Detects the creation of a local hidden user account which should not happen for event ID 4720.
Already have an account? Log in
