Event ID 622

System Security Access Removed:
    Access Removed: %4
    Account Modified:   %5
    Removed By:
      User Name:    %1
      Domain:       %2
      Logon ID: %3