| ID | Event Description |
|---|---|
| 4672 |
Special privileges assigned to new logon
Audit Success
|
| 4964 |
Special groups have been assigned to a new logon
Audit Success
|