#event-id-4749

1 article

Windows Events1

Active Directory security audit logs displayed in Windows Event Viewer on a professional monitoring workstation

Event 4749

Microsoft-Windows-Security-Auditing

Windows EventInformation

Windows Event ID 4749 – Microsoft-Windows-Security-Auditing: Security-Enabled Global Group Deleted

Event ID 4749 logs when a security-enabled global group is deleted from Active Directory. This audit event helps track group management changes and potential security risks.

March 189 min