I'm putting together a list of all of the NT Event Log codes that could be of security concern.  Logons, permissions, etc.  Can anyone point me in the right direction?  Know any off the top of your head? Thanks, Rick