4720 Windows Logs/Security A user account was created. Logged: <Date and time of event> Subcategory: User Account Security ID: <SID of new account> Management Account Name: <name of new account> Keywords: <Outcome as Success or Failure> 4725 Windows Logs/Security A user account was disabled. Logged: <Date and time of event> Subcategory: User Account Security ID: <SID of account> Management Account Name: <name of account> Keywords: <Outcome as Success or Failure> 4726 Windows Logs/Security A user account was deleted. Logged: <Date and time of event> Subcategory: User Account Security ID: <SID of deleted account> Management Account Name: <name of deleted account> Keywords: <Outcome as Success or Failure> 4731 Windows Logs/Security A security-enabled local group was Logged: <Date and time of event> Subcategory: User Account created. Group SID: <SID of group> Management Group Name: <Name of group> Keywords: <Outcome as Success or Failure> 4732 Windows Logs/Security A member was added to a Logged: <Date and time of event> Subcategory: User Account group. Member SID: <SID of user account> Management Group SID: <SID of group> Account Name: <name of user account> Group Name: <Name of group> Group SID Keywords: <Outcome as Success or Failure> 4733 Windows Logs/Security A member was removed from a Logged: <Date and time of event> Subcategory: User Account group. Member SID: <SID of user account> Management Group SID: <SID of group> Account Name: <name of user account> Group Name: <Name of group> Group SID
4720 Windows Logs/Security Subcategory: User Account Management A user account was created. Logged: <Date and time of event> Security ID: <SID of new account> Account Name: <name of new account> Keywords: <Outcome as Success or Failure> 4725 Windows Logs/Security Subcategory: User Account Management A user account was disabled. Logged: <Date and time of event> Security ID: <SID of account> Account Name: <name of account> Keywords: <Outcome as Success or Failure> 4726 Windows Logs/Security Subcategory: User Account Management A user account was deleted. Logged: <Date and time of event> Security ID: <SID of deleted account> Account Name: <name of deleted account> Keywords: <Outcome as Success or Failure> 4731 Windows Logs/Security Subcategory: User Account Management A security-enabled local group was created. Logged: <Date and time of event> Group SID: <SID of group> Group Name: <Name of group> Keywords: <Outcome as Success or Failure> 4732 Windows Logs/Security Subcategory: User Account Management A member was added to a group. Logged: <Date and time of event> Member SID: <SID of user account> Group SID: <SID of group> Account Name: <name of user account> Group Name: <Name of group> Group SID Keywords: <Outcome as Success or Failure> 4733 Windows Logs/Security Subcategory: User Account Management A member was removed from a group. Logged: <Date and time of event> Member SID: <SID of user account> Group SID: <SID of group> Account Name: <name of user account> Group Name: <Name of group> Group SID
Windows%2010%20AU%20and%20Server%202016%20GP%20OS%20Operational%20Guidance%20(FINAL).docx