User Right Removed: User Right: %1 Removed From: %2 Removed By: User Name: %3 Domain: %4 Logon ID: %5
Event Information
According to Microsoft
Cause: This event record indicates that a specific right assigned to the identified user was removed. Resolution: The person with administrative rights for the computer should make sure the user right assigned was supposed to be removed.
