Event Message:

Security Enabled Local Group Changed: Target Account Name: account Target Domain: name Target Account ID: number Caller User Name: user name Caller Domain: name Caller Logon ID: number Privileges: text

Source

Event Log

Event ID

Event Type

Security

Security

639

Success Audit

Explanation:

This event record indicates that a change (other than group membership) has been made to a local group. There is no Failure Audit form of this audit event record. Group changes can have security implications.

User Action:

The person with administrative rights for the computer should check to make sure there are no security implications for the change.