Event Id | 4788 |
Source | Microsoft-Windows-Security-Auditing |
Description | A non-member was removed from a basic application group. Subject: Security ID: <Security ID> Account Name: <Account Name> Account Domain: <Domain Name> Logon ID: <Logon ID> Member: Security ID: <Security ID> Account Name: <Account Name> Group: Security ID: <Security ID> Account Name: <Account Name> Account Domain:<Domain Name> Additional Information: Privileges: |
Event Information | Cause : This event is logged when you remove an exclusion from a basic application group. Resolution : This is an information event and no user action is required. |
Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.