[dodger]

Event id: 540

Код:

Successful Network Logon:
 	User Name:	LKI-AD$
 	Domain:		LENKOR
 	Logon ID:		(0x0,0x1A9CBFE4)
 	Logon Type:	3
 	Logon Process:	Kerberos
 	Authentication Package:	Kerberos
 	Workstation Name:	
 	Logon GUID:	{004c14fc-8c0d-fab9-f8dc-493a31d7a543}
 	Caller User Name:	-
 	Caller Domain:	-
 	Caller Logon ID:	-
 	Caller Process ID: -
 	Transited Services: -
 	Source Network Address:	192.168.0.2
 	Source Port:	4661

Event id: 538

Код:

User Logoff:
 	User Name:	LKI-AD$
 	Domain:		LENKOR
 	Logon ID:		(0x0,0x1A9CBFE4)
 	Logon Type:	3

Event id: 576

Код:

Special privileges assigned to new logon:
 	User Name:	LKI-AD$
 	Domain:		LENKOR
 	Logon ID:		(0x0,0x1A9CC0AB)
 	Privileges:	SeSecurityPrivilege
			SeBackupPrivilege
			SeRestorePrivilege
			SeTakeOwnershipPrivilege
			SeDebugPrivilege
			SeSystemEnvironmentPrivilege
			SeLoadDriverPrivilege
			SeImpersonatePrivilege
			SeEnableDelegationPrivilege