=====Windows EventLog IDs===== 4624 A successful account logon event 4625 An account failed to log on 4648 A logon was attempted using explicit credentials 4634 An account was logged off 4647 User initiated logoff