IT Explanations

Clear explanations of IT concepts, protocols, architecture and enterprise technologies.

Concepts, protocols and architecture
Infrastructure, cloud and security
Clear explanations and real-world context
For sysadmins, IT admins and MSPs

All Explanations

Understand the technology behind your infrastructure.

1 explainer foundEvent ID 4728Remove topic filter Clear filters

Windows Event ID 4728 for a user added to a security-enabled global group, with Active Directory, Event Viewer, auditing.

What Is Windows Event ID 4728? Active Directory Group Membership Auditing Explained

Windows Event ID 4728 logs every time a member is added to a security-enabled global group in Active Directory. This explainer covers what the event means, how it works, why it matters for security teams, and how to monitor it effectively.

Jul 18, 202612 min readintermediateEmanuel De Almeida