0byt3m1n1
Path:
C:
/
Windows
/
System32
/
wbem
/
[
Home
]
File: ntdsa.mof
//+------------------------------------------------------------------------- // // Microsoft Windows // // Copyright (C) Microsoft Corporation, 1996 - 1999 // // File: ntdsa.mof // //-------------------------------------------------------------------------- //************************************************** // *** NT Active Directory Service Trace Data Layout //************************************************** #pragma classflags("forceupdate") #pragma namespace ("\\\\.\\Root\\WMI") [Dynamic, Description("Active Directory Domain Services: Core") : amended, Guid("{1c83b2fc-c04f-11d1-8afc-00c04fc21914}"), EventVersion(4), locale("MS\\0x409")] class MSAD_Trace:EventTrace { }; [Dynamic, Description("Directory DsKcc Guid") : amended, Guid("{5b7eb15d-7441-11d2-b711-00c04fb998a2}"), EventVersion(4), DisplayName("DsKccGuid"), locale("MS\\0x409") ] class DsKccGuid:MSAD_Trace { }; [Dynamic, Description("Directory DsKcc Guid") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsKccGuid_Start:DsKccGuid { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Null1") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null1; [WmiDataId(7), Description("Null2") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null2; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DsKcc Guid") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsKccGuid_End:DsKccGuid { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(7), Description("Null2") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null2; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory Search") : amended, Guid("{05acd000-daeb-11d1-be80-00c04fadfff5}"), EventVersion(4), DisplayName("DsDirSearch"), locale("MS\\0x409") ] class DsDirSearch:MSAD_Trace { }; [Dynamic, Description("Directory Search") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDirSearch_Start:DsDirSearch { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Caller Type") : amended, StringTermination("ReverseCounted"), format("w"), read] string Caller; [WmiDataId(7), Description("Search Type") : amended, StringTermination("ReverseCounted"), format("w"), read] string Choice; [WmiDataId(8), Description("Search DN") : amended, StringTermination("ReverseCounted"), format("w"), read] string ObjDN; [WmiDataId(9), Description("Filter") : amended, StringTermination("ReverseCounted"), format("w"), read] string Filter; [WmiDataId(10), Description("Required Attributes") : amended, StringTermination("ReverseCounted"), format("w"), read] string RequiredAttributes; [WmiDataId(11), Description("Common Args") : amended, StringTermination("ReverseCounted"), format("w"), read] string CommonArgs; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory Search") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDirSearch_End:DsDirSearch { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Error Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(7), Description("Filter") : amended, StringTermination("ReverseCounted"), format("w"), read] string Filter; [WmiDataId(8), Description("Index") : amended, StringTermination("ReverseCounted"), format("w"), read] string Index; [WmiDataId(9), Description("Entries Visited") : amended, StringTermination("ReverseCounted"), format("w"), read] string EntriesVisited; [WmiDataId(10), Description("Entries Returned") : amended, StringTermination("ReverseCounted"), format("w"), read] string EntriesReturned; [WmiDataId(11), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory Add Entry") : amended, Guid("{05acd001-daeb-11d1-be80-00c04fadfff5}"), EventVersion(4), DisplayName("DsDirAddEntry"), locale("MS\\0x409") ] class DsDirAddEntry:MSAD_Trace { }; [Dynamic, Description("Directory Add Entry") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDirAddEntry_Start:DsDirAddEntry { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Caller Type") : amended, StringTermination("ReverseCounted"), format("w"), read] string Caller; [WmiDataId(7), Description("Add DN") : amended, StringTermination("ReverseCounted"), format("w"), read] string ObjDn; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory Add Entry") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDirAddEntry_End:DsDirAddEntry { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description(" Return Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(7), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory Modify Entry") : amended, Guid("{05acd002-daeb-11d1-be80-00c04fadfff5}"), EventVersion(4), DisplayName("DsDirMod"), locale("MS\\0x409") ] class DsDirMod:MSAD_Trace { }; [Dynamic, Description("Directory Modify Entry") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDirMod_Start:DsDirMod { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Caller Type") : amended, StringTermination("ReverseCounted"), format("w"), read] string Caller; [WmiDataId(7), Description("Modify DN") : amended, StringTermination("ReverseCounted"), format("w"), read] string ObjDn; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("Counted"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory Modify Entry") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDirMod_End:DsDirMod { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Return Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(7), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("Counted"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory ModDN") : amended, Guid("{05acd005-daeb-11d1-be80-00c04fadfff5}"), EventVersion(4), DisplayName("DsDirModDN"), locale("MS\\0x409") ] class DsDirModDN:MSAD_Trace { }; [Dynamic, Description("Directory ModDN") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDirModDN_Start:DsDirModDN { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Caller Type") : amended, StringTermination("ReverseCounted"), format("w"), read] string Caller; [WmiDataId(7), Description("ModDn DN") : amended, StringTermination("ReverseCounted"), format("w"), read] string ObjDn; [WmiDataId(8), Description("Parent Dn") : amended, StringTermination("ReverseCounted"), format("w"), read] string NewParentDn; [WmiDataId(9), Description("New RDN") : amended, StringTermination("ReverseCounted"), format("w"), read] string NewName; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory ModDN") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDirModDN_End:DsDirModDN { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Return Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(7), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory Delete Entry") : amended, Guid("{05acd003-daeb-11d1-be80-00c04fadfff5}"), EventVersion(4), DisplayName("DsDirDel"), locale("MS\\0x409") ] class DsDirDel:MSAD_Trace { }; [Dynamic, Description("Directory Delete Entry") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDirDel_Start:DsDirDel { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Caller Type") : amended, StringTermination("ReverseCounted"), format("w"), read] string Caller; [WmiDataId(7), Description("Del DN") : amended, StringTermination("ReverseCounted"), format("w"), read] string ObjDn; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("Counted"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory Delete Entry") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDirDel_End:DsDirDel { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Return Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(7), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("Counted"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory Compare Entry") : amended, Guid("{05acd004-daeb-11d1-be80-00c04fadfff5}"), EventVersion(4), DisplayName("DsDirCompare"), locale("MS\\0x409") ] class DsDirCompare:MSAD_Trace { }; [Dynamic, Description("Directory Compare Entry") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDirCompare_Start:DsDirCompare { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Caller Type") : amended, StringTermination("ReverseCounted"), format("w"), read] string Caller; [WmiDataId(7), Description("Assertion Type") : amended, StringTermination("ReverseCounted"), format("w"), read] string AssertType; [WmiDataId(8), Description("Compare DN") : amended, StringTermination("ReverseCounted"), format("w"), read] string ObjDn; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory Compare Entry") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDirCompare_End:DsDirCompare { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Return Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(7), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory Get NC Changes") : amended, Guid("{05acd006-daeb-11d1-be80-00c04fadfff5}"), EventVersion(4), DisplayName("DsDirGtNcChg"), locale("MS\\0x409") ] class DsDirGtNcChg:MSAD_Trace { }; [Dynamic, Description("Directory Get NC Changes") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDirGtNcChg_Start:DsDirGtNcChg { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("UUID Destination") : amended, StringTermination("ReverseCounted"), format("w"), read] string UuidDest; [WmiDataId(7), Description("Naming Context") : amended, StringTermination("ReverseCounted"), format("w"), read] string NcDn; [WmiDataId(8), Description("USN High Object In") : amended, StringTermination("ReverseCounted"), format("w"), read] string UsnVecFrom; [WmiDataId(9), Description("Flags") : amended, StringTermination("ReverseCounted"), format("w"), read] string flags; [WmiDataId(10), Description("Critical") : amended, StringTermination("ReverseCounted"), format("w"), read] string RetCrit; [WmiDataId(11), Description("Extended Op") : amended, StringTermination("ReverseCounted"), format("w"), read] string ExtOp; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory Get NC Changes") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDirGtNcChg_End:DsDirGtNcChg { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Number Objects") : amended, StringTermination("ReverseCounted"), format("w"), read] string NumObj; [WmiDataId(7), Description("Number Bytes") : amended, StringTermination("ReverseCounted"), format("w"), read] string NumBytes; [WmiDataId(8), Description("USN High Object Out") : amended, StringTermination("ReverseCounted"), format("w"), read] string UsnVecTo; [WmiDataId(9), Description("Return Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ExtRet; [WmiDataId(10), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory Replication Sync") : amended, Guid("{05acd007-daeb-11d1-be80-00c04fadfff5}"), EventVersion(4), DisplayName("DsDirReplSync"), locale("MS\\0x409") ] class DsDirReplSync:MSAD_Trace { }; [Dynamic, Description("Directory Replication Sync") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDirReplSync_Start:DsDirReplSync { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Naming Context") : amended, StringTermination("ReverseCounted"), format("w"), read] string NcDn; [WmiDataId(7), Description("Replica Object") : amended, StringTermination("ReverseCounted"), format("w"), read] string DsaOrUuid; [WmiDataId(8), Description("Options") : amended, StringTermination("ReverseCounted"), format("w"), read] string Options; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory Replication Sync") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDirReplSync_End:DsDirReplSync { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Return Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(7), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory Find") : amended, Guid("{05acd008-daeb-11d1-be80-00c04fadfff5}"), EventVersion(4), DisplayName("DsDirFind"), locale("MS\\0x409") ] class DsDirFind:MSAD_Trace { }; [Dynamic, Description("Directory Find") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDirFind_Start:DsDirFind { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Caller Type") : amended, StringTermination("ReverseCounted"), format("w"), read] string Caller; [WmiDataId(7), Description("AttId") : amended, StringTermination("ReverseCounted"), format("w"), read] string AttId; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory Find") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDirFind_End:DsDirFind { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Return Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(7), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory Bind") : amended, Guid("{05acd009-daeb-11d1-be80-00c04fadfff5}"), EventVersion(4), DisplayName("DsLdapBind"), locale("MS\\0x409") ] class DsLdapBind:MSAD_Trace { }; [Dynamic, Description("Directory Bind") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsLdapBind_Start:DsLdapBind { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Null1") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null1; [WmiDataId(7), Description("Null2") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null2; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory Bind") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsLdapBind_End:DsLdapBind { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Return Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(7), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory KccTask") : amended, Guid("{14f8aa22-7f4b-11d2-b389-0000f87a46c8}"), EventVersion(4), DisplayName("DsKccTask"), locale("MS\\0x409") ] class DsKccTask:MSAD_Trace { }; [Dynamic, Description("Directory KccTask") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsKccTask_Start:DsKccTask { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Null1") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null1; [WmiDataId(7), Description("Null2") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null2; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory KccTask") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsKccTask_End:DsKccTask { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(7), Description("Null2") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null2; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DrsReplSync") : amended, Guid("{14f8aa23-7f4b-11d2-b389-0000f87a46c8}"), EventVersion(4), DisplayName("DsDrsReplSync"), locale("MS\\0x409") ] class DsDrsReplSync:MSAD_Trace { }; [Dynamic, Description("Directory DrsReplSync") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDrsReplSync_Start:DsDrsReplSync { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("ObjDN") : amended, StringTermination("ReverseCounted"), format("w"), read] string ObjDN; [WmiDataId(7), Description("DraSrc") : amended, StringTermination("ReverseCounted"), format("w"), read] string DraSrc; [WmiDataId(8), Description("UuidSrc") : amended, StringTermination("ReverseCounted"), format("w"), read] string UuidSrc; [WmiDataId(9), Description("Options") : amended, StringTermination("ReverseCounted"), format("w"), read] string Options; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DrsReplSync") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDrsReplSync_End:DsDrsReplSync { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Return Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(7), Description("Win32 Message") : amended, StringTermination("ReverseCounted"), format("w"), read] string Win32Msg; [WmiDataId(8), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DrsReplGtChg") : amended, Guid("{14f8aa24-7f4b-11d2-b389-0000f87a46c8}"), EventVersion(4), DisplayName("DsDrsReplGtChg"), locale("MS\\0x409") ] class DsDrsReplGtChg:MSAD_Trace { }; [Dynamic, Description("Directory DrsReplGtChg") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDrsReplGtChg_Start:DsDrsReplGtChg { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("UuidDest") : amended, StringTermination("ReverseCounted"), format("w"), read] string UuidDest; [WmiDataId(7), Description("NcDn") : amended, StringTermination("ReverseCounted"), format("w"), read] string NcDn; [WmiDataId(8), Description("UsnFromHighObj") : amended, StringTermination("ReverseCounted"), format("w"), read] string UsnFromHighObj; [WmiDataId(9), Description("UsnFromHighProp") : amended, StringTermination("ReverseCounted"), format("w"), read] string UsnFromHighProp; [WmiDataId(10), Description("Flags") : amended, StringTermination("ReverseCounted"), format("w"), read] string Flags; [WmiDataId(11), Description("MaxObj") : amended, StringTermination("ReverseCounted"), format("w"), read] string MaxObj; [WmiDataId(12), Description("MaxBytes") : amended, StringTermination("ReverseCounted"), format("w"), read] string MaxBytes; [WmiDataId(13), Description("ExtOp") : amended, StringTermination("ReverseCounted"), format("w"), read] string ExtOp; }; [Dynamic, Description("Directory DrsReplGtChg") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDrsReplGtChg_End:DsDrsReplGtChg { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("UsnToHighObj") : amended, StringTermination("ReverseCounted"), format("w"), read] string UsnToHighObj; [WmiDataId(7), Description("UsnToHighProp") : amended, StringTermination("ReverseCounted"), format("w"), read] string UsnToHighProp; [WmiDataId(8), Description("NumObj") : amended, StringTermination("ReverseCounted"), format("w"), read] string NumObj; [WmiDataId(9), Description("NumByte") : amended, StringTermination("ReverseCounted"), format("w"), read] string NumByte; [WmiDataId(10), Description("ExtRet") : amended, StringTermination("ReverseCounted"), format("w"), read] string ExtRet; [WmiDataId(11), Description("ErrCode") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(12), Description("Compressed Bytes") : amended, StringTermination("ReverseCounted"), format("w"), read] string CompressedBytes; [WmiDataId(13), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; }; [Dynamic, Description("Directory DsDrsUpdtRefs") : amended, Guid("{14f8aa25-7f4b-11d2-b389-0000f87a46c8}"), EventVersion(4), DisplayName("DsDrsUpdtRefs"), locale("MS\\0x409") ] class DsDrsUpdtRefs:MSAD_Trace { }; [Dynamic, Description("Directory DsDrsUpdtRefs") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDrsUpdtRefs_Start:DsDrsUpdtRefs { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("NcDn") : amended, StringTermination("ReverseCounted"), format("w"), read] string NcDn; [WmiDataId(7), Description("DsaDest") : amended, StringTermination("ReverseCounted"), format("w"), read] string DsaDest; [WmiDataId(8), Description("UuidDest") : amended, StringTermination("ReverseCounted"), format("w"), read] string UuidDest; [WmiDataId(9), Description("Options") : amended, StringTermination("ReverseCounted"), format("w"), read] string Options; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DsDrsUpdtRefs") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDrsUpdtRefs_End:DsDrsUpdtRefs { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Return Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(7), Description("Win32 Message") : amended, StringTermination("ReverseCounted"), format("w"), read] string Win32Msg; [WmiDataId(8), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DrsReplAdd") : amended, Guid("{14f8aa26-7f4b-11d2-b389-0000f87a46c8}"), EventVersion(4), DisplayName("DsDrsReplAdd"), locale("MS\\0x409") ] class DsDrsReplAdd:MSAD_Trace { }; [Dynamic, Description("Directory DrsReplAdd") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDrsReplAdd_Start:DsDrsReplAdd { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("NcDn") : amended, StringTermination("ReverseCounted"), format("w"), read] string NcDn; [WmiDataId(7), Description("SrcDsaDn") : amended, StringTermination("ReverseCounted"), format("w"), read] string SrcDsaDn; [WmiDataId(8), Description("TransDn") : amended, StringTermination("ReverseCounted"), format("w"), read] string TransDn; [WmiDataId(9), Description("DsaSrc") : amended, StringTermination("ReverseCounted"), format("w"), read] string DsaSrc; [WmiDataId(10), Description("Options") : amended, StringTermination("ReverseCounted"), format("w"), read] string Options; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DrsReplAdd") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDrsReplAdd_End:DsDrsReplAdd { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Return Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(7), Description("Win32 Message") : amended, StringTermination("ReverseCounted"), format("w"), read] string Win32Msg; [WmiDataId(8), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DrsReplMod") : amended, Guid("{14f8aa27-7f4b-11d2-b389-0000f87a46c8}"), EventVersion(4), DisplayName("DsDrsReplMod"), locale("MS\\0x409") ] class DsDrsReplMod:MSAD_Trace { }; [Dynamic, Description("Directory DrsReplMod") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDrsReplMod_Start:DsDrsReplMod { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("NcDn") : amended, StringTermination("ReverseCounted"), format("w"), read] string NcDn; [WmiDataId(7), Description("UuidSrc") : amended, StringTermination("ReverseCounted"), format("w"), read] string UuidSrc; [WmiDataId(8), Description("SrcDra") : amended, StringTermination("ReverseCounted"), format("w"), read] string SrcDra; [WmiDataId(9), Description("RepFlags") : amended, StringTermination("ReverseCounted"), format("w"), read] string RepFlags; [WmiDataId(10), Description("ModFields") : amended, StringTermination("ReverseCounted"), format("w"), read] string ModFields; [WmiDataId(11), Description("Options") : amended, StringTermination("ReverseCounted"), format("w"), read] string Options; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DrsReplMod") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDrsReplMod_End:DsDrsReplMod { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Return Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(7), Description("Win32 Message") : amended, StringTermination("ReverseCounted"), format("w"), read] string Win32Msg; [WmiDataId(8), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DrsReplDelete") : amended, Guid("{14f8aa28-7f4b-11d2-b389-0000f87a46c8}"), EventVersion(4), DisplayName("DsDrsReplDel"), locale("MS\\0x409") ] class DsDrsReplDel:MSAD_Trace { }; [Dynamic, Description("Directory DrsReplDelete") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDrsReplDel_Start:DsDrsReplDel { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("NcDn") : amended, StringTermination("ReverseCounted"), format("w"), read] string NcDn; [WmiDataId(7), Description("DsaSrc") : amended, StringTermination("ReverseCounted"), format("w"), read] string DsaSrc; [WmiDataId(8), Description("Options") : amended, StringTermination("ReverseCounted"), format("w"), read] string Options; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DrsReplDelete") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDrsReplDel_End:DsDrsReplDel { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Return Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(7), Description("Win32 Message") : amended, StringTermination("ReverseCounted"), format("w"), read] string Win32Msg; [WmiDataId(8), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DrsVrfyNames") : amended, Guid("{14f8aa29-7f4b-11d2-b389-0000f87a46c8}"), EventVersion(4), DisplayName("DsDrsVrfyNames"), locale("MS\\0x409") ] class DsDrsVrfyNames:MSAD_Trace { }; [Dynamic, Description("Directory DrsVrfyNames") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDrsVrfyNames_Start:DsDrsVrfyNames { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("cNames") : amended, StringTermination("ReverseCounted"), format("w"), read] string cNames; [WmiDataId(7), Description("Flags") : amended, StringTermination("ReverseCounted"), format("w"), read] string Flags; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DrsVrfyNames") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDrsVrfyNames_End:DsDrsVrfyNames { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Return Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(7), Description("Win32 Message") : amended, StringTermination("ReverseCounted"), format("w"), read] string Win32Msg; [WmiDataId(8), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DsDrsInterDmMove") : amended, Guid("{14f8aa2a-7f4b-11d2-b389-0000f87a46c8}"), EventVersion(4), DisplayName("DsDrsIntDmMv"), locale("MS\\0x409") ] class DsDrsIntDmMv:MSAD_Trace { }; [Dynamic, Description("Directory DsDrsInterDmMove") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDrsIntDmMv_Start:DsDrsIntDmMv { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("SrcDsaDn") : amended, StringTermination("ReverseCounted"), format("w"), read] string SrcDsaDn; [WmiDataId(7), Description("SrcObjDn") : amended, StringTermination("ReverseCounted"), format("w"), read] string SrcObjDn; [WmiDataId(8), Description("DstNameDn") : amended, StringTermination("ReverseCounted"), format("w"), read] string DstNameDn; [WmiDataId(9), Description("TargetNcDn") : amended, StringTermination("ReverseCounted"), format("w"), read] string TargetNcDn; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DsDrsInterDmMove") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDrsIntDmMv_End:DsDrsIntDmMv { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Return Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(7), Description("Win32 Message") : amended, StringTermination("ReverseCounted"), format("w"), read] string Win32Msg; [WmiDataId(8), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DsDrsAddEntry") : amended, Guid("{14f8aa2b-7f4b-11d2-b389-0000f87a46c8}"), EventVersion(4), DisplayName("DsDrsAddEntry"), locale("MS\\0x409") ] class DsDrsAddEntry:MSAD_Trace { }; [Dynamic, Description("Directory DsDrsAddEntry") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDrsAddEntry_Start:DsDrsAddEntry { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("cObj") : amended, StringTermination("ReverseCounted"), format("w"), read] string cObj; [WmiDataId(7), Description("NameDn") : amended, StringTermination("ReverseCounted"), format("w"), read] string NameDn; [WmiDataId(8), Description("NextNameDn") : amended, StringTermination("ReverseCounted"), format("w"), read] string NextNameDn; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DsDrsAddEntry") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDrsAddEntry_End:DsDrsAddEntry { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("cObjAdded") : amended, StringTermination("ReverseCounted"), format("w"), read] string cObjAdded; [WmiDataId(7), Description("Return Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(8), Description("Win32 Message") : amended, StringTermination("ReverseCounted"), format("w"), read] string Win32Msg; [WmiDataId(9), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DsDrsExecKcc") : amended, Guid("{14f8aa2c-7f4b-11d2-b389-0000f87a46c8}"), EventVersion(4), DisplayName("DsDrsExecKcc"), locale("MS\\0x409") ] class DsDrsExecKcc:MSAD_Trace { }; [Dynamic, Description("Directory DsDrsExecKcc") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDrsExecKcc_Start:DsDrsExecKcc { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("TaskId") : amended, StringTermination("ReverseCounted"), format("w"), read] string TaskId; [WmiDataId(7), Description("Flags") : amended, StringTermination("ReverseCounted"), format("w"), read] string Flags; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DsDrsExecKcc") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDrsExecKcc_End:DsDrsExecKcc { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Return Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(7), Description("Win32 Message") : amended, StringTermination("ReverseCounted"), format("w"), read] string Win32Msg; [WmiDataId(8), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DsDrsGtReplInfo") : amended, Guid("{14f8aa2d-7f4b-11d2-b389-0000f87a46c8}"), EventVersion(4), DisplayName("DsDrsGtReplInfo"), locale("MS\\0x409") ] class DsDrsGtReplInfo:MSAD_Trace { }; [Dynamic, Description("Directory DsDrsGtReplInfo") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDrsGtReplInfo_Start:DsDrsGtReplInfo { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("InfoType") : amended, StringTermination("ReverseCounted"), format("w"), read] string InfoType; [WmiDataId(7), Description("ObjDn") : amended, StringTermination("ReverseCounted"), format("w"), read] string ObjDn; [WmiDataId(8), Description("UuidSrc") : amended, StringTermination("ReverseCounted"), format("w"), read] string UuidSrc; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DsDrsGtReplInfo") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDrsGtReplInfo_End:DsDrsGtReplInfo { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Return Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(7), Description("Win32 Message") : amended, StringTermination("ReverseCounted"), format("w"), read] string Win32Msg; [WmiDataId(8), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DrsGtNT4ChgLg") : amended, Guid("{14f8aa2e-7f4b-11d2-b389-0000f87a46c8}"), EventVersion(4), DisplayName("DsDrsGtNT4ChgLg"), locale("MS\\0x409") ] class DsDrsGtNT4ChgLg:MSAD_Trace { }; [Dynamic, Description("Directory DrsGtNT4ChgLg") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDrsGtNT4ChgLg_Start:DsDrsGtNT4ChgLg { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("flags") : amended, StringTermination("ReverseCounted"), format("w"), read] string flags; [WmiDataId(7), Description("maxLen") : amended, StringTermination("ReverseCounted"), format("w"), read] string maxLen; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DrsGtNT4ChgLg") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDrsGtNT4ChgLg_End:DsDrsGtNT4ChgLg { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("NtStatus") : amended, StringTermination("ReverseCounted"), format("w"), read] string NtStatus; [WmiDataId(7), Description("Win32 Message") : amended, StringTermination("ReverseCounted"), format("w"), read] string Win32Msg; [WmiDataId(8), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DrsCrackNames") : amended, Guid("{14f8aa2f-7f4b-11d2-b389-0000f87a46c8}"), EventVersion(4), DisplayName("DsDrsCrackNames"), locale("MS\\0x409") ] class DsDrsCrackNames:MSAD_Trace { }; [Dynamic, Description("Directory DrsCrackNames") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDrsCrackNames_Start:DsDrsCrackNames { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("cNames") : amended, StringTermination("ReverseCounted"), format("w"), read] string cNames; [WmiDataId(7), Description("CodePage") : amended, StringTermination("ReverseCounted"), format("w"), read] string CodePage; [WmiDataId(8), Description("LocaleId") : amended, StringTermination("ReverseCounted"), format("w"), read] string LocaleId; [WmiDataId(9), Description("FmtOffered") : amended, StringTermination("ReverseCounted"), format("w"), read] string FmtOffered; [WmiDataId(10), Description("FmtDesired") : amended, StringTermination("ReverseCounted"), format("w"), read] string FmtDesired; [WmiDataId(11), Description("Flags") : amended, StringTermination("ReverseCounted"), format("w"), read] string Flags; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DrsCrackNames") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDrsCrackNames_End:DsDrsCrackNames { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Return Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(7), Description("Count of Names Output") : amended, StringTermination("ReverseCounted"), format("w"), read] string CountNamesOut; [WmiDataId(8), Description("Count of Names Cracked") : amended, StringTermination("ReverseCounted"), format("w"), read] string CountNamesCracked; [WmiDataId(9), Description("Count of Names Not Cracked") : amended, StringTermination("ReverseCounted"), format("w"), read] string CountNamesNotCracked; [WmiDataId(10), Description("Status Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string StatusCode; [WmiDataId(11), Description("Win32 Message") : amended, StringTermination("ReverseCounted"), format("w"), read] string Win32Msg; [WmiDataId(12), Description("Status Message") : amended, StringTermination("ReverseCounted"), format("w"), read] string StatusMsg; [WmiDataId(13), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; }; [Dynamic, Description("Directory DrsWrtSPN") : amended, Guid("{14f8aa30-7f4b-11d2-b389-0000f87a46c8}"), EventVersion(4), DisplayName("DsDrsWrtSPN"), locale("MS\\0x409") ] class DsDrsWrtSPN:MSAD_Trace { }; [Dynamic, Description("Directory DrsWrtSPN") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDrsWrtSPN_Start:DsDrsWrtSPN { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Account") : amended, StringTermination("ReverseCounted"), format("w"), read] string Account; [WmiDataId(7), Description("Op") : amended, StringTermination("ReverseCounted"), format("w"), read] string Op; [WmiDataId(8), Description("cSpn") : amended, StringTermination("ReverseCounted"), format("w"), read] string cSpn; [WmiDataId(9), Description("Flags") : amended, StringTermination("ReverseCounted"), format("w"), read] string Flags; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DrsWrtSPN") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDrsWrtSPN_End:DsDrsWrtSPN { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Return Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(7), Description("Win32 Message") : amended, StringTermination("ReverseCounted"), format("w"), read] string Win32Msg; [WmiDataId(8), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DrsDCInfo") : amended, Guid("{14f8aa31-7f4b-11d2-b389-0000f87a46c8}"), EventVersion(4), DisplayName("DsDrsDCInfo"), locale("MS\\0x409") ] class DsDrsDCInfo:MSAD_Trace { }; [Dynamic, Description("Directory DrsDCInfo") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDrsDCInfo_Start:DsDrsDCInfo { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Domain") : amended, StringTermination("ReverseCounted"), format("w"), read] string Domain; [WmiDataId(7), Description("InfoLevel") : amended, StringTermination("ReverseCounted"), format("w"), read] string InfoLevel; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DrsDCInfo") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDrsDCInfo_End:DsDrsDCInfo { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Return Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(7), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DsDrsGtMbrshps") : amended, Guid("{14f8aa32-7f4b-11d2-b389-0000f87a46c8}"), EventVersion(4), DisplayName("DsDrsGtMbrshps"), locale("MS\\0x409") ] class DsDrsGtMbrshps:MSAD_Trace { }; [Dynamic, Description("Directory DsDrsGtMbrshps") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDrsGtMbrshps_Start:DsDrsGtMbrshps { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("cDsNames") : amended, StringTermination("ReverseCounted"), format("w"), read] string cDsNames; [WmiDataId(7), Description("OpType") : amended, StringTermination("ReverseCounted"), format("w"), read] string OpType; [WmiDataId(8), Description("LimitDomDn") : amended, StringTermination("ReverseCounted"), format("w"), read] string LimitDomDn; [WmiDataId(9), Description("Flags") : amended, StringTermination("ReverseCounted"), format("w"), read] string Flags; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Directory DsDrsGtMbrshps") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDrsGtMbrshps_End:DsDrsGtMbrshps { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Return Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(7), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Ldap Request Guid") : amended, Guid("{5b7eb154-7441-11d2-b711-00c04fb998a2}"), EventVersion(4), DisplayName("LdapAtqGuid"), locale("MS\\0x409") ] class LdapAtqGuid:MSAD_Trace { }; [Dynamic, Description("Ldap Request Guid") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class LdapAtqGuid_Start:LdapAtqGuid { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; }; [Dynamic, Description("Ldap Request Guid") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class LdapAtqGuid_End:LdapAtqGuid { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; }; [Dynamic, Description("Ldap Request Head Top Event") : amended, Guid("{b9d4702a-6a98-11d2-b710-00c04fb998a2}"), EventVersion(4), DisplayName("LdapRequest"), locale("MS\\0x409") ] class LdapRequest:MSAD_Trace { }; [Dynamic, Description("Ldap Request Head Top Event") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class LdapRequest_Start:LdapRequest { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Remote Socket String") : amended, StringTermination("ReverseCounted"), format("w"), read] string RemoteSocketString; [WmiDataId(7), Description("EncryptionType") : amended, StringTermination("ReverseCounted"), format("w"), read] string EncryptionType; [WmiDataId(8), Description("Network Protocol") : amended, StringTermination("ReverseCounted"), format("w"), read] string udptcp; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Ldap Request Head Top Event") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class LdapRequest_End:LdapRequest { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Return Point") : amended, StringTermination("ReverseCounted"), format("w"), read] string Id; [WmiDataId(7), Description("Return Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(8), Description("SearchType") : amended, StringTermination("ReverseCounted"), format("w"), read] string SearchType; [WmiDataId(9), Description("Error Message") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrMsg; [WmiDataId(10), Description("Request Type") : amended, StringTermination("ReverseCounted"), format("w"), read] string RequestType; [WmiDataId(11), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIUpdateStat") : amended, Guid("{D01B04CF-240E-11d3-ACBE-00C04F68A51D}"), EventVersion(4), DisplayName("NSPIUpdateStat"), locale("MS\\0x409") ] class NSPIUpdateStat:MSAD_Trace { }; [Dynamic, Description("NSPIUpdateStat") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NSPIUpdateStat_Start:NSPIUpdateStat { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Null2") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null2; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIUpdateStat") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NSPIUpdateStat_End:NSPIUpdateStat { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Error Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPICompareDNTs") : amended, Guid("{4D63B05C-2502-11d3-ACC1-00C04F68A51D}"), EventVersion(4), DisplayName("NSPICompareDNTs"), locale("MS\\0x409") ] class NSPICompareDNTs:MSAD_Trace { }; [Dynamic, Description("NSPICompareDNTs") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NSPICompareDNTs_Start:NSPICompareDNTs { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Null2") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null2; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPICompareDNTs") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NSPICompareDNTs_End:NSPICompareDNTs { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Error Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIQueryRows") : amended, Guid("{61569D69-2502-11d3-ACC1-00C04F68A51D}"), EventVersion(4), DisplayName("NSPIQueryRows"), locale("MS\\0x409") ] class NSPIQueryRows:MSAD_Trace { }; [Dynamic, Description("NSPIQueryRows") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NSPIQueryRows_Start:NSPIQueryRows { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Null2") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null2; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIQueryRows") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NSPIQueryRows_End:NSPIQueryRows { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Error Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPISeekEntries") : amended, Guid("{6F370D3C-2502-11d3-ACC1-00C04F68A51D}"), EventVersion(4), DisplayName("NSPISeekEntries"), locale("MS\\0x409") ] class NSPISeekEntries:MSAD_Trace { }; [Dynamic, Description("NSPISeekEntries") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NSPISeekEntries_Start:NSPISeekEntries { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Null2") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null2; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPISeekEntries") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NSPISeekEntries_End:NSPISeekEntries { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Error Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIGetMatches") : amended, Guid("{6F370D3D-2502-11d3-ACC1-00C04F68A51D}"), EventVersion(4), DisplayName("NSPIGetMatches"), locale("MS\\0x409") ] class NSPIGetMatches:MSAD_Trace { }; [Dynamic, Description("NSPIGetMatches") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NSPIGetMatches_Start:NSPIGetMatches { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Null2") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null2; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIGetMatches") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NSPIGetMatches_End:NSPIGetMatches { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Error Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIResolveNames") : amended, Guid("{6F370D3E-2502-11d3-ACC1-00C04F68A51D}"), EventVersion(4), DisplayName("NSPIResolveNames"), locale("MS\\0x409") ] class NSPIResolveNames:MSAD_Trace { }; [Dynamic, Description("NSPIResolveNames") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NSPIResolveNames_Start:NSPIResolveNames { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Null2") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null2; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIResolveNames") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NSPIResolveNames_End:NSPIResolveNames { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Error Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIDNToEph") : amended, Guid("{7842189A-2502-11d3-ACC1-00C04F68A51D}"), EventVersion(4), DisplayName("NSPIDNTpEph"), locale("MS\\0x409") ] class NSPIDNToEph:MSAD_Trace { }; [Dynamic, Description("NSPIDNToEph") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NSPIDNToEph_Start:NSPIDNToEph { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Null2") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null2; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIDNToEph") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NSPIDNToEph_End:NSPIDNToEph { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Error Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIGetHierarchyInfo") : amended, Guid("{7842189B-2502-11d3-ACC1-00C04F68A51D}"), EventVersion(4), DisplayName("NSPIGetHierarchyInfo"), locale("MS\\0x409") ] class NSPIGetHierarchyInfo:MSAD_Trace { }; [Dynamic, Description("NSPIGetHierarchyInfo") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NSPIGetHierarchyInfo_Start:NSPIGetHierarchyInfo { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Null2") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null2; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIGetHierarchyInfo") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NSPIGetHierarchyInfo_End:NSPIGetHierarchyInfo { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Error Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIResortRestriction") : amended, Guid("{7842189C-2502-11d3-ACC1-00C04F68A51D}"), EventVersion(4), DisplayName("NSPIResortRestriction"), locale("MS\\0x409") ] class NSPIResortRestriction:MSAD_Trace { }; [Dynamic, Description("NSPIResortRestriction") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NSPIResortRestriction_Start:NSPIResortRestriction { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Null2") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null2; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIResortRestriction") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NSPIResortRestriction_End:NSPIResortRestriction { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Return Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIBind") : amended, Guid("{80AD666A-2502-11d3-ACC1-00C04F68A51D}"), EventVersion(4), DisplayName("NSPIBind"), locale("MS\\0x409") ] class NSPIBind:MSAD_Trace { }; [Dynamic, Description("NSPIBind") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NSPIBind_Start:NSPIBind { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Null1") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null1; [WmiDataId(7), Description("Null2") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null2; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIBind") : amended, EventType(0), EventTypeName("Info"), locale("MS\\0x409") ] class NSPIBind_Info:NSPIBind { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Error Code") : amended, read] uint32 ErrCode; [WmiDataId(7), Description("Peer Address") : amended, StringTermination("ReverseCounted"), format("w"), read] string PeerAddress; [WmiDataId(8), Description("CodePage") : amended, StringTermination("ReverseCounted"), format("w"), read] string CodePage; [WmiDataId(9), Description("UserSid") : amended, StringTermination("ReverseCounted"), format("w"), read] string UserSid; [WmiDataId(10), Description("GAL Chosen") : amended, StringTermination("ReverseCounted"), format("w"), read] string GALChosen; [WmiDataId(11), Description("Template Chosen") : amended, StringTermination("ReverseCounted"), format("w"), read] string TemplateChosen; [WmiDataId(12), Description("RPCBindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(13), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIBind") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NSPIBind_End:NSPIBind { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Session Number") : amended, StringTermination("ReverseCounted"), format("w"), read] string SessionNumber; [WmiDataId(7), Description("Error Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIGetNamesFromIDs") : amended, Guid("{873BDDEA-2502-11d3-ACC1-00C04F68A51D}"), EventVersion(4), DisplayName("NSPIGetNamesFromIDs"), locale("MS\\0x409") ] class NSPIGetNamesFromIDs:MSAD_Trace { }; [Dynamic, Description("NSPIGetNamesFromIDs") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NSPIGetNamesFromIDs_Start:NSPIGetNamesFromIDs { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Null2") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null2; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIGetNamesFromIDs") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NSPIGetNamesFromIDs_End:NSPIGetNamesFromIDs { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Error Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIGetIDsFromNames") : amended, Guid("{873BDDEB-2502-11d3-ACC1-00C04F68A51D}"), EventVersion(4), DisplayName("NSPIGetIDsFromNames"), locale("MS\\0x409") ] class