Once you’ve enabled auditing of events in Windows 7, you may be wondering how to find out when an event occurs. Once you enable auditing, events are written to the Security log so viewing audited events is as simple as opening the Security log in the Windows Event Viewer.
You can access the Event viewer in a few ways. One is through the Administrative Tools on the Start Menu. If the Administrative Tools are not available from the Start Menu, access can be gained by right-clicking on Computer and selecting Manage. The easiest way is to type Event Viewer in the search field above the Start button and press Enter.
Once the console appears, open the Security log. Click Windows Logs under Event Viewer (Local) and click the Security log. You will see a list of all security-related events. You can find out more information about an event by double clicking it. You can even find help information about the event by selecting the link labeled ‘Event Log Online Help’.