Security Enabled Global Group Changed: Target Account Name: %1 Target Domain: %2 Target Account ID: %3 Caller User Name: %4 Caller Domain: %5 Caller Logon ID: %6 Privileges: %7

Details
Product: Windows Operating System
Event ID: 641
Source: Security
Version: 5.0
Component: Security Event Log
Symbolic Name: SE_AUDITID_GLOBAL_GROUP_CHANGE
Message: Security Enabled Global Group Changed: Target Account Name: %1 Target Domain: %2 Target Account ID: %3 Caller User Name: %4 Caller Domain: %5 Caller Logon ID: %6 Privileges: %7
   
Explanation

This event record indicates that a change (other than group membership) has been made to a global group. There is no Failure Audit form of this audit event record.

Group changes can have security implications.

   
User Action

The person with administrative rights for the computer should check to make sure there are no security implications because of the change.

Related:

Leave a Reply