User Right Removed: User Right: parameter Removed From: name Removed By: User Name: name Domain: user name Logon ID: parameter
| Source | Event Log | Event ID | Event Type |
|---|---|---|---|
| Security | Security | 609 | Success Audit |
This event record indicates that a specific right assigned to the identified user was removed.
The person with administrative rights for the computer should make sure the user right assigned was supposed to be removed.