Event ID:
4964
Category:
Logon/Logoff
Subcategory:
Special Logon
Supported on:
Windows Vista, Windows Server 2008
Special groups have been assigned to a new logon.
Subject:
 Security ID:  %1
 Account Name:  %2
 Account Domain:  %3
 Logon ID:  %4
 Logon GUID: %5
New Logon:
 Security ID:  %6
 Account Name:  %7
 Account Domain:  %8
 Logon ID:  %9
 Logon GUID: %10
 Special Groups Assigned: %11
