Log Name:      Security
Source:        Microsoft-Windows-Security-Auditing
Date:          10/27/2009 9:53:43 PM
Event ID:      4648
Task Category: Logon
Level:         Information
Keywords:      Audit Success
User:          N/A
Computer:      dcc1.Logistics.corp
Description:   
A logon was attempted using explicit credentials.
Subject:
	Security ID:		S-1-5-18
	Account Name:		DCC1$
	Account Domain:		LOGISTICS
	Logon ID:		0x3e7
	Logon GUID:		{00000000-0000-0000-0000-000000000000}
Account Whose Credentials Were Used:
	Account Name:		SYSTEM
	Account Domain:		NT AUTHORITY
	Logon GUID:		{00000000-0000-0000-0000-000000000000}
Target Server:
	Target Server Name:	localhost
	Additional Information:	localhost
Process Information:
	Process ID:		0x22c
	Process Name:		C:\Windows\System32\services.exe
Network Information:
	Network Address:	-
	Port:			-
This event is generated when a process attempts to log on an account by explicitly specifying that account's credentials.  This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command.