UltimateWindowsSecurity.com Forum / Ultimate Windows Security Forum / Security Log / 632 - Security Enabled Global Group Member Added / Modifying SID history attribute / Latest PostsInstantForum.NET v4.1.4UltimateWindowsSecurity.com Forumhttp://forum.ultimatewindowssecurity.com/noreply@ultimatewindowssecurity.comTue, 07 Feb 2012 12:24:25 GMT20RE: Modifying SID history attributehttp://forum.ultimatewindowssecurity.com/Topic256-79-1.aspxNot this event. Instead look at event ID 641 - <A href="http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=641">Security Enabled Global Group Changed</A>Wed, 04 Nov 2009 10:24:46 GMTRandyFranklinSmithModifying SID history attributehttp://forum.ultimatewindowssecurity.com/Topic256-79-1.aspxWould modifying a group's SID history attribute (by adding or removing a SID) generate this security event log or any other event log?Tue, 03 Nov 2009 13:08:32 GMTJames