Event ID 4744
A security-disabled local group was createdA security-disabled local group was created.
Subject:
Security ID: %4
Account Name: %5
Account Domain: %6
Logon ID: %7
New Group:
Security ID: %3
Group Name: %1
Group Domain: %2
Attributes:
SAM Account Name: %9
SID History: %10
Additional Information:
Privileges: %8Lookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /subcategory:"Distribution Group Management"
LEFT/RIGHT arrow keys for navigation
Back to List