Security
Highlighted

SidType WMI Security Event log

Engager

Hi All!

Could you tell me what SidType field means in WMI Security Event log?

eg.

01/17/2013 08:15:07 PM
LogName=Application
SourceName=Microsoft-Windows-User Profile Service
EventCode=1532
EventType=4
Type=Information
ComputerName=xxxxx
User=SYSTEM
Sid=S-1-5-18
SidType=5
TaskCategory=None
OpCode=Info
RecordNumber=3523
Keywords=None
Message=The User Profile Service has stopped.

Thank you

brgds,
Adam

Highlighted
Highlighted

Re: SidType WMI Security Event log

Engager

Oh great, thank you! 🙂

0 Karma