Event Message:

Security Enabled Global Group Changed:%n\r\n%tTarget Account Name:%t%1%n\r\n%tTarget Domain:%t%2%n\r\n%tTarget Account ID:%t%3%n\r\n%tCaller User Name:%t%4%n\r\n%tCaller Domain:%t%5%n\r\n%tCaller Logon ID:%t%6%n\r\n%tPrivileges:%t%7%n\r\n

Source

Event Log

Event ID

Event Type

Security

Security

641

Success Audit

Explanation:

This event record indicates that a change (other than group membership) has been made to a global group. There is no Failure Audit form of this audit event record. Group changes can have security implications.

User Action:

The person with administrative rights for the computer should check to make sure there are no security implications because of the change.