On windows XP and previous it is located in the event viewer under the application logs. You can filter by Source of Winlogon.
On windows Vista and above it is located in the event viewer under the application logs. You can filter by Source of Wininit.