| Event Id | 684 |
| Source | Security |
| Description | Set ACLs of members in administrators groups: Target Account Name: Cmayz Target Domain: DC=ts,DC=tengo,DC=com Target Account ID: DOMAIN\Cmayz Caller User Name: TS69$ Caller Domain: DOMAIN Caller Logon ID: (0x0,0x3E7) Privileges: |
| Event Information | According to Microsoft: "Set the security descriptor of members of administrative groups." Every 60 minutes on a domain controller a background thread searches all members of administrative groups (such as domain, enterprise, and schema administrators) and applies a fixed security descriptor on them. This event is logged. |
| Reference Links | User
management events Alternate Event ID in Vista and Windows Server 2008 is 4780. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.