diff options
Diffstat (limited to '')
-rw-r--r-- | private/ntos/se/nls/ntaudit.mc | 153 |
1 files changed, 153 insertions, 0 deletions
diff --git a/private/ntos/se/nls/ntaudit.mc b/private/ntos/se/nls/ntaudit.mc new file mode 100644 index 000000000..f49a33821 --- /dev/null +++ b/private/ntos/se/nls/ntaudit.mc @@ -0,0 +1,153 @@ +;/*++ BUILD Version: 0001 // Increment this if a change has global effects +; +;Copyright (c) 1991 Microsoft Corporation +; +;Module Name: +; +; ntaudit.mc +; +;Abstract: +; +; Constant definitions for the NT Audit Event Messages. +; +;Author: +; +; Jim Kelly (JimK) 30-Mar-1992 +; +;Revision History: +; +;Notes: +; +; The .h and .res forms of this file are generated from the .mc +; form of the file (private\ntos\se\nls\ntaudit.mc). Please make +; all changes to the .mc form of the file. +; +; +; +;--*/ +; +;#ifndef _NTAUDIT_ +;#define _NTAUDIT_ +; +;/*lint -e767 */ // Don't complain about different definitions // winnt + + +MessageIdTypedef=ULONG + +SeverityNames=(None=0x0) + +FacilityNames=(None=0x0) + + + +MessageId=0x0000 + Language=English +Unused message ID +. +;// Message ID 0 is unused - just used to flush out the diagram + + +; +;///////////////////////////////////////////////////////////////////////// +;// // +;// Logon Messages Follow // +;// // +;// // +;///////////////////////////////////////////////////////////////////////// +; + +;//////////////////////////////////////////////// +;// +;// Module Catagory: SE_ADT_SUCCESSFUL_LOGON +;// +;// Event Type: Successful Logon +;// +;// Parameter Strings: +;// +;// String1 - User name +;// +;// String2 - LogonSessionLuid.HighPart (32-bit value) +;// +;// String3 - LogonSessionLuid.LowPart (32-bit value) +;// + +MessageId=0x0001 + SymbolicName=SE_EVENTID_SUCCESSFUL_LOGON + Language=English +Successful Logon - + User: %S + Logon session ID: {%ld,%ld}. +. + + +;//////////////////////////////////////////////// +;// +;// Module Catagory: SE_ADT_UNSUCCESSFUL_LOGON +;// +;// Event Type: Unknown user/password logon attempt +;// +;// Parameter Strings: +;// +;// String1 - User name +;// +;// +;// + +MessageId=0x0002 + SymbolicName=SE_EVENTID_UNKNOWN_USER_OR_PWD + Language=English +Failed Logon - + User: %S + Reason: Unknown user name or password. +. + + +;//////////////////////////////////////////////// +;// +;// Module Catagory: SE_ADT_UNSUCCESSFUL_LOGON +;// +;// Event Type: Time restriction logon failure +;// +;// Parameter Strings: +;// +;// String1 - User name +;// +;// +;// + +MessageId=0x0003 + SymbolicName=SE_EVENTID_ACCOUNT_TIME_RESTR + Language=English +Failed Logon - + User: %S + Reason: Account time restriction violation. +. + + +;//////////////////////////////////////////////// +;// +;// Module Catagory: SE_ADT_UNSUCCESSFUL_LOGON +;// +;// Event Type: Account Disabled +;// +;// Parameter Strings: +;// +;// String1 - User name +;// +;// +;// + +MessageId=0x0004 + SymbolicName=SE_EVENTID_ACCOUNT_DISABLED + Language=English +Failed Logon - + User: %S + Reason: Account Disabled. +. + + + +;/*lint +e767 */ // Resume checking for different macro definitions // winnt +; +; +;#endif // _NTAUDIT_ |