Event Id648
SourceSecurity
DescriptionSecurity Disabled Local Group Created:

Target Account Name: < Target Account Name>
      Target Domain: < Target Domain>
      Target Account ID: < Target Account ID>
      Caller User Name: < Caller User Name>
      Caller Domain: < Caller Domain>
      Caller Logon ID: < Caller Logon ID>
      Privileges: < Privileges>     

Attributes:
      Sam Account Name: <Sam Account Name>
      Sid History: <Sid History>      

Event InformationCause :
This event is logged when a local security group with security disabled was created.
Resolution :
This is an information event and no user action is required.
Reference Links


  Did this information help you to resolve the problem?
  Yes: My problem was resolved.
  No: The information was not helpful / Partially helpful.
  Comments:

Captcha  Refresh