Welcome to Event-o-Pedia
Ex: logon failure -"account disabled" -"LogType:Windows Event Log"
Found categories (1 - Events, 0 - Folders):
EventID 4718 - System security access was removed from an account.
This event record indicates that logon rights (such as "Access this computer from the network" or "Logon as a service") were removed from a user account. Access Right field contains a list of removed...
Operating System->Microsoft Windows->Built-in logs->Windows 2008 or higher->Security Log->Policy Change->Authentication Policy Change->EventID 4718 - System security access was removed from an account.