Elastic Windows Event Explorer

Publisher - Microsoft-Windows-AuthenticationProvider

Event ID 101


The security package does not cache the credentials needed to authenticate to the server.

Package Name:	%{PackageName}
User Name:	%{UserName}
Domain Name:	%{DomainName}
Server Name:	%{ServerName}
Protected User:	%{ProtectedUser}
Error Code:	%{ErrorCode}

Event Data:

# Name In Type
Out Type
1 PackageName win:UnicodeString xs:string
2 UserName win:UnicodeString xs:string
3 DomainName win:UnicodeString xs:string
4 ServerName win:UnicodeString xs:string
5 ProtectedUser win:UInt32 xs:unsignedInt
6 ErrorCode win:HexInt32 win:HexInt32

Observed Windows Versions:

Version: 0

Fingerprint: 7EMGJC7DQTBPU