????
Your IP : 18.219.83.70
//*********************************************
// *** Active Directory Service Provider: SAM
//*********************************************
#pragma classflags("forceupdate")
#pragma namespace ("\\\\.\\Root\\WMI")
[Dynamic,
Description("Active Directory Domain Services: SAM") : amended,
Guid("{8e598056-8993-11d2-819e-0000f875a064}"),
locale("MS\\0x409")]
class MSSAMTrace:EventTrace
{
};
[Dynamic,
Description("SAM User Create") : amended,
Guid("{39511dbe-899b-11d2-819e-0000f875a064}"),
DisplayName("SamUserCreate"),
locale("MS\\0x409")
]
class SamUserCreate:MSSAMTrace
{
};
[Dynamic,
Description("SAM User Create") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamUserCreate_Start:SamUserCreate
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM User Create") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamUserCreate_End:SamUserCreate
{
};
[Dynamic,
Description("SAM Computer Create") : amended,
Guid("{abb14b68-899b-11d2-819e-0000f875a064}"),
DisplayName("SamCompCreate"),
locale("MS\\0x409")
]
class SamCompCreate:MSSAMTrace
{
};
[Dynamic,
Description("SAM Computer Create"),
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamCompCreate_Start:SamCompCreate
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Computer Create") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamCompCreate_End:SamCompCreate
{
};
[Dynamic,
Description("SAM Group Create") : amended,
Guid("{c8eb5e5c-899c-11d2-819e-0000f875a064}"),
DisplayName("SamGrpCreate"),
locale("MS\\0x409")
]
class SamGrpCreate:MSSAMTrace
{
};
[Dynamic,
Description("SAM Group Create") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamGrpCreate_Start:SamGrpCreate
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Group Create") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamGrpCreate_End:SamGrpCreate
{
};
[Dynamic,
Description("SAM Add Member to Group") : amended,
Guid("{f9d2ba6a-899c-11d2-819e-0000f875a064}"),
DisplayName("SamAddMemGrp"),
locale("MS\\0x409")
]
class SamAddMemGrp:MSSAMTrace
{
};
[Dynamic,
Description("SAM Add Member to Group") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamAddMemGrp_Start:SamAddMemGrp
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Add Member to Group") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamAddMemGrp_End:SamAddMemGrp
{
};
[Dynamic,
Description("SAM Delete Member From Group") : amended,
Guid("{250959aa-899d-11d2-819e-0000f875a064}"),
DisplayName("SamDelMemGrp"),
locale("MS\\0x409")
]
class SamDelMemGrp:MSSAMTrace
{
};
[Dynamic,
Description("SAM Delete Member From Group") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamDelMemGrp_Start:SamDelMemGrp
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Delete Member From Group") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamDelMemGrp_End:SamDelMemGrp
{
};
[Dynamic,
Description("SAM Password Change") : amended,
Guid("{45fc997e-899d-11d2-819e-0000f875a064}"),
DisplayName("SamPwdChng"),
locale("MS\\0x409")
]
class SamPwdChng:MSSAMTrace
{
};
[Dynamic,
Description("SAM Password Change") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamPwdChng_Start:SamPwdChng
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Password Change") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamPwdChng_End:SamPwdChng
{
};
[Dynamic,
Description("SAM User Password Set") : amended,
Guid("{62bef71e-899d-11d2-819e-0000f875a064}"),
DisplayName("SamUserPwdSet"),
locale("MS\\0x409")
]
class SamUserPwdSet:MSSAMTrace
{
};
[Dynamic,
Description("SAM User Password Set") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamUserPwdSet_Start:SamUserPwdSet
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM User Password Set") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamUserPwdSet_End:SamUserPwdSet
{
};
[Dynamic,
Description("SAM Computer Password Set") : amended,
Guid("{880217b8-899d-11d2-819e-0000f875a064}"),
DisplayName("SamCompPwdSet"),
locale("MS\\0x409")
]
class SamCompPwdSet:MSSAMTrace
{
};
[Dynamic,
