No Windows security event is generated for adding a user account to local administrators'group

Microsoft Windows

Microsoft Windows

Active Members
Joined
Dec 10, 2024
Messages
23,352
Hello,I noticed that on some client endpoints, when someone adds a local or domain joined account to local administrators' group, no event entry (with ID 4732,4735) is generated for it. I searched a lot and checked group policy settings and installed software like syslog forwarders but couldn't find any symptoms why this happens.

Continue reading...
 
You must log in or register to reply here.

Similar threads

Windows 11
No Windows security event is generated for adding a user account to local administrators'group
Replies
0
Views
13
Windows 11
Windows 11
Microsoft Windows
Why is an Event ID generated for a user but not for a group?
Replies
0
Views
8
Microsoft Windows
Microsoft Windows
Windows 10
Why is an Event ID generated for a user but not for a group?
Replies
0
Views
7
Windows 10
Windows 10
J
I need to restrict application access on a Windows 10 PC for only one local user account
Replies
0
Views
15
Joseph Lipchitz
J
J
Windows 11 22H2 Enterprise no option for local account?
Replies
0
Views
11
Joshua Gosnell
J
Back
Top