Coming Soon: GET:IT Endpoint Management 1-Day Conference on September 28th at 9:30 AM ET Coming Soon: GET:IT Endpoint Management 1-Day Conference on September 28th at 9:30 AM ET

Event ID 4732 “A member was added to a security-enabled local group”

Home Forums Microsoft Networking and Management Services Active Directory Event ID 4732 “A member was added to a security-enabled local group”

Viewing 1 post (of 1 total)
  • Author
    Posts

  • dcopenhaver
    Participant
    #652120

    Hello,

    I see log entry’s where it’s clear ‘user A’ added ‘user B’ to ‘group C’…. however I also see entries where instead of it being a user that is doing the adding to the group, it is ‘nt authority\system’, the computername$ account. What would make that happen? The only thing I can think of is a process running in the context of ‘system’ performed the action… but I don’t know why that would be happening…. Is it normal?

    Any insight or clarification would be great.

    Thanks,

Viewing 1 post (of 1 total)

You must be logged in to reply to this topic.

Live Webinar: Active Directory Security: What Needs Immediate Priority!Live on Tuesday, October 12th at 1 PM ET

Attacks on Active Directory are at an all-time high. Companies that are not taking heed are being punished, both monetarily and with loss of production.

In this webinar, you will learn:

  • How to prioritize vulnerability management
  • What attackers are leveraging to breach organizations
  • Where Active Directory security needs immediate attention
  • Overall strategy to secure your environment and keep it secured

Sponsored by: