How to interpret security events appearing in the Security log
This KB article describes various security-related and auditing-related events in Windows 7 and in Windows Server 2008 R2. This article also provides information about how to interpret these events.
All these events appear in the Security log and are logged with a source of Security-Auditing. This article also describes how to retrieve more descriptive data about individual events.
KB977519 lists all Windows 7 and Windows Server 2008 R2 security audit-related events by category and by subcategory.