Hello. I am trying to figure out the differences between Security event IDs 5137 / 5141 vs 4741, 4743, 4720, and 4726..
5137: A directory service object was created
5141: A directory service object was deleted
4741: A computer account was created
4743: A computer account was deleted
4720: A user account was created
4726: A user account was deleted
What exactly do they mean by a directory service object was created / deleted vs a computer or user account being created / deleted?