Audit Logon

struct ae_sesslogon {
   unsigned short ae_so_compname; /* offset */
   unsigned short ae_so_username; /* offset */
   unsigned short ae_so_privilege;
};

where:

• ae_so_compname is an offset (from the beginning address of the ae_sesslogon data structure) to an ASCIIZ string, indicating the requester that established the session.

• ae_so_username is an offset (from the beginning address of the ae_sesslogon data structure) to an ASCIIZ string, indicating the name of the user who initiated the session. If 0, ae_so_username and ae_so_compname are the same.

• ae_so_privilege is one of three values specifying the permission level assigned to ae_so_username. These values, defined in the AUDIT.H header file, have the following meanings: ┌───────────────────────────┬────────────┬─────────────────────────────────────┐
  │ SYMBOLIC CONSTANT │ VALUE │ PRIVILEGE │
  ├───────────────────────────┼────────────┼─────────────────────────────────────┤
  │ AE_GUEST │ 0 │ Guest │
  ├───────────────────────────┼────────────┼─────────────────────────────────────┤
  │ AE_USER │ 1 │ User │
  ├───────────────────────────┼────────────┼─────────────────────────────────────┤
  │ AE_ADMIN │ 2 │ Administrator │
  └───────────────────────────┴────────────┴─────────────────────────────────────┘