Event Message:

Security Disabled Local Group Created: Target Account Name: account Target Domain: name Target Account ID: number Caller User Name: user name Caller Domain: name Caller Logon ID: number Privileges: text

Source Event Log Event ID Event Type
Security Security 635 Success Audit

Explanation:

This event record indicates that a local group account has been created. There is no Failure Audit form of this audit event record.