Event ID - 4791

Event Id4791
SourceMicrosoft-Windows-Security-Auditing
DescriptionA basic application group was changed.

Subject:
      Security ID: <Security ID>
      Account Name: <Account Name>
      Account Domain: <Domain Name>
      Logon ID: <Logon ID>     

Group:
      Security ID: <Security ID>
      Account Name: <Account Name>
      Account Domain: <Domain Name>     

Attributes:
      SAM Account Name: <SAM Account Name>
      SID History: <SID History>     

Additional Information:
      Privileges:
Event InformationCause :
This event is logged when a basic application group was changed.
Resolution :
This is an information event and no user action is required.
Reference Links

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.