Event Id | 667 |
Source | Security |
Description | Security Disabled Universal Group Deleted: Target Account Name: <Target Account Name>       Target Domain: <Target Domain>       Target Account ID: <Target Account ID>       Caller User Name: <Caller User Name>       Caller Domain: <Caller Domain>       Caller Logon ID: <Caller Logon ID>       Privileges: <Privileges>       |
Event Information | Cause: This event is logged when a security-disabled universal group was deleted. Resolution : This is an information event and no user action is required. --------------------------------------------------------------------------------------------------------- Deletion of any active directory Universal Distribution group will generate this event. Information about the deleted object will be in event message. An event id 565 followed by this will give more information about the object container in AD. |
Reference Links | Alternate Event ID in Vista and Windows Server 2008 is 4763. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.