| Event Id | 4757 |
| Source | Microsoft-Windows-Security-Auditing |
| Description | A member was removed from a security-enabled universal group. Subject: Security ID:<Security ID> Account Name:<Account Name> Account Domain:<Account Domain> Logon ID:<Logon ID> Member: Security ID:<Security ID> Account Name:<Account Name> Group: Security ID:<Security ID> Group Name:<Security ID> Group Domain:<Security ID> Additional Information: Privileges: |
| Event Information | Cause : This event is logged when a member was removed from a security-enabled universal group in Active Directory of a Domain Controller. Resolution : This is an information event and no user action is required. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.