| Event Id | 656 |
| Source | Security |
| Description | Security Disabled Global Group Member Removed: Member Name: < Member Name> Member ID: < Member ID> Target Account Name: < Target Account Name> Target Domain: < Target Domain> Target Account ID: < Target Account ID> Caller User Name: <Caller User Name> Caller Domain: <Caller Domain> Caller Logon ID: <Caller Logon ID> Privileges: <Privileges> |
| Event Information | Cause : This event is logged when a member was removed from a security-disabled global group. Resolution: This is an information event. |
| Reference Links | Alternate Event ID in Vista and Windows Server 2008 is 4752. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.