KGRKJGETMRETU895U-589TY5MIGM5JGB5SDFESFREWTGR54TY
Server : Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
System : Windows NT SERVER-PC 10.0 build 26200 (Windows 11) AMD64
User : ServerPC ( 0)
PHP Version : 8.2.12
Disable Function : NONE
Directory :  C:/Windows/System32/winevt/Logs/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : C:/Windows/System32/winevt/Logs/Microsoft-Windows-Winlogon%4Operational.evtx
ElfFile�
�|j��ElfChnk
�

�
�`��n?�\KI*��R=�����f?�m�MF�q�**�
/.\1C[���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
4L�!++@/.\1C[���P+��`�
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���c�����X�څ��������*D�	EventDataA��3R��oData=Event
A��3R%=SubscriberName

Sensv�**�
iJ\1C[���1�&
4L%!+,@iJ\1C[���P+��`�
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�
�L\1C[���1�&
4L+!++@�L\1C[���P+��`�
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv��**�
�s\1C[���1�&
4L+!+,@�s\1C[���P+��`�
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvt�**�
{�\1C[���1�&
4L%!++@{�\1C[���P+��`�
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sensl�c��**�
�\1C[���1�&
4L%!+,@�\1C[���P+��`�
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sensl�c��**�
��\1C[���1�&
4L1!++@��\1C[���P+��`�
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�
��\1C[���1�&
4L1!+,@��\1C[���P+��`�
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�

&z�[���1�&
4L-!++@
&z�[���P+���]LS
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�
t&z�[���1�&
4L-!+,@t&z�[���P+���]LS
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClientl�c��**x
�&z�[���1�&
4L+!++@�&z�[���P+���]LS
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvpx**x
o�&z�[���1�&
4L+!+,@o�&z�[���P+���]LS
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvsx**�
�jmz�[���1�&
4L9! @�jmz�[�Mv ��0L����?��]LS
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L��LNc�T�� �����*in�**�
1sz�[���1�&
4Lu! @1sz�[�Mv ��0L����?��]LS
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Qq&��8Q�@X�ٌ�
7F��:*A��-R=Win32Status
l�c��**x
B��z�[���1�&
4L+!++@B��z�[�Mv ��0L����?��]LS
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvpx**x 
��z�[���1�&
4L+!+,@��z�[�Mv ��0L����?��]LS 
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvnx**�!
ef7{�[���1�&
4L%!++@ef7{�[�0�Pg�(	%`�!
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
	Sens-Win�**�"
�7{�[���1�&
4L%!+,@�7{�[�0�Pg�(	%`�"
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
	Sens-Win�**�#
��7{�[���1�&
4L1!++@��7{�[�0�Pg�(	%`�#
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��	SessionEnvgo�**�$
��7{�[���1�&
4L1!+,@��7{�[�0�Pg�(	%`�$
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��	SessionEnvgo�**�%
%�7{�[���1�&
4L%!++@%�7{�[�0�Pg�(	%`�%
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens-Win�**�&
}�7{�[���1�&
4L%!+,@}�7{�[�0�Pg�(	%`�&
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sensdows�**�'
��7{�[���1�&
4L+!++@��7{�[�0�Pg�(	%`�'
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvn�**�(
�<@{�[���1�&
4L+!+,@�<@{�[�Mv ��0L����?�`�(
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvn�**�)
n
O��[���1�&
4L%!++@n
O��[�Mv ��0L����?�`�)
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens-Win�**�*
�$O��[���1�&
4L%!+,@�$O��[�Mv ��0L����?�`�*
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens-Win�**�+
-'O��[���1�&
4L+!++@-'O��[�Mv ��0L����?�`�+
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvn�**�,
�MO��[���1�&
4L+!+,@�MO��[�Mv ��0L����?�`�,
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvn�**�-
�vO��[���1�&
4L%!++@�vO��[�Mv ��0L����?�`�-
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens-Win�**�.
9�O��[���1�&
4L%!+,@9�O��[�Mv ��0L����?�`�.
