Häufige Event-IDs nachschlagen – Security, System, Application.
eventvwr.msc
Get-WinEvent -FilterHashtable @{Id=4625} -MaxEvents 10