Event ID - 684

Event Id684
SourceSecurity
DescriptionSet ACLs of members in administrators groups:
Target Account Name: Cmayz
Target Domain: DC=ts,DC=tengo,DC=com
Target Account ID: DOMAIN\Cmayz
Caller User Name: TS69$
Caller Domain: DOMAIN
Caller Logon ID: (0x0,0x3E7)
Privileges:
Event InformationAccording to Microsoft:

"Set the security descriptor of members of administrative groups."
Every 60 minutes on a domain controller a background thread searches all members of administrative groups (such as domain, enterprise, and schema administrators) and applies a fixed security descriptor on them. This event is logged.
Reference LinksUser management events

Alternate Event ID in Vista and Windows Server 2008 is 4780.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.