NT 4.0 Event ID’s.

I want to know from the Sucurity log the ID which are disabled & enabled.

Event ID 692 & 626 gives all the resource added/removed on/from the network. Includes ID Disabled & Enabled.

Does any one knows the Event ID / or any ID / Code in Event Viewer from which such report can be generated?

Thanks for your help.