Event-o-Pedia EventID 576 - Special privileges assigned to new logon (Logon category)

	Event Details
	User Activity->Logons->Successful Logons->Windows 2000-2003->EventID 576 - Special privileges assigned to new logon (Logon category)

EventID 576 - Special privileges assigned to new logon (Logon category)

Linked Event:

EventID 576 - Special privileges assigned to new logon

Sample:

Event Type:	                     Success Audit
Event Source:	Security
Event Category:	Logon/Logoff 
Event ID:	                      576
Date:		12.12.2010
Time:		10:15:34
User:		NT AUTHORITY\SYSTEM
Computer:	                     DC1
Description:
Special privileges assigned to new logon:
 	User Name:	                     DC1$
 	Domain:		RESEARCH
 	Logon ID:		(0x0,0x33C06A88)
 	Privileges:	                     SeSecurityPrivilege
			SeBackupPrivilege
			SeRestorePrivilege
			SeTakeOwnershipPrivilege
			SeDebugPrivilege
			SeSystemEnvironmentPrivilege
			SeLoadDriverPrivilege
			SeImpersonatePrivilege
			SeAssignPrimaryTokenPrivilege

Log Type:

Windows Event Log

Uniquely Identified By:

Log Name:

Security

Filtering Field	Equals to Value
OSVersion	Windows 2000 Windows XP Windows 2003
Source	Security
Category	Logon/Logoff
EventId	576

Field Matching

Field	Description	Stored in	Sample Value
When	At what date and time a user activity originated in the system.	DateTime	1/1/2000
Who	Account or user name under which the activity occured.	User Name	DC1$
What	The type of activity occurred (e.g. Logon, Password Changed, etc.)	"Special Privileges assigned"	Special Privileges assigned
Where	The name of the workstation/server where the activity was logged.	Computer
Where From	The name of the workstation/server where the activity was initiated from.	-	10.10.10.10
Severity	Specify the seriousness of the event.	"Medium"	Medium
WhoDomain		Domain	RESEARCH
WhereDomain		-
Result	Successful or Failed.	"Successful"	Successful
Failure Reason		"Successful"	Successful