Skip to main content

Logon right

2actions
2reasons
1sources
Livestatus

A right that decides how an account may sign in, such as locally at the keyboard or as a service.

Identified by: sparklogs.config_change.target, which carries a name.

ActionReported byWhat that reason says
createdlogon_right_granted on Windows Security event logA system logon right (interactive, network, batch, service, or remote desktop sign-in, or one of their deny counterparts) was granted to a principal in local security policy.
deletedlogon_right_removed on Windows Security event logA system logon right (interactive, network, batch, service, or remote desktop sign-in, or one of their deny counterparts) was removed from a principal in local security policy.