| Details | |
| Product: | Windows Operating System |
| Event ID: | 641 |
| Source: | Security |
| Version: | 5.0 |
| Component: | Security Event Log |
| Symbolic Name: | SE_AUDITID_GLOBAL_GROUP_CHANGE |
| Message: | Security Enabled Global Group Changed: Target Account Name: %1 Target Domain: %2 Target Account ID: %3 Caller User Name: %4 Caller Domain: %5 Caller Logon ID: %6 Privileges: %7 |
| Explanation | |
|
This event record indicates that a change (other than group membership) has been made to a global group. There is no Failure Audit form of this audit event record. Group changes can have security implications. |
|
| User Action | |
|
The person with administrative rights for the computer should check to make sure there are no security implications because of the change. |
|