you could also parse your domain controllers for event 673 and then read the details
_________________________
How to ask questions the smart way <-----------> Before you ask