The event ID for an unauthorized logon attempt in Windows is 4625. It indicates a failed attempt at logging on to a local computer and is logged in the Security log of the Event Viewer.