s4 group_audit: Add Windows Event Id's to Group membership changes