Description("SAM Computer Password Set") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamCompPwdSet_Start:SamCompPwdSet
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Computer Password Set") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamCompPwdSet_End:SamCompPwdSet
{
};
[Dynamic,
Description("SAM Password Push PDC") : amended,
Guid("{1f228de8-8a6c-11d2-819e-0000f875a064}"),
DisplayName("SamPwdPushPdc"),
locale("MS\\0x409")
]
class SamPwdPushPdc:MSSAMTrace
{
};
[Dynamic,
Description("SAM Password Push PDC") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamPwdPushPdc_Start:SamPwdPushPdc
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Password Push PDC") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamPwdPushPdc_End:SamPwdPushPdc
{
};
[Dynamic,
Description("SAM Id By Name") : amended,
Guid("{a41d90bc-899d-11d2-819e-0000f875a064}"),
DisplayName("SamIdByName"),
locale("MS\\0x409")
]
class SamIdByName:MSSAMTrace
{
};
[Dynamic,
Description("SAM Id By Name") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamIdByName_Start:SamIdByName
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Id By Name") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamIdByName_End:SamIdByName
{
};
[Dynamic,
Description("SAM Name By Id") : amended,
Guid("{25059476-899f-11d2-819e-0000f875a064}"),
DisplayName("SamNameById"),
locale("MS\\0x409")
]
class SamNameById:MSSAMTrace
{
};
[Dynamic,
Description("SAM Name By Id") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamNameById_Start:SamNameById
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Name By Id") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamNameById_End:SamNameById
{
};
[Dynamic,
Description("SAM Connect") : amended,
Guid("{8c89045c-3f5d-4289-939a-fb854000cb6b}"),
DisplayName("SamConnect"),
locale("MS\\0x409")
]
class SamConnect:MSSAMTrace
{
};
[Dynamic,
Description("SAM Connect") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamConnect_Start:SamConnect
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Connect") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamConnect_End:SamConnect
{
};
[Dynamic,
Description("SAM Close Handle") : amended,
Guid("{dbc0ceab-cff3-4c0f-85f2-0c2107142f36}"),
DisplayName("SamCloseHandle"),
locale("MS\\0x409")
]
class SamCloseHandle:MSSAMTrace
{
};
[Dynamic,
Description("SAM Close Handle") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamCloseHandle_Start:SamCloseHandle
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Close Handle") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamCloseHandle_End:SamCloseHandle
{
};
[Dynamic,
Description("SAM Set Security Object") : amended,
Guid("{74e10cbb-202e-4a97-871d-8547972b5141}"),
DisplayName("SamSetSecurityObj"),
locale("MS\\0x409")
]
class SamSetSecurityObj:MSSAMTrace
{
};
[Dynamic,
Description("SAM Set Security Object") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamSetSecurityObj_Start:SamSetSecurityObj
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Set Security Object") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamSetSecurityObj_End:SamSetSecurityObj
{
};
[Dynamic,
Description("SAM Query Security Object") : amended,
Guid("{676347f3-fd20-4e7d-90b1-77e35f84af9a}"),
DisplayName("SamQuerySecurityObj"),
locale("MS\\0x409")
]
class SamQuerySecurityObj:MSSAMTrace
{
};
[Dynamic,
Description("SAM Query Security Object") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamQuerySecurityObj_Start:SamQuerySecurityObj
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Query Security Object") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamQuerySecurityObj_End:SamQuerySecurityObj
{
};
[Dynamic,
Description("SAM Shutdown SAM Server") : amended,
Guid("{f8012701-7e99-49c5-b832-1db8bc4a610d}"),
DisplayName("SamShutdownSamSrv"),
locale("MS\\0x409")
]
class SamShutdownSamSrv:MSSAMTrace
{
};
[Dynamic,
Description("SAM Shutdown SAM Server") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamShutdownSamSrv_Start:SamShutdownSamSrv
