Active Directory: Group Management Events Classification

Below is an informative table about the security events created during group management:

Type

Scope

Created

Changed

Deleted

Member

 
         

Added

Removed

Security

Local

635

641

638

636

637

 

Global

631

639

634

632

633

 

Universal

658

659

662

660

661

Distribution

Local

648

649

652

650

651

 

Global

653

654

657

655

656

 

Universal

663

664

667

665

666

Leave a Reply

Your email address will not be published. Required fields are marked *