EventID 4732 and 4733 are found on windows 2008 servers when a local group is modified. 4732- member added and 4733 member removed. When this event is generated the "Account Name" field does not contain any data. When similar events are generated on domain controller, the distinguished name of the user is generated within that field. Does anyone know if there is a setting or some sort so that information regarding the user account cvould be populated in that field on member servers. Thanks PaulPaul Glickenhaus

Hello, Thank you for your post. This is a quick note to let you know that we are performing research on this issue. Best Regards Elytis ChengElytis Cheng TechNet Community Support