Log Search

ID	Event Description
4610	An authentication package has been loaded by the Local Security Authority
4611	A trusted logon process has been registered with the Local Security Authority
4614	A notification package has been loaded by the Security Account Manager
4622	A security package has been loaded by the Local Security Authority.
4697	A service was installed in the system