Windows EventInformation
Windows Event ID 506 – Winlogon: Interactive Logon Process Registration
Event ID 506 indicates the Windows Winlogon service has registered an interactive logon process. This informational event tracks authentication provider initialization during system startup and user session management.