2017-04-19 14:12:47 -07:00

1.3 KiB

title, description, ms.pagetype, ms.prod, ms.mktglfcycl, ms.sitesec, author
title description ms.pagetype ms.prod ms.mktglfcycl ms.sitesec author
4765(S) SID History was added to an account. (Windows 10) Describes security event 4765(S) SID History was added to an account. security w10 deploy library Mir0sh

4765(S): SID History was added to an account.

Applies to

  • Windows 10
  • Windows Server 2016

This event generates when SID History was added to an account.

See more information about SID History here: https://technet.microsoft.com/en-us/library/cc779590(v=ws.10).aspx.

There is no example of this event in this document.

Subcategory: Audit User Account Management

Event Schema:

SID History was added to an account.

Subject:

Security ID:%6

Account Name:%7

Account Domain:%8

Logon ID:%9

Target Account:

Security ID:%5

Account Name:%3

Account Domain:%4

Source Account:

Security ID:%2

Account Name:%1

Additional Information:

Privileges:%10

SID List:%11

Required Server Roles: Active Directory domain controller.

Minimum OS Version: Windows Server 2008.

Event Versions: 0.

Security Monitoring Recommendations

  • There is no recommendation for this event in this document.