| Event Id | 684 | | Source | Security | | Description | Set ACLs of members in administrators groups:
Target Account Name: Cmayz
Target Domain: DC=ts,DC=tengo,DC=com
Target Account ID: DOMAIN\Cmayz
Caller User Name: TS69$
Caller Domain: DOMAIN
Caller Logon ID: (0x0,0x3E7)
Privileges: | | Event Information | According to Microsoft:
"Set the security descriptor of members of administrative groups."
Every 60 minutes on a domain controller a background thread searches all members of administrative groups (such as domain, enterprise, and schema administrators) and applies a fixed security descriptor on them. This event is logged. | | Reference Links | User
management events
Alternate Event ID
in Vista and Windows Server 2008 is 4780. |
|
|
