Windows EventInformation
Windows Event ID 4876 – Security: Special Privileges Assigned to New Logon
Event ID 4876 records when special privileges are assigned to a new user logon session, indicating elevated access rights have been granted during authentication.
