Windows EventInformation
Windows Event ID 4675 – Microsoft-Windows-Security-Auditing: User Account Logon Rights Assignment
Event ID 4675 records when user account logon rights are assigned or removed, typically during group policy application or manual security policy changes.