You can enable Privilege elevation logging to the Windows event log to have the details on elevated application launches logged to the Windows event log.

Procedure

  1. In the Group Policy Management Editor, double-click Privilege elevation logging to the Windows event log.
  2. Select Enabled.