Event Id | 654 |
Source | Security |
Description | Security Disabled Global Group Changed: Target Account Name: < Target Account Name>       Target Domain: < Target Domain>       Target Account ID: < Target Account ID>       Caller User Name: < Caller User Name>       Caller Domain: < Caller Domain>       Caller Logon ID: < Caller Logon ID>       Privileges: < Privileges>      Changed Attributes:       Sam Account Name: < Sam Account Name>       Sid History: < Sid History>      |
Event Information | Cause : This event is logged when a security-disabled global group was changed. Resolution : This is an information event. |
Reference Links | Alternate Event ID in Vista and Windows Server 2008 is 4750. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.