| Event Id | 638 |
| Source | Security |
| Description | Security Enabled Local Group Deleted: Target Account Name: <Target Account Name> Target Domain: <Target Domain> Target Account ID: <Target Account ID> Caller User Name: <Caller User Name> Caller Domain: <Caller Domain> Caller Logon ID: <Caller Logon ID> Privileges: <Privileges> |
| Event Information | According to Microsoft: Cause : This event record indicates that a local group has been deleted. There is no Failure Audit form of this audit event record. Resolution : This is an information event. |
| Reference Links | Event ID 638 from Source Security Alternate Event ID in Vista and Windows Server 2008 is 4734. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.