Event ID 4727

A security-enabled global group was created

A security-enabled global group was created.

Subject:
    Security ID:        %4
    Account Name:       %5
    Account Domain:     %6
    Logon ID:           %7

New Group:
    Security ID:        %3
    Group Name:         %1
    Group Domain:       %2

Attributes:
    SAM Account Name:   %9
    SID History:        %10

Additional Information:
    Privileges:         %8




NameFieldInsertion StringOSExample
Group NameTargetUserName%1Any DnsUpdateProxy
Group DomainTargetDomainName%2Any DOMAIN
Security IDTargetSid%3Any S-1-5-21-345695894-305466303-1622526952-1103
Security IDSubjectUserSid%4Any S-1-5-18
Account NameSubjectUserName%5Any ComputerName$
Account DomainSubjectDomainName%6Any DOMAIN
Logon IDSubjectLogonId%7Any 0x1ff2b
PrivilegesPrivilegeList%8Any View Codes
SAM Account NameSamAccountName%9Any DnsUpdateProxy
SID HistorySidHistory%10Any -


Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /subcategory:"Security Group Management"



LEFT/RIGHT arrow keys for navigation

Back to List