#event-id-4734

1 article

Windows Events1

Windows security monitoring dashboard showing Event Viewer with security audit logs for group management events

Event 4734

Microsoft-Windows-Security-Auditing

Windows EventInformation

Windows Event ID 4734 – Microsoft-Windows-Security-Auditing: Security-Enabled Local Group Member Removed

Event ID 4734 fires when a member is removed from a security-enabled local group. This security audit event tracks group membership changes for compliance and security monitoring purposes.

March 1812 min