Event ID:
4672
Category:
Privilege Use
Subcategory:
Sensitive Privilege Use / Non Sensitive Privilege Use
Supported on:
Windows Vista, Windows Server 2008
Special privileges assigned to new logon.
Subject:
Security ID: %1
Account Name: %2
Account Domain: %3
Logon ID: %4
Privileges: %5