Account Name shown as a Dash ( - ) in Event Event 4732 | 4733 | 4746 | 4747

SteveB — Thu, 06 Aug 2009 17:14:22 GMT

Event 4732 | 4733 | 4746 | 4747

Why not return the name of the user who has been added to / or removed from a Local Group? Yes, it's provided in the Security ID... provided the tool you are using translates the SID. If not, you are forced to do a SID lookup to know who was added or removed from the group.

I would like to know why the Account Name is being returned as a Dash ( - )?

Or, is it a bug?

-SteveB

UltimateWindowsSecurity.com Forum / Ultimate Windows Security Forum / Security Log / 4732 - A member was added to a security-enabled local group

Account Name shown as a Dash ( - ) in Event Event 4732 | 4733 | 4746 | 4747