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Shutdown SAM Server") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamShutdownSamSrv_End:SamShutdownSamSrv
{
};
[Dynamic,
Description("SAM Lookup Domain In SAM Server") : amended,
Guid("{a11e5d6b-353d-4bf6-97a8-ede4cba45524}"),
DisplayName("SamLookupDomInSamSrv"),
locale("MS\\0x409")
]
class SamLookupDomInSamSrv:MSSAMTrace
{
};
[Dynamic,
Description("SAM Lookup Domain In SAM Server") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamLookupDomInSamSrv_Start:SamLookupDomInSamSrv
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Lookup Domain In SAM Server") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamLookupDomInSamSrv_End:SamLookupDomInSamSrv
{
};
[Dynamic,
Description("SAM Enumerate Domains In SAM Server") : amended,
Guid("{7c65ceb0-75ba-46b9-884e-67e038c5b003}"),
DisplayName("SamEnumDomInSamSrv"),
locale("MS\\0x409")
]
class SamEnumDomInSamSrv:MSSAMTrace
{
};
[Dynamic,
Description("SAM Enumerate Domains In SAM Server") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamEnumDomInSamSrv_Start:SamEnumDomInSamSrv
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Enumerate Domains In SAM Server") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamEnumDomInSamSrv_End:SamEnumDomInSamSrv
{
};
[Dynamic,
Description("SAM Open Domain") : amended,
Guid("{6e1f2449-f1f3-4634-b51f-46e2c6625892}"),
DisplayName("SamOpenDomain"),
locale("MS\\0x409")
]
class SamOpenDomain:MSSAMTrace
{
};
[Dynamic,
Description("SAM Open Domain") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamOpenDomain_Start:SamOpenDomain
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Open Domain") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamOpenDomain_End:SamOpenDomain
{
};
[Dynamic,
Description("SAM Query Information Domain") : amended,
Guid("{89399c21-4aaf-408e-ba39-ab831a1298d5}"),
DisplayName("SamQueryInfoDom"),
locale("MS\\0x409")
]
class SamQueryInfoDom:MSSAMTrace
{
};
[Dynamic,
Description("SAM Query Information Domain") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamQueryInfoDom_Start:SamQueryInfoDom
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Query Information Domain") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamQueryInfoDom_End:SamQueryInfoDom
{
};
[Dynamic,
Description("SAM Set Information Domain") : amended,
Guid("{45309ef4-c59e-425e-b95b-19f1c5a3c55a}"),
DisplayName("SamSetInfoDom"),
locale("MS\\0x409")
]
class SamSetInfoDom:MSSAMTrace
{
};
[Dynamic,
Description("SAM Set Information Domain") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamSetInfoDom_Start:SamSetInfoDom
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Set Information Domain") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamSetInfoDom_End:SamSetInfoDom
{
};
[Dynamic,
Description("SAM Enumerate Groups In Domain ") : amended,
Guid("{5d11e02f-0c36-4180-ad07-89062c9df9ec}"),
DisplayName("SamEnumGrpsInDom"),
locale("MS\\0x409")
]
class SamEnumGrpsInDom:MSSAMTrace
{
};
[Dynamic,
Description("SAM Enumerate Groups In Domain ") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamEnumGrpsInDom_Start:SamEnumGrpsInDom
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Enumerate Groups In Domain ") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamEnumGrpsInDom_End:SamEnumGrpsInDom
{
};
[Dynamic,
Description("SAM Enumerate Users In Domain") : amended,
Guid("{07ffaa1d-34f6-49cd-b541-2f0d7dff15c4}"),
DisplayName("SamEnumUsersInDom"),
locale("MS\\0x409")
]
class SamEnumUsersInDom:MSSAMTrace
{
};
[Dynamic,
Description("SAM Enumerate Users In Domain") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamEnumUsersInDom_Start:SamEnumUsersInDom
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Enumerate Users In Domain") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamEnumUsersInDom_End:SamEnumUsersInDom
{
};
[Dynamic,
Description("SAM Create Alias In Domain") : amended,
Guid("{5e612efd-c05e-4f76-bced-f5607aa3d46e}"),
DisplayName("SamCreateAliasInDom"),
