A logon was attempted using explicit credentials. Subject: Security ID: %1 Account Name: %2 Account Domain: %3 Logon ID: ...

Windows Server 2008

A logon was attempted using explicit credentials.

Subject:
	Security ID:		%1
	Account Name:		%2
	Account Domain:		%3
	Logon ID:		%4
	Logon GUID:		%5

Account Whose Credentials Were Used:
	Account Name:		%6
	Account Domain:		%7
	Logon GUID:		%8

Target Server:
	Target Server Name:	%9
	Additional Information:	%10

Process Information:
	Process ID:		%11
	Process Name:		%12

Network Information:
	Network Address:	%13
	Port:			%14

This event is generated when a process attempts to log on an account by explicitly specifying that account's credentials.  This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command.

A LogicalDisk is a presentation of a contiguous range of logical blocks that is identifiable by a FileSystem via the Disk's ... A logon accelerator was issued. Depending on the audit policy, further details of this token may be written to a 10520 event ... A logon accelerator was issued. Depending on the audit policy, further details of this token may be written to a 520 event ... A logon request was denied because the terminal server is currently in drain mode and therefore not accepting new user logons. ... A logon was attempted using explicit credentials. Subject: Security ID: %1 Account Name: %2 Account Domain: %3 Logon ID: ... A longer than expected delay was encountered in this computer's communication with the remote computer. This was due to a ... A lookup or group expansion request failed for the Active Directory Domain Services (AD DS) component in Active Directory ... A lookup request was made that required a Global Catalog. The LSA was unable to either contact or authenticate to a Global ... A lookup request was made that required connectivity to a domain controller in domain %1. The LSA was unable to find a domain ...