Eventlog Type: Security
Eventlog Source: Security
Event ID: 639
Link to KB Entry
Short Description:
Security Enabled Local Group Changed
This event record indicates that a change (other than group membership) has been made to a local group. There is no Failure Audit form of this audit event record. Group changes can have security implications.
Security Enabled Local Group Changed