Skip to main content
AD Academy
Back to all events
4733Security (DC)Groups & rightsWARNLast updated:

Member removed from a domain local group

What it means

Pairs with 4732. Domain Local groups usually hold the actual permissions on resources (shares, printers).

First steps

  1. 1If a user lost share access, look for 4733 in the last few hours.
  2. 2Check who performed it (Subject).

Related events

This reference is a starting point for investigation, not a replacement for your organisation's security policy.