Active Directory: Group Management Events Classification
Below is an informative table about the security events created during group management: Type Scope Created Changed Deleted Member Added Removed Security Local 635 641 638 636 637 Global 631 639 634 632 633 Universal 658 659 662 660 661 Distribution Local 648 649 652 650 651 Global 653 654 657 655 656 Universal 663 664 667 665 666
Read more