WinSecWiki > Security Settings > Local Policies > Audit Policy > Audit Logon > Special Logon

Special Logon

This category logs one and only one event. To configure this category you must use auditpol.

Coverage on events generated by this category are currently in the Security Log Encyclopedia:

Event ID	Title
4672	Special privileges assigned to new logon

Back to top

 

Upcoming Webinars File Security in Microsoft 365: Under Teams, OneDrive for Business, Microsoft 365 Groups it’s SharePoint Understanding Broken Object Level Authorization: The Quiet Access Control Failure Undermining Today’s Apps

Additional Resources