Ordering of windows event IDs 4624 vs 4738 RRS feed

  • Question

  • I'm trying to understand which event ID will come first in the case that an administrator successfully resets an accounts password. This is for event ID 4724 but based on this link it seems that event ID 4738 will also be logged if 4724 is successful. Each event has a different event record ID...should I expect event ID 4724 to always come before 4738?

    Sorry in advance if this question is noobie...I'm new to this stuff.

    • Edited by Jim1212 Thursday, July 9, 2020 10:28 PM
    Thursday, July 9, 2020 10:27 PM