| Event Id | 666 |
| Source | Security |
| Description | Security Disabled Universal Group Member Removed: Member Name: <Member Name> Member ID: <Member ID> Target Account Name: <Target Account Name> Target Domain: <Target Domain> Target Account ID: <Target Account ID> Caller User Name: <Caller User Name> Caller Domain: <Caller Domain> Caller Logon ID: <Caller Logon ID> Privileges: <Privileges> |
| Event Information | Cause : This event is logged when a member was removed from a security-disabled universal group. Resolution : This is an information event and no user action is required. |
| Reference Links | Alternate Event ID in Vista and Windows Server 2008 is 4762. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.