SidType WMI Security Event log

[dadamsci]

Hi All!

Could you tell me what SidType field means in WMI Security Event log?

eg.

01/17/2013 08:15:07 PM
LogName=Application
SourceName=Microsoft-Windows-User Profile Service
EventCode=1532
EventType=4
Type=Information
ComputerName=xxxxx
User=SYSTEM
Sid=S-1-5-18
SidType=5
TaskCategory=None
OpCode=Info
RecordNumber=3523
Keywords=None
Message=The User Profile Service has stopped.

Thank you

brgds,
Adam

[dadamsci]

Oh great, thank you! 🙂

[HiroshiSatoh · Accepted solution]

Do you thing of this?

http://msdn.microsoft.com/en-us/library/windows/desktop/aa394507%28v=vs.85%29.aspx