locale("MS\\0x409")
]
class SamCreateAliasInDom:MSSAMTrace
{
};
[Dynamic,
Description("SAM Create Alias In Domain") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamCreateAliasInDom_Start:SamCreateAliasInDom
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Create Alias In Domain") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamCreateAliasInDom_End:SamCreateAliasInDom
{
};
[Dynamic,
Description("SAM Enumerate Aliases In Domain") : amended,
Guid("{f1fea491-bfa6-436c-a178-a70d03b4fb1a}"),
DisplayName("SamEnumAliasesInDom"),
locale("MS\\0x409")
]
class SamEnumAliasesInDom:MSSAMTrace
{
};
[Dynamic,
Description("SAM Enumerate Aliases In Domain") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamEnumAliasesInDom_Start:SamEnumAliasesInDom
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Enumerate Aliases In Domain") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamEnumAliasesInDom_End:SamEnumAliasesInDom
{
};
[Dynamic,
Description("SAM Get Alias Membership") : amended,
Guid("{1cf5fd19-1ac1-4324-84f7-970a634a91ee}"),
DisplayName("SamGetAliasMem"),
locale("MS\\0x409")
]
class SamGetAliasMem:MSSAMTrace
{
};
[Dynamic,
Description("SAM Get Alias Membership") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamGetAliasMem_Start:SamGetAliasMem
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Get Alias Membership") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamGetAliasMem_End:SamGetAliasMem
{
};
[Dynamic,
Description("SAM Open Group") : amended,
Guid("{b41d7bdf-4249-4651-ac0f-1879be0d5c0c}"),
DisplayName("SamOpenGrp"),
locale("MS\\0x409")
]
class SamOpenGrp:MSSAMTrace
{
};
[Dynamic,
Description("SAM Open Group") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamOpenGrp_Start:SamOpenGrp
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Open Group") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamOpenGrp_End:SamOpenGrp
{
};
[Dynamic,
Description("SAM Query Information Group") : amended,
Guid("{632fcc78-6057-48f9-8d5f-4bb0f73d3cd1}"),
DisplayName("SamQueryInfoGrp"),
locale("MS\\0x409")
]
class SamQueryInfoGrp:MSSAMTrace
{
};
[Dynamic,
Description("SAM Query Information Group") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamQueryInfoGrp_Start:SamQueryInfoGrp
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Query Information Group") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamQueryInfoGrp_End:SamQueryInfoGrp
{
};
[Dynamic,
Description("SAM Set Information Group") : amended,
Guid("{26106246-4473-4295-841b-4a51c6afc3db}"),
DisplayName("SamSetInfoGrp"),
locale("MS\\0x409")
]
class SamSetInfoGrp:MSSAMTrace
{
};
[Dynamic,
Description("SAM Set Information Group") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamSetInfoGrp_Start:SamSetInfoGrp
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Set Information Group") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamSetInfoGrp_End:SamSetInfoGrp
{
};
[Dynamic,
Description("SAM Delete Group") : amended,
Guid("{5f7c4ba5-d6a4-4625-900e-48fa7811e06a}"),
DisplayName("SamDeleteGrp"),
locale("MS\\0x409")
]
class SamDeleteGrp:MSSAMTrace
{
};
[Dynamic,
Description("SAM Delete Group") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamDeleteGrp_Start:SamDeleteGrp
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Delete Group") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamDeleteGrp_End:SamDeleteGrp
{
};
[Dynamic,
Description("SAM Get Members In Group") : amended,
Guid("{5954bc51-c5ec-4aaa-831c-6f2c1b2515b6}"),
DisplayName("SamGetMemInGrp"),
locale("MS\\0x409")
]
class SamGetMemInGrp:MSSAMTrace
{
};
[Dynamic,
Description("SAM Get Members In Group") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamGetMemInGrp_Start:SamGetMemInGrp
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Get Members In Group") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamGetMemInGrp_End:SamGetMemInGrp
{
};
[Dynamic,
Description("SAM Set Member Attributes Of Group") : amended,
Guid("{0254ba6d-7ff0-4bfe-a3f9-8fd8da667641}"),
