Welcome to Event-o-Pedia

Search Advanced Ex: logon failure -"account disabled" -"LogType:Windows Event Log" Found categories (1 - Events, 0 - Folders): EventID 4830 - SID History was removed from an account. Find more information about this event on ultimatewindowssecurity.com. Set-ADUser UserName -remove @{sidhistory="S-1-5-21-xxxxxxxxx-xxxxxxxxx-xxxxxxxxxx-xxxx"} Operating System->Microsoft Windows->Built-in logs->Windows 2008 or higher->Security Log->Account Management->User Account Management->EventID 4830 - SID History was removed from an account.