Event ID 4744
A security-disabled local group was createdA security-disabled local group was created. Subject: Security ID: %4 Account Name: %5 Account Domain: %6 Logon ID: %7 New Group: Security ID: %3 Group Name: %1 Group Domain: %2 Attributes: SAM Account Name: %9 SID History: %10 Additional Information: Privileges: %8
Lookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /subcategory:"Distribution Group Management"
LEFT/RIGHT arrow keys for navigation
Back to List