Supported Event IDs In The Log¶
Event ID numbers in Windows AD systems are used as event IDs in the event records in the log. The supported ID codes and their explanations in their original language are as follows:
EventID |
Description in Original Language |
|---|---|
4624 |
Successful Logon |
4625 |
Unsuccessful Logon |
4723 |
Password Changed |
4724 |
Password Reset |
4628 |
A member was added to a security enabled global group |
4629 |
A member was removed from a security enabled global group |
4732 |
A member was added to a security enabled local group |
4733 |
A member was removed from a security enabled local group |
4746 |
A member was added to a security disabled local group |
4747 |
A member was removed from a security disabled local group |
4751 |
A member was added to a security disabled global group |
4752 |
A member was removed from a security disabled global group |
4756 |
A member was added to a security enabled universal group |
4757 |
A member was removed from a security enabled universal group |
4761 |
A member was added to a security disabled universal group |
4762 |
A member was removed from a security disabled universal group |