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens-Win�**�/
��O��[���1�&
4L1!++@��O��[�Mv ��0L����?�`�/
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnvws�**�0
�O��[���1�&
4L1!+,@�O��[�Mv ��0L����?�`�0
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnvin�**�1
^,�'2]���1�&
4L%!++@^,�'2]���P+��`�1
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
	Sens-Win�**�2
�N�'2]���1�&
4L%!+,@�N�'2]���P+��`�2
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
	Sens-Win�**�3
�P�'2]���1�&
4L1!++@�P�'2]���P+��`�3
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��	SessionEnvgo�**�4
W�'2]���1�&
4L1!+,@W�'2]���P+��`�4
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��	SessionEnvOp�**�5
��(2]���1�&
4L%!++@��(2]��\ �)<�F�qG�T�`�5
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sensn/Op�**�6
���(2]���1�&
4L%!+,@���(2]��\ �)<�F�qG�T�`�6
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sensiona�**�7
�(2]���1�&
4L+!++@�(2]��\ �)<�F�qG�T�`�7
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv��**�8
I�(2]���1�&
4L+!+,@I�(2]��b��`�@�YhZ�`�8
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�9
Dg]S2]���1�&
4L%!++@Dg]S2]�0��;ʂ�"(E`�9
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
SensTe�**�:
�]S2]���1�&
4L%!+,@�]S2]�0��;ʂ�"(E`�:
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
SensTe�**�;
�]S2]���1�&
4L+!++@�]S2]�0��;ʂ�"(E`�;
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrve�**�<
v�]S2]���1�&
4L+!+,@v�]S2]�0��;ʂ�"(E`�<
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrve�**�=
��]S2]���1�&
4L%!++@��]S2]�0��;ʂ�"(E`�=
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
SensSe�**�>
�]S2]���1�&
4L%!+,@�]S2]�0��;ʂ�"(E`�>
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�?
	�]S2]���1�&
4L1!++@	�]S2]�0��;ʂ�"(E`�?
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv
�**�@
�]S2]���1�&
4L1!+,@�]S2]�0��;ʂ�"(E`�@
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnvSe�**`A
r)&�T]���1�&
4L! @r)&�T]���P+��K�eA
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L�rat`**hB
Nn*�T]���1�&
4L! @Nn*�T]���P+��K�eB
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8QqWinh**xC
5pf�T]���1�&
4L+!++@5pf�T]�T��,<�K�}�­'K�eC
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvMx**xD
��f�T]���1�&
4L+!+,@��f�T]�T��,<�K�}�­'K�eD
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�x**�E
���T]���1�&
4L%!++@���T]���P+��`�E
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
	Sensgon��**�F
���T]���1�&
4L%!+,@���T]��1��W	<K�W�`�F
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
	Sensgon��**�G
���T]���1�&
4L1!++@���T]��1��W	<K�W�`�G
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��	SessionEnv1C��**�H
@��T]���1�&
4L1!+,@@��T]��1��W	<K�W�`�H
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��	SessionEnv�8M�**�I
���T]���1�&
4L%!++@���T]��1��W	<K�W�`�I
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens����8M�**�J
��T]���1�&
4L%!+,@��T]��1��W	<K�W�`�J
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens����8M�**�K
��T]���1�&
4L+!++@��T]��1��W	<K�W�`�K
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvM�**�L
^��T]���1�&
4L+!+,@^��T]��1��W�~�W�`�L
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvM�**�M
BX�/b���1�&
4L-!++@BX�/b���P+��ExM
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient���|1C��**�N
RZ�/b���1�&
4L-!+,@RZ�/b���P+��ExN
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClientinlo�**xO
�l�/b���1�&
4L+!++@�l�/b���P+��ExO
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvWx**xP
�/b���1�&
4L+!+,@�/b���P+��ExP
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�x**`Q
��]�/b���1�&
4L! @��]�/b��1��W
<]o�W�ExQ
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L�on�`**hR
��b�/b���1�&
4L! @��b�/b��1��W
<]o�W�ExR
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Qqs-Wh**�S
���/b���1�&
4L-!++@���/b��� ����M�X;�P�E�|S
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClientindo�**�T
9���/b���1�&
4L-!+,@9���/b��� ����M�X;�P�E�|T
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClientft-W�**xU
�T��/b���1�&
4L+!++@�T��/b��� ����M�X;�P�E�|U
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvcx**xV
���/b���1�&
4L+!+,@���/b��� ����M�X;�P�E�|V
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**�W
l�/b���1�&
4L%!++@l�/b���P+��`�W
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�X
�/b���1�&
4L%!+,@�/b���P+��`�X
