Server$ Changing Groups? Expand / Collapse
Author
Message
Posted 4/11/2019 11:33:17 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 4/5/2019 9:29:47 AM
Posts: 1, Visits: 0
I am receiving a several 4735 events informing me that our ADFS server has made changes to the local group "Administrators". I don't understand why this behavior is occurring and I'm hopeful someone may have some insight.

Subject:
Security ID: S-0-0-00
Account Name: SERVER$
Account Domain: DOMAIN
Logon ID: 0x3E7


Group:
Security ID: S-0-0-00-000
Group Name: Administrators
Group Domain: Builtin

Changed Attributes:
SAM Account Name: -
SID History: -

Additional Information:
Privileges: -
Post #8558
Posted 12/6/2019 12:21:55 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 12/6/2019 12:20:55 PM
Posts: 1, Visits: 0
I have the same event. Any ideas?
Post #8610
Posted 3/20/2020 4:00:35 PM
Junior Member

Junior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior Member

Group: Administrators
Last Login: 4/13/2009 5:07:47 PM
Posts: 22, Visits: 0
This is most likely gpupdate causing the 4735's. You can test it by running a gpupdate on the machine and seeing if the event is generated.
Post #8624
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 1:28am