Event ID: 4964

Special groups have been assigned to a new logon

Special groups have been assigned to a new logon.

Subject:
    Security ID:        %1
    Account Name:       %2
    Account Domain:     %3
    Logon ID:       %4
    Logon GUID: %5

New Logon:
    Security ID:        %6
    Account Name:       %7
    Account Domain:     %8
    Logon ID:       %9
    Logon GUID: %10
    Special Groups Assigned:    %11
Microsoft Documentation

Event ID - 4964





Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /subcategory:"Special Logon"
How to enable Windows Auditing



LEFT/RIGHT arrow keys for navigation

Back to List