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�Y
ؠ�/b���1�&
4L+!++@ؠ�/b���P+��`�Y
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**xZ
���/b���1�&
4L+!++@���/b��� ����M�X;�PExZ
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x[
/��/b���1�&
4L+!+,@/��/b��� ����M�X;�PEx[
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�x**�\
U&�/b���1�&
4L+!+,@U&�/b�I�yC���A���r0n.`�\
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�]
<L&�/b���1�&
4L%!++@<L&�/b�I�yC���A���r0n.`�]
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens7<�**�^
~q&�/b���1�&
4L%!+,@~q&�/b�I�yC���A���r0n.`�^
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�_
�&�/b���1�&
4L1!++@�&�/b�I�yC���A���r0n.`�_
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnvso�**�`
��&�/b���1�&
4L1!+,@��&�/b�I�yC���A���r0n.`�`
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv1C��**�a
K-��/b���1�&
4L%!++@K-��/b��� ����M�X;�P`�a
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
	Sensicro�**�b
�O��/b���1�&
4L%!+,@�O��/b��� ����M�X;�P`�b
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
	Sens����8M�**�c
UR��/b���1�&
4L1!++@UR��/b��� ����M�X;�P`�c
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��	SessionEnv�8M�**�d
"Y��/b���1�&
4L1!+,@"Y��/b��� ����M�X;�P`�d
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��	SessionEnv�8M�**�e
([��/b���1�&
4L%!++@([��/b��� ����M�X;�P`�e
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens���|1C��**�f
�r��/b���1�&
4L%!+,@�r��/b��� ����M�X;�P`�f
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sensgon��**�g
;u��/b���1�&
4L+!++@;u��/b��� ����M�X;�P`�g
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvo�**�h
���/b���1�&
4L+!+,@���/b�wb�M�J��a�u`�h
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvW�**�i
O��V0b���1�&
4L%!++@O��V0b��� ����M�X;�P`�i
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sensindo�**�j
>��V0b���1�&
4L%!+,@>��V0b��� ����M�X;�P`�j
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sensindo�**�k
���V0b���1�&
4L+!++@���V0b��� ����M�X;�P`�k
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvo�**�l
��V0b���1�&
4L+!+,@��V0b��� ����M�X;�P`�l
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvo�**�m
z�V0b���1�&
4L%!++@z�V0b��� ����M�X;�P`�m
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sensindo�**�n
!�V0b���1�&
4L%!+,@!�V0b��� ����M�X;�P`�n
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sensft-W�**�o
b)�V0b���1�&
4L1!++@b)�V0b��� ����M�X;�P`�o
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv-W�**�p
b0�V0b���1�&
4L1!+,@b0�V0b��� ����M�X;�P`�p
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv-W�**�q
Wړi0b���1�&
4L-!++@Wړi0b��� �H��D�v�����|�q
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClientMic�**�r
�ܓi0b���1�&
4L-!+,@�ܓi0b��� �H��D�v�����|�r
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient>��Gd�**xs
g�i0b���1�&
4L+!++@g�i0b��� �H��D�v�����|�s
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**xt
�a�i0b���1�&
4L+!+,@�a�i0b��� �H��D�v�����|�t
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**`u
��i0b���1�&
4L! @��i0b��� �H��D�v�����|�u
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L�`**hv
<�i0b���1�&
4L! @<�i0b��� �H��D�v�����|�v
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Qq4h**xw
Ai>j0b���1�&
4L+!++@Ai>j0b��� �H��D�v�����|�w
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**xx
��>j0b���1�&
4L+!+,@��>j0b��� �H��D�v�����|�x
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**�y
��j0b���1�&
4L%!++@��j0b��� �H��D�v����`�y
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
	SensL�**�z
�&�j0b���1�&
4L%!+,@�&�j0b��� �H��D�v����`�z
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
	Sens0	�Ɉ**�{
B(�j0b���1�&
4L1!++@B(�j0b��� �H��D�v����`�{
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��	SessionEnv�l��**�|
�+�j0b���1�&
4L1!+,@�+�j0b��� �H��D�v����`�|
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��	SessionEnv�l��**�}
m-�j0b���1�&
4L%!++@m-�j0b��� �H��D�v����`�}
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�~
>�j0b���1�&
4L%!+,@>�j0b��� �H��D�v����`�~
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�
@�j0b���1�&
4L+!++@@�j0b��� �H��D�v����`�
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��
U��j0b���1�&
4L+!+,@U��j0b��b�ZX5D���v`��
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��
.�%�0b���1�&
4L%!++@.�%�0b�0
�0h�N�Uu`��
