Sep 18 2018 10:51 AM
It means a process running as the user ran a query against the domain admins group to enumerate the members of this group. Some apps do this. Is this something you would expect apps on your network to do? if so, its likely normal. if not its worth looking in to.