#user-rights

Windows Event ID 4704 – Microsoft-Windows-Security-Auditing: User Right Assigned

Event ID 4704 logs when a user right is assigned to a security principal through Group Policy or local security policy changes. Critical for security auditing and compliance monitoring.

Windows Event ID 4675 – Microsoft-Windows-Security-Auditing: User Account Logon Rights Assignment

Event ID 4675 records when user account logon rights are assigned or removed, typically during group policy application or manual security policy changes.