DisplayName("SamSetMemAttrsOfGrp"),
locale("MS\\0x409")
]
class SamSetMemAttrsOfGrp:MSSAMTrace
{
};
[Dynamic,
Description("SAM Set Member Attributes Of Group") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamSetMemAttrsOfGrp_Start:SamSetMemAttrsOfGrp
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Set Member Attributes Of Group") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamSetMemAttrsOfGrp_End:SamSetMemAttrsOfGrp
{
};
[Dynamic,
Description("SAM Open Alias") : amended,
Guid("{ba41c883-592f-4ab9-b2a9-c6263b011fe7}"),
DisplayName("SamOpenAlias"),
locale("MS\\0x409")
]
class SamOpenAlias:MSSAMTrace
{
};
[Dynamic,
Description("SAM Open Alias") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamOpenAlias_Start:SamOpenAlias
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Open Alias") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamOpenAlias_End:SamOpenAlias
{
};
[Dynamic,
Description("SAM Query Information Alias") : amended,
Guid("{419f025a-bf06-4673-af66-d230bec2af02}"),
DisplayName("SamQueryInfoAlias"),
locale("MS\\0x409")
]
class SamQueryInfoAlias:MSSAMTrace
{
};
[Dynamic,
Description("SAM Query Information Alias") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamQueryInfoAlias_Start:SamQueryInfoAlias
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Query Information Alias") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamQueryInfoAlias_End:SamQueryInfoAlias
{
};
[Dynamic,
Description("SAM Set Information Alias") : amended,
Guid("{e712d39d-a3a6-4224-a1bd-4717b24e4e8c}"),
DisplayName("SamSetInfoAlias"),
locale("MS\\0x409")
]
class SamSetInfoAlias:MSSAMTrace
{
};
[Dynamic,
Description("SAM Set Information Alias") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamSetInfoAlias_Start:SamSetInfoAlias
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Set Information Alias") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamSetInfoAlias_End:SamSetInfoAlias
{
};
[Dynamic,
Description("SAM Delete Alias") : amended,
Guid("{fbfe2540-452b-41bb-9219-dfb6fd1a129b}"),
DisplayName("SamDeleteAlias"),
locale("MS\\0x409")
]
class SamDeleteAlias:MSSAMTrace
{
};
[Dynamic,
Description("SAM Delete Alias") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamDeleteAlias_Start:SamDeleteAlias
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Delete Alias") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamDeleteAlias_End:SamDeleteAlias
{
};
[Dynamic,
Description("SAM Add Member To Alias") : amended,
Guid("{3a2e63d1-5dc4-4168-85ea-3e331f88ce83}"),
DisplayName("SamAddMemToAlias"),
locale("MS\\0x409")
]
class SamAddMemToAlias:MSSAMTrace
{
};
[Dynamic,
Description("SAM Add Member To Alias") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamAddMemToAlias_Start:SamAddMemToAlias
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Add Member To Alias") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamAddMemToAlias_End:SamAddMemToAlias
{
};
[Dynamic,
Description("SAM Remove Member From Alias") : amended,
Guid("{6ba1639c-afc4-454e-b3e0-5e8f7fc39af9}"),
DisplayName("SamRemoveMemFromAlias"),
locale("MS\\0x409")
]
class SamRemoveMemFromAlias:MSSAMTrace
{
};
[Dynamic,
Description("SAM Remove Member From Alias") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamRemoveMemFromAlias_Start:SamRemoveMemFromAlias
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Remove Member From Alias") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamRemoveMemFromAlias_End:SamRemoveMemFromAlias
{
};
[Dynamic,
Description("SAM Get Members In Alias") : amended,
Guid("{5cec3d52-6eeb-474d-b468-58362888f1b0}"),
DisplayName("SamGetMemInAlias"),
locale("MS\\0x409")
]
class SamGetMemInAlias:MSSAMTrace
{
};
[Dynamic,
Description("SAM Get Members In Alias") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamGetMemInAlias_Start:SamGetMemInAlias
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Get Members In Alias") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamGetMemInAlias_End:SamGetMemInAlias
