Event ID - 666

Event Id666
SourceSecurity
DescriptionSecurity Disabled Universal Group Member Removed:

Member Name: <Member Name>
      Member ID: <Member ID>
      Target Account Name: <Target Account Name>
      Target Domain: <Target Domain>
      Target Account ID: <Target Account ID>
      Caller User Name: <Caller User Name>
      Caller Domain: <Caller Domain>
      Caller Logon ID: <Caller Logon ID>
      Privileges: <Privileges>      

Event InformationCause :
This event is logged when a member was removed from a security-disabled universal group.
Resolution :
This is an information event and no user action is required.
Reference LinksAlternate Event ID in Vista and Windows Server 2008 is 4762.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.