#event-id-4729

1 article

Windows Events1

Windows Event Viewer displaying Active Directory security audit logs on a professional monitoring setup

Event 4729

Microsoft-Windows-Security-Auditing

Windows EventInformation

Windows Event ID 4729 – Microsoft-Windows-Security-Auditing: A Member was Removed from a Security-Enabled Global Group

Event ID 4729 logs when a user or computer account is removed from a security-enabled global group in Active Directory. This audit event tracks group membership changes for security monitoring and compliance.

March 1812 min