Hi, Please have a screenshot and post here, could you tell us the Keywords, Source, Event ID and Task Category information about this event log. Here are an article and a discussion about Special Logon can referred to. Audit Special Logon http://technet.microsoft.com/en-us/library/dd772635(v=ws.10).aspx Lots of "Special Logon" events for computer account? http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/8bf6a0aa-2069-4bf0-abdd-f7fb84e07aae Hope that helps.Ivan-Liu TechNet Community Support

In the windows log security window...what would a "Special Logon" with "SEImpersonatePriviliges" indicate? *is this a process or a person *is there a way to determine where it is coming from?

Hi, Please have a screenshot and post here, could you tell us the Keywords, Source, Event ID and Task Category information about this event log. Here are an article and a discussion about Special Logon can referred to. Audit Special Logon http://technet.microsoft.com/en-us/library/dd772635(v=ws.10).aspx Lots of "Special Logon" events for computer account? http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/8bf6a0aa-2069-4bf0-abdd-f7fb84e07aae Hope that helps.Ivan-Liu TechNet Community Support