NSPIGetIDsFromNames:MSAD_Trace { }; [Dynamic, Description("NSPIGetIDsFromNames") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NSPIGetIDsFromNames_Start:NSPIGetIDsFromNames { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Null2") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null2; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIGetIDsFromNames") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NSPIGetIDsFromNames_End:NSPIGetIDsFromNames { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Error Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIGetPropList") : amended, Guid("{8D8C5846-2502-11d3-ACC1-00C04F68A51D}"), EventVersion(4), DisplayName("NSPIGetPropList"), locale("MS\\0x409") ] class NSPIGetPropList:MSAD_Trace { }; [Dynamic, Description("NSPIGetPropList") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NSPIGetPropList_Start:NSPIGetPropList { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Null2") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null2; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIGetPropList") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NSPIGetPropList_End:NSPIGetPropList { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Error Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIQueryColumns") : amended, Guid("{8D8C5847-2502-11d3-ACC1-00C04F68A51D}"), EventVersion(4), DisplayName("NSPIQueryColumns"), locale("MS\\0x409") ] class NSPIQueryColumns:MSAD_Trace { }; [Dynamic, Description("NSPIQueryColumns") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NSPIQueryColumns_Start:NSPIQueryColumns { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Null2") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null2; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIQueryColumns") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NSPIQueryColumns_End:NSPIQueryColumns { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Error Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIGetProps") : amended, Guid("{8D8C5848-2502-11d3-ACC1-00C04F68A51D}"), EventVersion(4), DisplayName("NSPIGetProps"), locale("MS\\0x409") ] class NSPIGetProps:MSAD_Trace { }; [Dynamic, Description("NSPIGetProps") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NSPIGetProps_Start:NSPIGetProps { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Null2") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null2; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIGetProps") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NSPIGetProps_End:NSPIGetProps { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Error Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIGetTemplateInfo") : amended, Guid("{96EF9AA6-2502-11d3-ACC1-00C04F68A51D}"), EventVersion(4), DisplayName("NSPIGetTemplateInfo"), locale("MS\\0x409") ] class NSPIGetTemplateInfo:MSAD_Trace { }; [Dynamic, Description("NSPIGetTemplateInfo") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NSPIGetTemplateInfo_Start:NSPIGetTemplateInfo { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Null2") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null2; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIGetTemplateInfo") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NSPIGetTemplateInfo_End:NSPIGetTemplateInfo { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Error Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIModProps") : amended, Guid("{96EF9AA7-2502-11d3-ACC1-00C04F68A51D}"), EventVersion(4), DisplayName("NSPIModProps"), locale("MS\\0x409") ] class NSPIModProps:MSAD_Trace { }; [Dynamic, Description("NSPIModProps") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NSPIModProps_Start:NSPIModProps { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Null2") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null2; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIModProps") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NSPIModProps_End:NSPIModProps { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Error Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIModLinkAtt") : amended, Guid("{380D48A4-2506-11d3-ACC1-00C04F68A51D}"), EventVersion(4), DisplayName("NSPIModLinkAtt"), locale("MS\\0x409") ] class NSPIModLinkAtt:MSAD_Trace { }; [Dynamic, Description("NSPIModLinkAtt") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NSPIModLinkAtt_Start:NSPIModLinkAtt { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Null2") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null2; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIModLinkAtt") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NSPIModLinkAtt_End:NSPIModLinkAtt { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Error Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIDeleteEntries") : amended, Guid("{380D48A5-2506-11d3-ACC1-00C04F68A51D}"), EventVersion(4), DisplayName("NSPIDeleteEntries"), locale("MS\\0x409") ] class NSPIDeleteEntries:MSAD_Trace { }; [Dynamic, Description("NSPIDeleteEntries") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NSPIDeleteEntries_Start:NSPIDeleteEntries { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Null2") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null2; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("NSPIDeleteEntries") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NSPIDeleteEntries_End:NSPIDeleteEntries { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("RPC BindId") : amended, StringTermination("ReverseCounted"), format("w"), read] string RPCBindId; [WmiDataId(7), Description("Error Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Task Queue Execute") : amended, Guid("{E357DC53-B6FC-48e0-8189-C9D2AB2A8F16}"), EventVersion(4), DisplayName("Task Queue Execute"), locale("MS\\0x409") ] class TaskQueueExecute:MSAD_Trace { }; [Dynamic, Description("Task Queue Execute") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class TaskQueueExecute_Start:TaskQueueExecute { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Task Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string FunctionName; [WmiDataId(7), Description("Task Parameter") : amended, StringTermination("ReverseCounted"), format("w"), read] string TaskParam; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("Task Queue Execute") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class TaskQueueExecute_End:TaskQueueExecute { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Task Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string FunctionName; [WmiDataId(7), Description("Task Parameter") : amended, StringTermination("ReverseCounted"), format("w"), read] string TaskParam; [WmiDataId(8), Description("Exception Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string DSExcept; [WmiDataId(9), Description("Next Schedule") : amended, StringTermination("ReverseCounted"), format("w"), read] string SecsFromNow; [WmiDataId(10), Description("Next Parameter") : amended, StringTermination("ReverseCounted"), format("w"), read] string NextParam; [WmiDataId(11), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("DrsQuerySitesByCost") : amended, Guid("{0c685beb-377e-4d09-b360-161f49e14348}"), EventVersion(4), DisplayName("Task Queue Execute"), locale("MS\\0x409") ] class DrsQuerySitesByCost:MSAD_Trace { }; [Dynamic, Description("DrsQuerySitesByCost") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DrsQuerySitesByCost_Start : DrsQuerySitesByCost { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("From Site") : amended, StringTermination("ReverseCounted"), format("w"), read] string FromSite; [WmiDataId(7), Description("To Site1") : amended, StringTermination("ReverseCounted"), format("w"), read] string