| ID | Event Description |
|---|---|
| 4673 |
A privileged service was called
Audit Success
|
| 4674 |
An operation was attempted on a privileged object
Audit Failure, Audit Success
|
| 576 |
Special privileges assigned to new logon
|
| 577 |
Privileged Service Called
|
| 578 |
Privileged object operation
|