Event ID - 654

Event Id654
SourceSecurity
DescriptionSecurity Disabled Global Group Changed:

Target Account Name: < Target Account Name>
      Target Domain: < Target Domain>
      Target Account ID: < Target Account ID>
      Caller User Name: < Caller User Name>
      Caller Domain: < Caller Domain>
      Caller Logon ID: < Caller Logon ID>
      Privileges: < Privileges>     

Changed Attributes:
      Sam Account Name: < Sam Account Name>
      Sid History: < Sid History>     

Event InformationCause :
This event is logged when a security-disabled global group was changed.
Resolution :
This is an information event.
Reference LinksAlternate Event ID in Vista and Windows Server 2008 is 4750.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.