Changed groups (Windows)

Module: Account Integrity

Supported Platforms: Windows 2000, Windows 2003, Windows 2008, Windows Vista, Windows XP

This check reports security groups that were changed after the last group snapshot update. Reported changes include name, members, and user rights. This check does not report security groups that are excluded or not included by the Users to check option.

The following table lists the error messages for the check.

Table: Error messages for Changed groups

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: ESM_GROUP_NAME_CHANGED

Category: Policy Compliance

  • Windows 2000 (105922)

  • Windows 2003 (205922)

  • Windows 2008 (248922)

  • Windows Vista (228919)

  • Windows XP (200919)

Title: Group name changed

Description:The group's name changed after the last snapshot update. If the change is authorized, update the snapshot file. If the change is not authorized, restore the previous group name.

Severity: yellow-1

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [Previous name: %s]

String ID: ESM_GROUP_MEMBER_ADDED

Category: Policy Compliance

  • Windows 2000 (105923)

  • Windows 2003 (205923)

  • Windows 2008 (248923)

  • Windows Vista (228920)

  • Windows XP (200920)

Title: Group member added

Description:The account that is reported in the Information field was added to the group after the last snapshot update. If the addition is authorized, update the snapshot file. If it is not authorized, remove the account from the group.

Severity: yellow-1

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [New member: %s]

String ID: ESM_GROUP_MEMBER_REMOVED

Category: Policy Compliance

  • Windows 2000 (105924)

  • Windows 2003 (205924)

  • Windows 2008 (248924)

  • Windows Vista (228921)

  • Windows XP (200921)

Title: Group member removed

Description:The account that is reported in the Information field was removed from the group after the last snapshot update. If the removal is authorized, update the snapshot file. If it is not authorized, restore it to the group.

Severity: yellow-1

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [Removed member: %s]

String ID: ESM_GROUP_PRIV_ADDED

Category: Policy Compliance

  • Windows 2000 (105925)

  • Windows 2003 (205925)

  • Windows 2008 (248925)

  • Windows Vista (228922)

  • Windows XP (200922)

Title: Group right granted

Description:The user right that is specified in the Information field was granted to the group after the last snapshot update. If the change is authorized, update the snapshot file. If this change is not authorized, revoke the user right.

Severity: yellow-1

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [User right: %s]

String ID: ESM_GROUP_PRIV_REMOVED

Category: Policy Compliance

  • Windows 2000 (105926)

  • Windows 2003 (205926)

  • Windows 2008 (248926)

  • Windows Vista (228923)

  • Windows XP (200923)

Title: Group right revoked

Description:The user right that is reported in the Information field was revoked from the group after the last snapshot update. If the change is authorized, update the snapshot file. If it is not authorized, restore the right to the group.

Severity: yellow-1

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [User right: %s]