Event ID 4755

A security-enabled universal group was changed

A security-enabled universal group was changed.

Subject:
    Security ID:    %4
    Account Name:   %5
    Account Domain: %6
    Logon ID:       %7

Group:
    Security ID:  %3
    Group Name:   %1
    Group Domain: %2

Changed Attributes:
    SAM Account Name:   %9
    SID History:        %10

Additional Information:
    Privileges:     %8




NameFieldInsertion StringOSExample
Group NameTargetUserName%1Any Enterprise Read-only Domain Controllers
Group DomainTargetDomainName%2Any DOMAIN
Security IDTargetSid%3Any S-1-5-21-345695894-305466303-1622526952-498
Security IDSubjectUserSid%4Any S-1-5-7
Account NameSubjectUserName%5Any ANONYMOUS LOGON
Account DomainSubjectDomainName%6Any NT AUTHORITY
Logon IDSubjectLogonId%7Any 0x3e6
PrivilegesPrivilegeList%8Any View Codes
SAM Account NameSamAccountName%9Any -
SID HistorySidHistory%10Any -


Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /subcategory:"Security Group Management"



LEFT/RIGHT arrow keys for navigation

Back to List