Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 2009/4/2 18:26:28
Event ID: 4672
Task Category: Special Login
Level: Information
Keywords: review success
User: not available
computer:
illustrate:
New logins are assigned special permissions.
theme:
Security ID: SYSTEM
Account Name: SYSTEM
Account Domain: NT AUTHORITY
Login ID: 0x3e7
Privilege: SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Event Xml:
4672
0
0
12548
0
0x8020000000000000
7859
Security
Excel-PC
S-1-5-18
SYSTEM
NT AUTHORITY
0x3e7
SeeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Did someone else log into my system illegally? ? David