Event-o-Pedia EventID 1510 - Object is created.

	Event Details
	User Activity->Account Management->Account Changes->Computer Account Changes->Active Roles 7 or higher->EventID 1510 - Object is created.

EventID 1510 - Object is created.

Computer Created

Linked Event:

EventID 1510 - Object is created.

Sample:

Log Name:      ARAdminService
Source:        ARAdminSvc
Date:          11/18/2016 1:30:10 PM
Event ID:      1510
Task Category: ObjectCreate
Level:         Information
Keywords:      Classic,Audit Success
User:          ITSS\igor.ilyin
Computer:      IIZHU1.itss.wm.zhu.cn.qsft
Description:
Object is created. 
Operation GUID: 5437961c-7c7e-43d7-87fc-41c284c35b04 
Object name: Q1323 
Parent container: itss.wm.zhu.cn.qsft/OOUU 
Object class: computer 
Object GUID: e3d85683-ebe2-48ca-bf77-86f99b48de3f

Log Type:

Windows Event Log

Uniquely Identified By:

Log Name:

ARAdminService

Filtering Field	Equals to Value
Source	ARAdminSvc
EventId	1510
InsertionString4	computer

Field Matching

Field	Description	Stored in	Sample Value
When	At what date and time a user activity originated in the system.	-	1/1/2000
Who	Account or user name under which the activity occured.	-	SomeUser
What	The type of activity occurred (e.g. Logon, Password Changed, etc.)	"Computer Created"	Computer Created
Where	The name of the workstation/server where the activity was logged.	-	10.10.10.10
Where From	The name of the workstation/server where the activity was initiated from.	-	10.10.10.10
Severity	Specify the seriousness of the event.	-	High
WhoDomain		-
WhereDomain		-
Whom	Account or user name being managed.	Whom	Robert.Gong