Back to your phpLogCon instanceEventlog Type: Security
Eventlog Source: Security
Event ID: 637
Link to KB Entry
Short Description:
Security Enabled Local Group Member Removed
KnowledgeBase Event Repository
This site is the central interface to the Adiscon Event Repository-
- Details for this entry
-
- Eventlog Type:
- Security
- Eventlog Source:
- Security
- Event ID:
- 637
- Full Description:
- Security Enabled Local Group Member Removed
- Parameter Description:
- Security Enabled Local Group Member Removed:%n
%tMember Name:%t%1%n
%tMember ID:%t%2%n
%tTarget Account Name:%t%3%n
%tTarget Domain:%t%4%n
%tTarget Account ID:%t%5%n
%tCaller User Name:%t%6%n
%tCaller Domain:%t%7%n
%tCaller Logon ID:%t%8%n
%tPrivileges:%t%9%n
- More Informations:
- Cause
This event record indicates that a member has been removed from a local group. This event also occurs when a user account is deleted and removed from the built-in None group used internally by Windows 2000. There is no Failure Audit form of this audit event record. Removing members from groups can have security implications. This is especially true when a user is removed from the Administrator group.
- Search for this Event::
- Search in Knowledge Base • Search in this Forum • Search on Windows-Expert.com
-
- Software Vendor: Microsoft
- Accessed: 3280
Discuss the Event
Discussion for KB Entry 41 - Event ID 637
This is the discussion thread for the Knowledge Base Entry 41
Eventlog Type: Security
Eventlog Source: Security
Event ID: 637
Link to KB Entry
Short Description:
Eventlog Type: Security
Eventlog Source: Security
Event ID: 637
Link to KB Entry
Short Description:
-
knowledgebase - Frequent Poster
- Posts: 128
- Joined: Wed May 28, 2008 10:09 am
About the KnowledgeBase Event Repository
This is a repository of known Windows Events, hopefully together with a description of what it means, when it appears and how to troubleshoot it. The event repository was initially provided as a tool for parser creation but has since evolved. It is now part of the overall knowledgebase in the hope that it provides a useful service to the community. Please add your comments and questions (which we try to answer), as this increases the event repository usefulness for all of us.