{
};
[Dynamic,
Description("SAM Open User") : amended,
Guid("{b8d2bc4a-1525-4386-bb1c-6bb2e24eb001}"),
DisplayName("SamOpenUser"),
locale("MS\\0x409")
]
class SamOpenUser:MSSAMTrace
{
};
[Dynamic,
Description("SAM Open User") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamOpenUser_Start:SamOpenUser
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Open User") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamOpenUser_End:SamOpenUser
{
};
[Dynamic,
Description("SAM Delete User") : amended,
Guid("{c2a0e094-a178-4372-b4fe-a33e48c3585c}"),
DisplayName("SamDeleteUser"),
locale("MS\\0x409")
]
class SamDeleteUser:MSSAMTrace
{
};
[Dynamic,
Description("SAM Delete User") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamDeleteUser_Start:SamDeleteUser
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Delete User") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamDeleteUser_End:SamDeleteUser
{
};
[Dynamic,
Description("SAM Query Information User") : amended,
Guid("{e1cb227a-6d55-4282-a5f7-6fa4a5922c0b}"),
DisplayName("SamQueryInfoUser"),
locale("MS\\0x409")
]
class SamQueryInfoUser:MSSAMTrace
{
};
[Dynamic,
Description("SAM Query Information User") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamQueryInfoUser_Start:SamQueryInfoUser
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Query Information User") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamQueryInfoUser_End:SamQueryInfoUser
{
};
[Dynamic,
Description("SAM Set Information User") : amended,
Guid("{bc80e27f-6b74-4da9-abfc-2e4e82b81000}"),
DisplayName("SamSetInfoUser"),
locale("MS\\0x409")
]
class SamSetInfoUser:MSSAMTrace
{
};
[Dynamic,
Description("SAM Set Information User") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamSetInfoUser_Start:SamSetInfoUser
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Set Information User") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamSetInfoUser_End:SamSetInfoUser
{
};
[Dynamic,
Description("SAM Change Password Computer") : amended,
Guid("{19b30cde-3e41-4cff-83c8-3df2779f840c}"),
DisplayName("SamChangePwdComputer"),
locale("MS\\0x409")
]
class SamChangePwdComputer:MSSAMTrace
{
};
[Dynamic,
Description("SAM Change Password Computer") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamChangePwdComputer_Start:SamChangePwdComputer
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Change Password Computer") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamChangePwdComputer_End:SamChangePwdComputer
{
};
[Dynamic,
Description("SAM Get Groups For User") : amended,
Guid("{0e3913c5-9760-4ced-b133-004a64e8d53c}"),
DisplayName("SamGetGrpsForUser"),
locale("MS\\0x409")
]
class SamGetGrpsForUser:MSSAMTrace
{
};
[Dynamic,
Description("SAM Get Groups For User") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamGetGrpsForUser_Start:SamGetGrpsForUser
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Get Groups For User") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamGetGrpsForUser_End:SamGetGrpsForUser
{
};
[Dynamic,
Description("SAM Query Display Information") : amended,
Guid("{eb225178-f5f0-42b7-895b-db89276f647a}"),
DisplayName("SamQueryDisplayInfo"),
locale("MS\\0x409")
]
class SamQueryDisplayInfo:MSSAMTrace
{
};
[Dynamic,
Description("SAM Query Display Information") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamQueryDisplayInfo_Start:SamQueryDisplayInfo
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Query Display Information") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamQueryDisplayInfo_End:SamQueryDisplayInfo
{
};
[Dynamic,
Description("SAM Get Display Enumeration Index") : amended,
Guid("{aceb7864-9a14-4c73-8ed0-94ec53f6651c}"),
DisplayName("SamGetDisplayEnumIdx"),
locale("MS\\0x409")
]
class SamGetDisplayEnumIdx:MSSAMTrace
{
};
[Dynamic,
Description("SAM Get Display Enumeration Index") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamGetDisplayEnumIdx_Start:SamGetDisplayEnumIdx
