Audit Logon Limit Exceeded

An audit log entry is written when users remain logged on while their account limitations no longer permit them to be logged on.

struct ae_acclim {
  unsigned short ae_al_compname; /* offset */
  unsigned short ae_al_username; /* offset */
  unsigned short ae_al_resname;  /* offset */
  unsigned short ae_al_limit;
};

where:

• ae_al_compname is an offset (from the beginning address of the ae_acclim data structure) to an ASCIIZ string indicating the requester that established the session.

• ae_al_username is an offset (from the beginning address of the ae_acclim data structure) to an ASCIIZ string indicating the name of the user who initiated the session. If 0, ae_al_username and ae_al_compname are the same.

• ae_al_resname is the offset to the resource name.

• ae_al_limit is the limit that was exceeded, as follows: ┌────────────────────┬───────┬─────────────────────────────────────────────────┐
  │ SYMBOLIC CONSTANT │ VALUE │ MEANING │
  ├────────────────────┼───────┼─────────────────────────────────────────────────┤
  │ AE_LIM_UNKNOWN │ 0 │ Unknown or unavailable. │
  ├────────────────────┼───────┼─────────────────────────────────────────────────┤
  │ AE_LIM_LOGONHOURS │ 1 │ Logon hours. │
  ├────────────────────┼───────┼─────────────────────────────────────────────────┤
  │ AE_LIM_EXPIRED │ 2 │ Account expired. │
  └────────────────────┴───────┴─────────────────────────────────────────────────┘