Event ID - 4747

Event Id4747
DescriptionA member was removed from a security-disabled local group.

      Security ID:<Security ID>
      Account Name:<Account Name>
      Account Domain:<Domain name>
      Logon ID:<Logon ID>     

      Security ID:<Security ID>
      Account Name:<Account Name>
      Security ID:<Security ID>
      Group Name:<Group Name>
      Group Domain:<Group Domain>     

Additional Information:
Event InformationCause :
This user can remove the user/group/computer in Member: to the Local Distribution group in Group.This event is only logged on domain controllers.
This is an information event and no user action is required.
Reference Links

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.