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Get Display Enumeration Index") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamGetDisplayEnumIdx_End:SamGetDisplayEnumIdx
{
};
[Dynamic,
Description("SAM Get User Domain Password Information") : amended,
Guid("{4ff7a7db-43ca-470a-8b64-3003e2d22042}"),
DisplayName("SamGetUserDomPwdInfo"),
locale("MS\\0x409")
]
class SamGetUserDomPwdInfo:MSSAMTrace
{
};
[Dynamic,
Description("SAM Get User Domain Password Information") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamGetUserDomPwdInfo_Start:SamGetUserDomPwdInfo
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Get User Domain Password Information") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamGetUserDomPwdInfo_End:SamGetUserDomPwdInfo
{
};
[Dynamic,
Description("SAM Remove Member From Foreign Domain") : amended,
Guid("{8919f267-a053-4669-aa69-2da0d4a20d92}"),
DisplayName("SamRemoveMemFromForeignDom"),
locale("MS\\0x409")
]
class SamRemoveMemFromForeignDom:MSSAMTrace
{
};
[Dynamic,
Description("SAM Remove Member From Foreign Domain") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamRemoveMemFromForeignDom_Start:SamRemoveMemFromForeignDom
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Remove Member From Foreign Domain") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamRemoveMemFromForeignDom_End:SamRemoveMemFromForeignDom
{
};
[Dynamic,
Description("SAM Get Domain Password Information") : amended,
Guid("{ff0c6ce2-9528-4a91-b9c7-bcf834b6f79a}"),
DisplayName("SamGetDomPwdInfo"),
locale("MS\\0x409")
]
class SamGetDomPwdInfo:MSSAMTrace
{
};
[Dynamic,
Description("SAM Get Domain Password Information") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamGetDomPwdInfo_Start:SamGetDomPwdInfo
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Get Domain Password Information") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamGetDomPwdInfo_End:SamGetDomPwdInfo
{
};
[Dynamic,
Description("SAM Set Boot Key Information") : amended,
Guid("{2e991575-c2ed-42a7-97ff-a0d6571f1862}"),
DisplayName("SamSetBootKeyInfo"),
locale("MS\\0x409")
]
class SamSetBootKeyInfo:MSSAMTrace
{
};
[Dynamic,
Description("SAM Set Boot Key Information") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamSetBootKeyInfo_Start:SamSetBootKeyInfo
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Set Boot Key Information") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamSetBootKeyInfo_End:SamSetBootKeyInfo
{
};
[Dynamic,
Description("SAM Get Boot Key Information") : amended,
Guid("{33be4128-d02e-4b6f-949e-ab77cc8164b1}"),
DisplayName("SamGetBootKeyInfo"),
locale("MS\\0x409")
]
class SamGetBootKeyInfo:MSSAMTrace
{
};
[Dynamic,
Description("SAM Get Boot Key Information") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamGetBootKeyInfo_Start:SamGetBootKeyInfo
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Get Boot Key Information") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamGetBootKeyInfo_End:SamGetBootKeyInfo
{
};
[Dynamic,
Description("SAM Process Mapped Attributes") : amended,
Guid("{96bd320f-1e51-4c06-86f3-ee64f0a2f0cf}"),
DisplayName("SampProcessMappedAttributes"),
locale("MS\\0x409")
]
class SamProcessMappedAttributes:MSSAMTrace
{
};
[Dynamic,
Description("SAM Process Mapped Attributes") : amended,
EventType(1),
EventTypeName("Start"),
locale("MS\\0x409")
]
class SamProcessMappedAttributes_Start:SamProcessMappedAttributes
{
[WmiDataId(1),
Description("Signature") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sam;
[WmiDataId(2),
Description("SamTraceVersion") : amended,
read]
uint32 Version;
[WmiDataId(3),
Description("Client SID") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Sid;
[WmiDataId(4),
Description("Client Network Address") : amended,
StringTermination("NullTerminated"),
format("w"),
read]
string Client;
};
[Dynamic,
Description("SAM Process Mapped Attributes") : amended,
EventType(2),
EventTypeName("End"),
locale("MS\\0x409")
]
class SamProcessMappedAttributes_End:SamProcessMappedAttributes
{
};