| Event Id | 4764 |
| Source | Microsoft-Windows-Security-Auditing |
| Description | A group's type was changed. Subject: Security ID: < Security ID> Account Name: < Account Name> Account Domain: < Account Domain> Logon ID: < Logon ID> Change Type: < Change Type> Group: Security ID: < Security ID> Group Name: < Group Name> Group Domain: < Group Domain> Additional Information: Privileges: < Privileges> |
| Event Information | Cause : AD has 2 types of groups: Security and Distribution. Distribution (security disabled) groups are for distribution lists in Exchange and cannot be assigned permissions or rights. Security (security enabled) groups can be used for permissions, rights and as distribution lists. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.