Join Log in
Score:0
Muhanad Muneer avatar Server

A member was added/removed to a security-enabled local group SharePoint search server

am flag
Muhanad Muneer

Hello all This action happened every time at 06:00 AM on SharePoint Search Server and I dont know why this event happened by SP.Farm domain user (Administrator user on the server). Anyone can tell me why this action happened on the system?

Event description:-

A member was added to a security-enabled local group <13>Jan 07 06:11:06 DOMAIN_SPSEARCH AgentDevice=WindowsLog AgentLogFile=Security PluginVersion=7.3.0.41 Source=Microsoft-Windows-Security-Auditing Computer=SPSearch.domain.net OriginatingComputer=X.X.X.X User= Domain= EventID=4732 EventIDCode=4732 EventType=8 EventCategory=13826 RecordNumber=279154794 TimeGenerated=1673064664 TimeWritten=1673064664 Level=Log Always Keywords=Audit Success Task=SE_ADT_ACCOUNTMANAGEMENT_SECURITYGROUP Opcode=Info Message=A member was added to a security-enabled local group. Subject: Security ID: DOMAIN\SP.Farm Account Name: SP.Farm Account Domain: DOmain Logon ID: 0xAF63AFAA7 Member: Security ID: NT AUTHORITY\NETWORK SERVICE Account Name: - Group: Security ID: BUILTIN\IIS_IUSRS Group Name: IIS_IUSRS Group Domain: Builtin Additional Information: Privileges: -

A member was removed from a security-enabled local group <13>Jan 07 06:11:06 DOMAIN_SPSEARCH AgentDevice=WindowsLog AgentLogFile=Security PluginVersion=7.3.0.41 Source=Microsoft-Windows-Security-Auditing Computer=SPSearch.DOMAIN.net OriginatingComputer=X.X.X.X User= Domain= EventID=4733 EventIDCode=4733 EventType=8 EventCategory=13826 RecordNumber=279154795 TimeGenerated=1673064664 TimeWritten=1673064664 Level=Log Always Keywords=Audit Success Task=SE_ADT_ACCOUNTMANAGEMENT_SECURITYGROUP Opcode=Info Message=A member was removed from a security-enabled local group. Subject: Security ID: DOMAIN\SP.Farm Account Name: SP.Farm Account Domain: DOMAIN Logon ID: 0xAF63AFAA7 Member: Security ID: NT AUTHORITY\NETWORK SERVICE Account Name: - Group: Security ID: BUILTIN\IIS_IUSRS Group Name: IIS_IUSRS Group Domain: Builtin Additional Information: Privileges:

123
0 + 0
ธงชาติไทย
Elon Musk
I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.