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�}<�M���**��
c&�0b���1�&
4L%!+,@c&�0b�0
�0h�N�Uu`��
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Senspd�*�**��
�&�0b���1�&
4L+!++@�&�0b�0
�0h�N�Uu`��
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv��**��
�(&�0b���1�&
4L+!+,@�(&�0b�0
�0h�N�Uu`��
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv �**��
�M&�0b���1�&
4L%!++@�M&�0b�0
�0h�N�Uu`��
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens@C�**��
�m&�0b���1�&
4L%!+,@�m&�0b�0
�0h�N�Uu`��
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens@Ƣ�**��
�s&�0b���1�&
4L1!++@�s&�0b�0
�0h�N�Uu`��
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv*�**��
�|&�0b���1�&
4L1!+,@�|&�0b�0
�0h�N�Uu`��
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv*��M��/��H](�
x�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvr�**�y�w�pd���1�&
4L-!++@�w�pd�*C�}<�M��/��H](�
y�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient_Ne�**�zf��pd���1�&
4L-!+,@f��pd�*C�}<�M��/��H](�
z�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientleD�**�{���pd���1�&
4L%!++@���pd�*C�}<�M��/��H](�
{�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sensd�**�|-��pd���1�&
4L%!+,@-��pd�*C�}<�M��/��H](�
|�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
SensmCh�**�}k��pd���1�&
4L+!++@k��pd�*C�}<�M��/��H](�
}�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�~��pd���1�&
4L+!+,@��pd�P�a�U(�
~�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�:Y�sf���1�&
4L%!++@:Y�sf�����.(�
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
SensLoo�**��풌sf���1�&
4L%!+,@풌sf�����.(�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sensme�**�����sf���1�&
4L+!++@���sf�����.(�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**����sf���1�&
4L+!+,@��sf�����.(�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�����g���1�&
4L-!++@���g�����.(�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClientSlo�**������g���1�&
4L-!+,@����g�����.(�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClientinI�**��~���g���1�&
4L-!++@~���g�����.(�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClientLab�**��	���g���1�&
4L-!+,@	���g�����.(�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClientSt�**������g���1�&
4L+!++@����g�����.(�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
TermSrv�**��7���g���1�&
4L+!+,@7���g�����.(�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
TermSrv�**��n�,��g���1�&
4L%!++@n�,��g�����.(�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Senshes�**���x.��g���1�&
4L%!+,@�x.��g�����.(�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Senson_�**��ȷ.��g���1�&
4L+!++@ȷ.��g�����.(�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**����.��g���1�&
4L+!+,@��.��g�P�a�U(�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**����.��g���1�&
4L-!++@��.��g�P�a�U(�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientmTr�**���/��g���1�&
4L-!+,@�/��g�P�a�U(�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClienttem�**��;/��g���1�&
4L-!++@;/��g�P�a�U(�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���ProfilesTa�**���64��g���1�&
4L-!+,@�64��g�����.(�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���ProfilesCou�**��F94��g���1�&
4L1!++@F94��g�����.(�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**���`4��g���1�&
4L1!+,@�`4��g�����.(�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvk�**x��Y>��g���1�&
4L+!++@�Y>��g�����.(�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**x�?�>��g���1�&
4L+!+,@?�>��g�����.(�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**���G���g���1�&
4L=!++@�G���g���(�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerBar�**������g���1�&
4L=!+,@����g�,����gH����g�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerask�**���9���g���1�&
4L=!++@�9���g�,����gH����g�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallermon�**��]
j��g���1�&
4L=!+,@]
j��g���(�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstalleritB�**��]/j��g���1�&
4L=!++@]/j��g���(�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallernge�**��3���g���1�&
4L=!+,@3���g����,#B)(,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerfo�**��}���g���1�&
4L=!++@}���g����,#B)(,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerCpl�**��Mg���g���1�&
4L=!+,@Mg���g�,����g�����g�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerrtP�**��@x���g���1�&
