User / Device claims information. Subject: Security ID: %1 Account Name: %2 Account Domain: %3 Logon ID: %4 Logon Type: %9 ...

User / Device claims information.

Subject:
	Security ID:		%1
	Account Name:		%2
	Account Domain:		%3
	Logon ID:		%4

Logon Type:			%9

New Logon:
	Security ID:		%5
	Account Name:		%6
	Account Domain:		%7
	Logon ID:		%8

Event in sequence:		%10 of %11

User Claims:			%12

Device Claims:			%13

The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.

The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).

The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.

This event is generated when the Audit User/Device claims subcategory is configured and the user's logon token contains user/device claims information. The Logon ID field can be used to correlate this event with the corresponding user logon event as well as to any other security audit events generated during this logon session.

User %1 cannot be authenticated with OTP. Ensure that a DN is defined for the user name in Active Directory. Error code: ... User %1 cannot be authenticated with OTP. Ensure that a UPN is defined for the user name in Active Directory. Error code: ... User '[2]' has previously initiated an install for product '[3]'. That user will need to run that install again before they ... User '[2]' has previously initiated an install for product '[3]'. That user will need to run that install again before they ... User / Device claims information. Subject: Security ID: %1 Account Name: %2 Account Domain: %3 Logon ID: %4 Logon Type: %9 ... User / Device Claims This policy allows you to audit user and device claims information in the user's logon token. Events ... User Account Changed: Target Account Name: %2 Target Domain: %3 Target Account ID: %4 Caller User Name: %5 Caller Domain: ... User Account Control is turned on, but you must restart your PC for the change to take effect. How does User Account Control ... User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop. This policy setting ...