User Right Assigned:
User Right: SeUndockPrivilege
Assigned To: MTG\rsmith
Assigned By:
User Name: MTG1$
Domain: MTG
Logon ID: (0x0,0x3E7)
This event documents a change to user right assignments
on this computer. Rights, like most other security settings,
are defined in group policy objects and applied by the computer.
Therefore this event will normally show the Assigned By user
as the system itself. To determine who actually made the rights
assignment change you must search the domain controllers' security
logs for changes to gpContainer objects (logged by Directory
Service auditing). Logon ID allows you to link this event to
the prior event 528 or 540 logon event of the user who performed
this action.
Assigned To identifies the user or group who was assigned
the right. Prefixed by domain name.
This event documents the system name for each user right as
opposed to the more familiar description. Click here for a cross reference.
Note: This event and 609 do not log changes to logon rights
such as "Access this computer from the network" or "Logon
as a service". See events 621 and 622.
