Event ID 649
Security Disabled Local Group ChangedLookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /category:"Account Management"
Audit Category:
Account ManagementLEFT/RIGHT arrow keys for navigation
Back to List