Auditing And Only Auditing
Posted by Awinish on June 15, 2011
Below are the references & event id associated with windows Vista, 7, 2008 & 2008 R2.
Description of security events in Windows Vista and in Windows Server 2008
Security audit events for Microsoft Windows Server 2008 and Microsoft Windows Vista
Description of security events in Windows 7 and in Windows Server 2008 R2
Security Audit Events for Windows 7 and Windows Server 2008 R2
Advanced Security Auditing in Windows 7 and Windows Server 2008 R2
Jorge has documented best material on auditing, must take a look to his site.