strComputer = "имя компа"

set Locator=CreateObject("WbemScripting.SWbemLocator")
REM Locator.Security_.Privileges.Add 7  - пробовал и так
Path="root\cimv2"

set Service=Locator.ConnectServer(strComputer,Path)

Set colLoggedEvents = Service.ExecQuery _
    ("Select * from Win32_NTLogEvent Where Logfile = 'Security'")
For Each objEvent in colLoggedEvents
    Rec="Record Number: " & objEvent.RecordNumber
exit for
Next
msgbox rec