello there;
Can we block logs generated by windows account event ID 4720 for compliance endpoint? We can be on the short EDR path.

creating a user locally. Can we prevent this at the compliance endpoint?

0 Kudos
1 Reply
PhoneBoy
Admin
Admin

Not sure what you mean by "We can be on the short EDR path."
What version of the Endpoint client is in question?
What is the management server version (or is it cloud-managed)?

0 Kudos