670: Add SID History
On this page
This event is not confirmed.
In theory this audits the DsAddSidHistory function. Doing so allows the SID to be used in a different forest.
Add SID History Source Account Name: %1 Target Account Name: %2 Target Domain: %3 Target Account ID: %4 Caller User Name: %5 Caller Domain: %6 Caller Logon ID: %7 Privileges: %8
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection
Go To Event ID:
Security Log Quick Reference Chart Download now!