| Event Id | 4705 |
| Source | Microsoft-Windows-Security-Auditing |
| Description | A user right was removed. Subject: Security ID:<Security ID> Account Name:<Account Name> Account Domain:<Domain name> Logon ID:<Logon ID> Target Account: Account Name:<Account Name> Removed Right: User Right: SeTcbPrivilege |
| Event Information | Cause : This event is logged when change to user right assignments on this computer including the right and user or group that lost the right. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.