Event ID 528 : successful logon - lists the following... 

user name 
domain 
logon id 
logon type 
logon process 
authenication package 
workstation name 

logon types...

Type 0 : N/A
Type 1 : N/A
Type 2 : Console logon - interactive from the computer console 
Type 3 : Network logon - network mapping (net use/net view) 
Type 4 : Batch logon - scheduler 
Type 5 : Service logon - service uses an account 
Type 6 : Proxy Logon?
Type 7 : Unlock Workstation 

unsuccessful logon events... 

Event ID 529 : Unknown user name or bad password 
Event ID 530 : Logon time restriction violation 
Event ID 531 : Account disabled 
Event ID 532 : Account expired 
Event ID 533 : Workstation restriction - not allowed to logon at this computer 
Event ID 534 : Inadequate rights - as in user account attempting console login to server 
Event ID 535 : Password expired 
Event ID 536 : NetLogon service down 
Event ID 537 : unexpected error
Event ID 539 : Logon Failure: Account locked out 
Event ID 627 : NT AUTHORITY\ANONYMOUS is trying to change a password
Event ID 644 : User account Locked out 
Event ID 538 is not an unsuccessful event but rather a successful logoff.
Event ID 540 is not an unsuccessful event but rather a successful network logon as in mapping a network drive.

Win2K only events...

Event ID 541 : IPSec security association established 
Event ID 542 : IPSec security association ended (mode data protection) 
Event ID 543 : IPSec security association ended (key exchange) 
Event ID 544 : IPSec security association establishment failed because peer could not authenicate 
Event ID 545 : IPSec peer authenication failed 
Event ID 546 : IPSec security association establishment failed because peer sent invalid proposal 
Event ID 547 : IPSec secuirty association negotiation failed 
Event ID 672 : Authenication Ticket Granted 
Event ID 673 : Service Ticket Granted 
Event ID 674 : Ticket Granted Renewed 
Event ID 675 : Pre-authenication failed 
Event ID 676 : Authenication Ticket Request Failed 
Event ID 677 : Service Ticket Request failed 
Event ID 678 : Account mapped for logon 
Event ID 679 : Account could not be mapped for logon 
Event ID 680 : Account used for logon 
Event ID 681 : Logon failed. There error code was: 
Event ID 682 : Session reconnected to winstation 
Event ID 683 : Session disconnected from winstation