154 lines
3.1 KiB
MonkeyC
154 lines
3.1 KiB
MonkeyC
|
;/*++ BUILD Version: 0001 // Increment this if a change has global effects
|
|||
|
|
;
|
|||
|
|
;Copyright (c) 1991 Microsoft Corporation
|
|||
|
|
;
|
|||
|
|
;Module Name:
|
|||
|
|
;
|
|||
|
|
; ntaudit.mc
|
|||
|
|
;
|
|||
|
|
;Abstract:
|
|||
|
|
;
|
|||
|
|
; Constant definitions for the NT Audit Event Messages.
|
|||
|
|
;
|
|||
|
|
;Author:
|
|||
|
|
;
|
|||
|
|
; Jim Kelly (JimK) 30-Mar-1992
|
|||
|
|
;
|
|||
|
|
;Revision History:
|
|||
|
|
;
|
|||
|
|
;Notes:
|
|||
|
|
;
|
|||
|
|
; The .h and .res forms of this file are generated from the .mc
|
|||
|
|
; form of the file (private\ntos\se\nls\ntaudit.mc). Please make
|
|||
|
|
; all changes to the .mc form of the file.
|
|||
|
|
;
|
|||
|
|
;
|
|||
|
|
;
|
|||
|
|
;--*/
|
|||
|
|
;
|
|||
|
|
;#ifndef _NTAUDIT_
|
|||
|
|
;#define _NTAUDIT_
|
|||
|
|
;
|
|||
|
|
;/*lint -e767 */ // Don't complain about different definitions // winnt
|
|||
|
|
|
|||
|
|
|
|||
|
|
MessageIdTypedef=ULONG
|
|||
|
|
|
|||
|
|
SeverityNames=(None=0x0)
|
|||
|
|
|
|||
|
|
FacilityNames=(None=0x0)
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
MessageId=0x0000
|
|||
|
|
Language=English
|
|||
|
|
Unused message ID
|
|||
|
|
.
|
|||
|
|
;// Message ID 0 is unused - just used to flush out the diagram
|
|||
|
|
|
|||
|
|
|
|||
|
|
;
|
|||
|
|
;/////////////////////////////////////////////////////////////////////////
|
|||
|
|
;// //
|
|||
|
|
;// Logon Messages Follow //
|
|||
|
|
;// //
|
|||
|
|
;// //
|
|||
|
|
;/////////////////////////////////////////////////////////////////////////
|
|||
|
|
;
|
|||
|
|
|
|||
|
|
;////////////////////////////////////////////////
|
|||
|
|
;//
|
|||
|
|
;// Module Catagory: SE_ADT_SUCCESSFUL_LOGON
|
|||
|
|
;//
|
|||
|
|
;// Event Type: Successful Logon
|
|||
|
|
;//
|
|||
|
|
;// Parameter Strings:
|
|||
|
|
;//
|
|||
|
|
;// String1 - User name
|
|||
|
|
;//
|
|||
|
|
;// String2 - LogonSessionLuid.HighPart (32-bit value)
|
|||
|
|
;//
|
|||
|
|
;// String3 - LogonSessionLuid.LowPart (32-bit value)
|
|||
|
|
;//
|
|||
|
|
|
|||
|
|
MessageId=0x0001
|
|||
|
|
SymbolicName=SE_EVENTID_SUCCESSFUL_LOGON
|
|||
|
|
Language=English
|
|||
|
|
Successful Logon -
|
|||
|
|
User: %S
|
|||
|
|
Logon session ID: {%ld,%ld}.
|
|||
|
|
.
|
|||
|
|
|
|||
|
|
|
|||
|
|
;////////////////////////////////////////////////
|
|||
|
|
;//
|
|||
|
|
;// Module Catagory: SE_ADT_UNSUCCESSFUL_LOGON
|
|||
|
|
;//
|
|||
|
|
;// Event Type: Unknown user/password logon attempt
|
|||
|
|
;//
|
|||
|
|
;// Parameter Strings:
|
|||
|
|
;//
|
|||
|
|
;// String1 - User name
|
|||
|
|
;//
|
|||
|
|
;//
|
|||
|
|
;//
|
|||
|
|
|
|||
|
|
MessageId=0x0002
|
|||
|
|
SymbolicName=SE_EVENTID_UNKNOWN_USER_OR_PWD
|
|||
|
|
Language=English
|
|||
|
|
Failed Logon -
|
|||
|
|
User: %S
|
|||
|
|
Reason: Unknown user name or password.
|
|||
|
|
.
|
|||
|
|
|
|||
|
|
|
|||
|
|
;////////////////////////////////////////////////
|
|||
|
|
;//
|
|||
|
|
;// Module Catagory: SE_ADT_UNSUCCESSFUL_LOGON
|
|||
|
|
;//
|
|||
|
|
;// Event Type: Time restriction logon failure
|
|||
|
|
;//
|
|||
|
|
;// Parameter Strings:
|
|||
|
|
;//
|
|||
|
|
;// String1 - User name
|
|||
|
|
;//
|
|||
|
|
;//
|
|||
|
|
;//
|
|||
|
|
|
|||
|
|
MessageId=0x0003
|
|||
|
|
SymbolicName=SE_EVENTID_ACCOUNT_TIME_RESTR
|
|||
|
|
Language=English
|
|||
|
|
Failed Logon -
|
|||
|
|
User: %S
|
|||
|
|
Reason: Account time restriction violation.
|
|||
|
|
.
|
|||
|
|
|
|||
|
|
|
|||
|
|
;////////////////////////////////////////////////
|
|||
|
|
;//
|
|||
|
|
;// Module Catagory: SE_ADT_UNSUCCESSFUL_LOGON
|
|||
|
|
;//
|
|||
|
|
;// Event Type: Account Disabled
|
|||
|
|
;//
|
|||
|
|
;// Parameter Strings:
|
|||
|
|
;//
|
|||
|
|
;// String1 - User name
|
|||
|
|
;//
|
|||
|
|
;//
|
|||
|
|
;//
|
|||
|
|
|
|||
|
|
MessageId=0x0004
|
|||
|
|
SymbolicName=SE_EVENTID_ACCOUNT_DISABLED
|
|||
|
|
Language=English
|
|||
|
|
Failed Logon -
|
|||
|
|
User: %S
|
|||
|
|
Reason: Account Disabled.
|
|||
|
|
.
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
;/*lint +e767 */ // Resume checking for different macro definitions // winnt
|
|||
|
|
;
|
|||
|
|
;
|
|||
|
|
;#endif // _NTAUDIT_
|