| Event Id | 657 |
| Source | Security |
| Description | Security Disabled Global Group Deleted: Target Account Name: < Target Account Name> Target Domain: < Target Domain> Target Account ID: < Target Account ID> Caller User Name: <Caller User Name> Caller Domain: <Caller Domain> Caller Logon ID: <Caller Logon ID> Privileges: <Privileges> |
| Event Information | Cause : This event is logged when a security-disabled global group was deleted. Resolution : This is an information event. ---------------------------------------------------------------------------------------------------------------- Deletion of any ActiveDirectory Global Distribution group will generates this event. Information about the group will be in event message. An event id 565 also will be there which will give you more information about the object container information in AD. |
| Reference Links | Alternate Event ID in Vista and Windows Server 2008 is 4753. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.