4L=!++@@x���g��b���HA�6o�&�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallersLi�**�� 
:��g���1�&
4L=!+,@ 
:��g�0�p*���)�),�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerrch�**��*:��g���1�&
4L=!++@*:��g�,����g�����g�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerfTr�**���e���g���1�&
4L=!+,@�e���g�,����g�����g�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerMus�**��>����g���1�&
4L=!++@>����g�,����g�����g�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerPe�**��5�n��g���1�&
4L=!+,@5�n��g�,����g
�����g�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerosL�rary_LocElfChnk�D�D��X� ;l=x�v���B=�����f?�m�MF���"Y!**����n��g���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
4L�!++@��n��g�,����g
�����g�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c����c�����X�څ��������D�	EventDataA��3B��oData=Event
A��3B%=SubscriberName
"TrustedInstallero�**������g���1�&
4L=!+,@����g�,����g����g�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstalleroca�**�����g���1�&
4L=!++@���g�,����g����g�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**���գ��g���1�&
4L=!+,@�գ��g����,sA(,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller\��**�����g���1�&
4L=!++@���g����,sA(,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��	O��g���1�&
4L=!+,@	O��g�,����g�����g�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��i]��g���1�&
4L=!++@i]��g�,����g�����g�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��h���g���1�&
4L=!+,@h���g�,����g�����g�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller\��**�����g���1�&
4L=!++@���g�,����g�����g�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller\��**��R4{�g���1�&
4L=!+,@R4{�g���(�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller\��**���H{�g���1�&
4L=!++@�H{�g���(�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller\��**����I�g���1�&
4L=!+,@��I�g���(�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller\��**���J�g���1�&
4L-!++@�J�g���(�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��J�g���1�&
4L-!+,@J�g���(�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientoPl�**x�(J�g���1�&
4L+!++@(J�g���(�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvex**x�ޭJ�g���1�&
4L+!+,@ޭJ�g���(�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**���L�g���1�&
4L9! @�L�g���(�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�LY!�LNc�T�� ������**��CAT�g���1�&
4Lu! @CAT�g���(�,�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�"&��8Q�@X�ٌ�
7F��:A��-B=Win32Status
\��**���SV�g���1�&
4L1!++@�SV�g�*C�}<�M��/��H],�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**��RXV�g���1�&
4L1!+,@RXV�g�*C�}<�M��/��H],�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**���|V�g���1�&
4L-!++@�|V�g�*C�}<�M��/��H],�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles\��**���#a�g���1�&
4L-!+,@�#a�g�*C�}<�M��/��H],�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles\��**��-a�g���1�&
4L-!++@-a�g�*C�}<�M��/��H],�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient��1�&�**��3Ga�g���1�&
4L-!+,@3Ga�g�*C�}<�M��/��H],�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**���Ia�g���1�&
4L+!++@�Ia�g�*C�}<�M��/��H],�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**����a�g���1�&
4L+!+,@��a�g�*C�}<�M��/��H],�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��Jb�g���1�&
4L%!++@Jb�g�*C�}<�M��/��H],�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��w�b�g���1�&
4L%!+,@w�b�g�*C�}<�M��/��H],�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��,�n�g���1�&
4L1!++@,�n�g�*C�}<�M��/��H],�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**����n�g���1�&
4L1!+,@��n�g�*C�}<�M��/��H],�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**���t��g���1�&
4L-!++@�t��g�*C�}<�M��/��H],�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��m���g���1�&
4L-!+,@m���g�*C�}<�M��/��H],�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��3���g���1�&
4L%!++@3���g�*C�}<�M��/��H],�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��e���g���1�&
4L%!+,@e���g�*C�}<�M��/��H],�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��^���g���1�&
4L+!++@^���g�*C�}<�M��/��H],�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**���Ȁ�g���1�&
4L+!+,@�Ȁ�g�P�a�U,�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�����g���1�&
4L%!++@���g�,����g|����g�,�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��G8��g���1�&
