||An account was successfully logged on.
||An account failed to log on.
||A logon was attempted using explicit credentials.
||SIDs were filtered.
||A user logged on to this computer.
||A user or computer logged on to this computer from the network.
||Batch logon type is used by batch servers, where processes may be executing on behalf of a user without their direct intervention.
||A service was started by the Service Control Manager.
||This workstation was unlocked.
||A user logged on to this computer from the network. The user’s password was passed to the authentication package in its unhashed form. The built-in authentication packages all hash credentials before sending them across the network. The credentials do not traverse the network in plaintext (also called cleartext).
||A caller cloned its current token and specified new credentials for outbound connections. The new logon session has the same local identity, but uses different credentials for other network connections.
||A user logged on to this computer remotely using Terminal Services or Remote Desktop.
||A user logged on to this computer with network credentials that were stored locally on the computer. The domain controller was not contacted to verify the credentials.