Figure 1: Sample event ID 577 Event Type: Success Audit Event Source: Security Event Category: Privilege Use Event ID: 577 Date: 11/18/2004 Time: 8:40:08 AM User: ACME\administrator Computer: ACS-DC Description: Privileged Service Called: Server: Security Service: - Primary User Name: administrator Primary Domain: ACME Primary Logon ID: (0x0,0x1F017) Client User Name: administrator Client Domain: ACME Client Logon ID: (0x0,0x1F017) Privileges: SeSystemtimePrivilege