Event ID 641
Security Enabled Global Group ChangedLookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /category:"Account Management"
Audit Category:
Account ManagementLEFT/RIGHT arrow keys for navigation
Back to List