Event ID - 4762

Event Id4762
SourceMicrosoft-Windows-Security-Auditing
DescriptionA member was removed from a security-disabled universal group.

Subject:
      Security ID:<Security ID>
      Account Name:<Account Name>
      Account Domain:<Domain name>
      Logon ID:Logon ID>     

Member:
      Security ID:<Security ID>
      Account Name:<Account Name>
      Group:
      Security ID:<Security ID>
      Group Name:<Group Name>
      Group Domain:<Group Domain>     

Additional Information:
      Privileges:
Event InformationCause :
The user can remove the user/group/computer in Member: from the Universal Distribution group in Group.This event is only logged on domain controllers.
Resolution :
No user action is required.
Reference Links

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.