Windows Security Log Event ID 670

Operating Systems Windows Server 2000
Windows 2003 and XP
CategoryAccount Management
Type Success
Failure
Corresponding events
in Windows 2008
and Vista		  

670: Add SID History

On this page

This event is not confirmed.

In theory this audits the DsAddSidHistory function. Doing so allows the SID to be used in a different forest.

Free Security Log Resources by Randy

Description Fields in 670

  •  Source Account Name: %1
  •  Target Account Name: %2
  •  Target Domain: %3
  •  Target Account ID: %4
  •  Caller User Name: %5
  •  Caller Domain: %6
  •  Caller Logon ID: %7
  •  Privileges: %8

Supercharger Enterprise


Load Balancing for Windows Event Collection

 

Examples of 670

Add SID History
Source Account Name: %1
Target Account Name: %2
Target Domain: %3
Target Account ID: %4
Caller User Name: %5
Caller Domain: %6
Caller Logon ID: %7
Privileges: %8

Top 10 Windows Security Events to Monitor

Free Tool for Windows Event Collection

Stay up-to-date on the Latest in Cybersecurity
Sign up for the Ultimate IT Security newsletter to hear about the latest webinars, patches, CVEs, attacks, and more.
Work Email:

 

Upcoming Webinars
Additional Resources

    Go To Event ID:

    Security Log
    Quick Reference
    Chart
    Download now!