I am not seeing IDS events for "User_Removed_from_Universal_Grp " in Data Center Security even though I am seeing 4757 event in the Windows logs.

Products

• Embedded Security Critical System Protection
• Critical System Protection
• Data Center Security Monitoring Edition
• Data Center Security Server Advanced

Issue/Introduction

Customer is using an older IDS baseline detection policy that is broken and needs to upgrade.

Resolution

Upgrade your IDS baseline detection policy to the latest version will resolve this issue.