Event ID 4761

A member was added to a security-disabled universal group

A member was added to a security-disabled universal group.

Subject:
    Security ID:    %6
    Account Name:   %7
    Account Domain: %8
    Logon ID:       %9

Member:
    Security ID:        %2
    Account Name:       %1

Group:
    Security ID:  %5
    Group Name:   %3
    Group Domain: %4

Additional Information:
    Privileges:     %10




NameFieldInsertion StringOSExample
Account NameMemberName%1Any CN=Andrei,CN=Users,DC=hqcorp,DC=local
Security IDMemberSid%2Any S-1-5-21-1913345275-1711810662-261465553-1120
Group NameTargetUserName%3Any Distribution Universal Group New
Group DomainTargetDomainName%4Any DOMAIN
Security IDTargetSid%5Any S-1-5-21-1913345275-1711810662-261465553-1142
Security IDSubjectUserSid%6Any S-1-5-21-1913345275-1711810662-261465553-500
Account NameSubjectUserName%7Any Administrator
Account DomainSubjectDomainName%8Any DOMAIN
Logon IDSubjectLogonId%9Any 0x1d9153
PrivilegesPrivilegeList%10Any -


Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /subcategory:"Distribution Group Management"



LEFT/RIGHT arrow keys for navigation

Back to List