Windows Security Log Event ID 662
662: Security Enabled Universal Group Deleted
On this page
Security universal group deleted
Type:
AD has 2 types of groups: Security and Distribution. Distribution (security disabled) groups are for distribution lists in Exchange and cannot be assigned permissions or rights. Security (security enabled) groups can be used for permissions, rights and as distribution lists.
Scope:
AD has 3 scopes of groups: Local, Global, Universal. See knowledge base article 326265.
This event is logged only on Domain Controllers.
Free Security Log Resources by Randy
- Target Account Name: %1
- Target Domain: %2
- Target Account ID: %3
- Caller User Name: %4
- Caller Domain: %5
- Caller Logon ID: %6
- Privileges: %7
Setup PowerShell Audit Log Forwarding in 4 Minutes