ID Event Description
4752 A member was removed from a security-disabled global group
Domain Controller, Audit Success