4L%!+,@G8��g�,����g|����g�,�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��';��g���1�&
4L+!++@';��g�,����g|����g�,�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**���<��g���1�&
4L+!+,@�<��g�P�a�U,�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**���.�)�h���1�&
4L%!++@�.�)�h���(�,�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**���J�)�h���1�&
4L%!+,@�J�)�h���(�,�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��bL�)�h���1�&
4L+!++@bL�)�h���(�,�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��aՆ)�h���1�&
4L+!+,@aՆ)�h���(�,�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��H^>�j���1�&
4L-!++@H^>�j���O��(|
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�� b>�j���1�&
4L-!+,@ b>�j���O��(|
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**x��p>�j���1�&
4L+!++@�p>�j���O��(|
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**x���>�j���1�&
4L+!+,@��>�j���O��(|
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**`����M�j���1�&
4L! @���M�j����=hD(|
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�LY!`**h�+��M�j���1�&
4L! @+��M�j����=hD(|
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�".h**`���Q�j���1�&
4L! @��Q�j����=hD(|
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�LY!`**h��7Q�j���1�&
4L! @�7Q�j����=hD(|
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�"h**����Q�j���1�&
4L1!++@��Q�j�*C�}<�M��/��H](|
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**����Q�j���1�&
4L1!+,@��Q�j�*C�}<�M��/��H](|
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**���Q�j���1�&
4L-!++@�Q�j�*C�}<�M��/��H](|
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**���-#Q�j���1�&
4L-!+,@�-#Q�j�*C�}<�M��/��H](|
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**��j4#Q�j���1�&
4L-!++@j4#Q�j�*C�}<�M��/��H](|
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**���O#Q�j���1�&
4L-!+,@�O#Q�j�*C�}<�M��/��H](|
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**���Q#Q�j���1�&
4L+!++@�Q#Q�j�*C�}<�M��/��H](|
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��X�*Q�j���1�&
4L+!+,@X�*Q�j�*C�}<�M��/��H](|
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**����*Q�j���1�&
4L%!++@��*Q�j�*C�}<�M��/��H](|
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��#=+Q�j���1�&
4L%!+,@#=+Q�j�*C�}<�M��/��H](|
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��l05Q�j���1�&
4L1!++@l05Q�j�*C�}<�M��/��H](|
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**��m65Q�j���1�&
4L1!+,@m65Q�j�*C�}<�M��/��H](|
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**��gk:Q�j���1�&
4L-!++@gk:Q�j�*C�}<�M��/��H](|
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��bw:Q�j���1�&
4L-!+,@bw:Q�j�*C�}<�M��/��H](|
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**���y:Q�j���1�&
4L%!++@�y:Q�j�*C�}<�M��/��H](|
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��y�:Q�j���1�&
4L%!+,@y�:Q�j�*C�}<�M��/��H](|
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**����:Q�j���1�&
4L+!++@��:Q�j�*C�}<�M��/��H](|
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**���:Q�j���1�&
4L+!+,@�:Q�j�P�a�U(|
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**���-�w�j���1�&
4L-!++@�-�w�j���^#�- t
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**���1�w�j���1�&
4L-!+,@�1�w�j���^#�- t
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**x�nE�w�j���1�&
4L+!++@nE�w�j���^#�- t
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**x���w�j���1�&
4L+!+,@��w�j���^#�- t
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**`����j���1�&
4L! @���j���^#�- t
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�LY!`**h����j���1�&
4L! @���j���^#�- t
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�"h**�����j���1�&
4L1!++@���j�*C�}<�M��/��H] t
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�����j���1�&
4L1!+,@���j�*C�}<�M��/��H] t
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**���<��j���1�&
4L-!++@�<��j�*C�}<�M��/��H] t
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**��m!��j���1�&
4L-!+,@m!��j�*C�}<�M��/��H] t
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**�����j���1�&
4L-!++@���j�*C�}<�M��/��H] t
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��&��j���1�&
4L-!+,@&��j�*C�}<�M��/��H] t
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��v*��j���1�&
4L-!++@v*��j�*C�}<�M��/��H] t
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**���D��j���1�&
