#event-id-4728

1 article

Windows Events1

Windows Active Directory management console showing group membership administration and security event monitoring

Event 4728

Microsoft-Windows-Security-Auditing

Windows EventInformation

Windows Event ID 4728 – Microsoft-Windows-Security-Auditing: A Member Was Added to a Security-Enabled Global Group

Event ID 4728 fires when a user or computer account is added to a security-enabled global group in Active Directory. This audit event tracks group membership changes for security monitoring and compliance.

March 1812 min