ToSite1; [WmiDataId(8), Description("To Site2") : amended, StringTermination("ReverseCounted"), format("w"), read] string ToSite2; [WmiDataId(9), Description("To Site3") : amended, StringTermination("ReverseCounted"), format("w"), read] string ToSite3; [WmiDataId(10), Description("To Site4") : amended, StringTermination("ReverseCounted"), format("w"), read] string ToSite4; [WmiDataId(11), Description("To Site5") : amended, StringTermination("ReverseCounted"), format("w"), read] string ToSite5; [WmiDataId(12), Description("To Site6") : amended, StringTermination("ReverseCounted"), format("w"), read] string ToSite6; [WmiDataId(13), Description("To Site7") : amended, StringTermination("ReverseCounted"), format("w"), read] string ToSite7; }; [Dynamic, Description("DrsQuerySitesByCost") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DrsQuerySitesByCost_End:DrsQuerySitesByCost { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Error Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(7), Description("Win32 Message") : amended, StringTermination("ReverseCounted"), format("w"), read] string Win32Msg; [WmiDataId(8), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("DSDBIndexConsidered") : amended, Guid("{37ea7ff8-a66a-492c-8238-b670063c95e3}"), EventVersion(4), DisplayName("DSDBIndexConsidered"), locale("MS\\0x409") ] class DSDBIndexConsidered:MSAD_Trace { }; [Dynamic, Description("DSDBIndexConsidered") : amended, EventType(0), EventTypeName("Info"), locale("MS\\0x409") ] class DSDBIndexConsidered_Info:DSDBIndexConsidered { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Index Considered") : amended, StringTermination("ReverseCounted"), format("w"), read] string IndexConsidered; [WmiDataId(7), Description("Estimated Entries") : amended, StringTermination("ReverseCounted"), format("w"), read] string EstimatedEntries; [WmiDataId(8), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("DsDBIndexChosen") : amended, Guid("{1ced6cf7-5089-4ef7-bfa3-88371e371404}"), EventVersion(4), DisplayName("DsDBIndexChosen"), locale("MS\\0x409") ] class DsDBIndexChosen:MSAD_Trace { }; [Dynamic, Description("DsDBIndexChosen") : amended, EventType(0), EventTypeName("Info"), locale("MS\\0x409") ] class DsDBIndexChosen_Info:DsDBIndexChosen { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Index Chosen") : amended, StringTermination("ReverseCounted"), format("w"), read] string IndexChosen; [WmiDataId(7), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("DsDBIntersectIndexes") : amended, Guid("{34f8aaf1-b78e-421b-ba68-f630db35b1e9}"), EventVersion(4), DisplayName("DsDBIntersectIndexes"), locale("MS\\0x409") ] class DsDBIntersectIndexes:MSAD_Trace { }; [Dynamic, Description("DsDBIntersectIndexes") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDBIntersectIndexes_Start:DsDBIntersectIndexes { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Intersecting Indexes") : amended, StringTermination("ReverseCounted"), format("w"), read] string IntersectIndexes; [WmiDataId(7), Description("Null2") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null2; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("DsDBIntersectIndexes") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDBIntersectIndexes_End:DsDBIntersectIndexes { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Error Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(7), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(8), Description("Estimated Entries") : amended, StringTermination("ReverseCounted"), format("w"), read] string EstimatedEntries; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("DsDBSortIndex") : amended, Guid("{e475b1c7-baf6-4e80-b07e-fcd9ecd489b2}"), EventVersion(4), DisplayName("DsDBSortIndex"), locale("MS\\0x409") ] class DsDBSortIndex:MSAD_Trace { }; [Dynamic, Description("DsDBSortIndex") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDBSortIndex_Start:DsDBSortIndex { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Sort Indexes") : amended, StringTermination("ReverseCounted"), format("w"), read] string SortIndexes; [WmiDataId(7), Description("Sort Attribute") : amended, StringTermination("ReverseCounted"), format("w"), read] string SortAttr; [WmiDataId(8), Description("Sort Attribute Syntax") : amended, StringTermination("ReverseCounted"), format("w"), read] string AttrSyntax; [WmiDataId(9), Description("Sort Locale") : amended, StringTermination("ReverseCounted"), format("w"), read] string SortLocale; [WmiDataId(10), Description("Is Ascending Order") : amended, StringTermination("ReverseCounted"), format("w"), read] string IsAscendingOrder; [WmiDataId(11), Description("Is Forward Search") : amended, StringTermination("ReverseCounted"), format("w"), read] string IsForwardSearch; [WmiDataId(12), Description("Is VLV Search") : amended, StringTermination("ReverseCounted"), format("w"), read] string IsVLVSearch; [WmiDataId(13), Description("Max Temp Table Size Requested") : amended, StringTermination("ReverseCounted"), format("w"), read] string MaxTempTableSize; }; [Dynamic, Description("DsDBSortIndex") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDBSortIndex_End:DsDBSortIndex { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Error Code") : amended, StringTermination("ReverseCounted"), format("w"), read] string ErrCode; [WmiDataId(7), Description("Entries in Sort Table") : amended, StringTermination("ReverseCounted"), format("w"), read] string EntriesInSortTable; [WmiDataId(8), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("DsDBTransitiveEval") : amended, Guid("{cffe02d0-f86a-4c74-82a0-dab15afc85fb}"), EventVersion(4), DisplayName("DsDBTransitiveEval"), locale("MS\\0x409") ] class DsDBTransitiveEval:MSAD_Trace { }; [Dynamic, Description("DsDBTransitiveEval") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class DsDBTransitiveEval_Start:DsDBTransitiveEval { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Link base") : amended, StringTermination("ReverseCounted"), format("w"), read] string LinkBase; [WmiDataId(7), Description("Direction") : amended, StringTermination("ReverseCounted"), format("w"), read] string Direction; [WmiDataId(8), Description("Attribute") : amended, StringTermination("ReverseCounted"), format("w"), read] string AttributeName; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; }; [Dynamic, Description("DsDBTransitiveEval") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class DsDBTransitiveEval_End:DsDBTransitiveEval { [WmiDataId(1), Description("Signature") : amended, format("c"), read] sint8 Signature[2]; [WmiDataId(2), Description("DsTraceVersion") : amended, read] sint8 Version; [WmiDataId(3), Description("Number of Inserts") : amended, read] sint8 Inserts; [WmiDataId(4), Description("Message Id") : amended, read] uint32 messageId; [WmiDataId(5), Description("Client Context") : amended, read] uint32 BindId; [WmiDataId(6), Description("Objects Visited") : amended, StringTermination("ReverseCounted"), format("w"), read] string ObjectsVisited; [WmiDataId(7), Description("Instance Name") : amended, StringTermination("ReverseCounted"), format("w"), read] string InstanceName; [WmiDataId(8), Description("Null3") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null3; [WmiDataId(9), Description("Null4") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null4; [WmiDataId(10), Description("Null5") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null5; [WmiDataId(11), Description("Null6") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null6; [WmiDataId(12), Description("Null7") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null7; [WmiDataId(13), Description("Null8") : amended, StringTermination("ReverseCounted"), format("w"), read] string Null8; };