Welcome to Event-o-Pedia
Ex: logon failure -"account disabled" -"LogType:Windows Event Log"
Found categories (1 - Events, 0 - Folders):
EventID 4717 - System security access was granted to an account.
This event record indicates that a user account was granted logon rights (such as "Access this computer from the network" or "Logon as a service"). Note: Certain rights have security implications....
Operating System->Microsoft Windows->Built-in logs->Windows 2008 or higher->Security Log->Policy Change->Authentication Policy Change->EventID 4717 - System security access was granted to an account.