4L-!+,@�D��j�*C�}<�M��/��H] t
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��IF��j���1�&
4L+!++@IF��j�*C�}<�M��/��H] t
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**���|��j���1�&
4L+!+,@�|��j�*C�}<�M��/��H] t
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��;���j���1�&
4L%!++@;���j�*C�}<�M��/��H] t
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�����j���1�&
4L%!+,@���j�*C�}<�M��/��H] t
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��]"��j���1�&
4L1!++@]"��j�*C�}<�M��/��H] t
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**���&��j���1�&
4L1!+,@�&��j�*C�}<�M��/��H] t
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**���_��j���1�&
4L-!++@�_��j�*C�}<�M��/��H] t
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��q���j���1�&
4L-!+,@q���j�*C�}<�M��/��H] t
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�����j���1�&
4L%!++@���j�*C�}<�M��/��H] t
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�,���j���1�&
4L%!+,@,���j�*C�}<�M��/��H] t
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�����j���1�&
4L+!++@����j�*C�}<�M��/��H] t
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**����j���1�&
4L+!+,@���j�P�a�U t
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**���9�k���1�&
4L%!++@��9�k���^#�- t
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�Q':�k���1�&
4L%!+,@Q':�k���^#�- t
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��*:�k���1�&
4L+!++@�*:�k���^#�- t
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��:�k���1�&
4L+!+,@�:�k���^#�- t
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�4
�^$l���1�&
4L%!++@4
�^$l���^#�- t
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�00�^$l���1�&
4L%!+,@00�^$l���^#�- t
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�	72�^$l���1�&
4L+!++@72�^$l���^#�- t
	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�
̌^$l���1�&
4L+!+,@̌^$l���^#�- t

�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�Z���p���1�&
4L%!++@Z���p���^#�- t
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**����p���1�&
4L%!+,@���p���^#�- t
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�
���p���1�&
4L+!++@���p���^#�- t

�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��*#��p���1�&
4L-!++@�*#��p��� ��5E���{WTU,Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�X7#��p���1�&
4L-!+,@X7#��p��� ��5E���{WTU,Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**x^R#��p���1�&
4L+!++@^R#��p��� ��5E���{WTU,Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**x/�#��p���1�&
4L+!+,@/�#��p��� ��5E���{WTU,Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**�P���p���1�&
4L+!+,@P���p��� ��5E���{W t
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�dt	��p���1�&
4L%!++@dt	��p��� ��5E���{W t
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�8�	��p���1�&
4L%!+,@8�	��p��� ��5E���{W t
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�K
��p���1�&
4L1!++@K
��p��� ��5E���{W t
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�=
��p���1�&
4L1!+,@=
��p��� ��5E���{W t
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�B0��p���1�&
4L%!++@B0��p���^#�- t
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
	Sens�**��J0��p���1�&
4L%!+,@�J0��p���^#�- t
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
	Sens�**�1N0��p���1�&
4L1!++@1N0��p���^#�- t
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���	SessionEnv�**�iT0��p���1�&
4L1!+,@iT0��p���^#�- t
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���	SessionEnv�**��`~��p���1�&
4L%!++@�`~��p��� ��5E���{W t
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��}~��p���1�&
4L%!+,@�}~��p��� ��5E���{W t
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�a~��p���1�&
4L+!++@a~��p��� ��5E���{W t
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�����p���1�&
4L+!+,@����p���^#�- t
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��&��p���1�&
4L%!++@�&��p�zѤt�j��t�j� t
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**� �D��p���1�&
4L%!+,@�D��p�zѤt�j��t�j� t
 �[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�!G��p���1�&
4L+!++@G��p�zѤt�j��t�j� t
!�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�"$o��p���1�&
4L+!+,@$o��p�zѤt�j��t�j� t
"�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�#|���p���1�&
4L%!++@|���p�zѤt�j��t�j� t
#�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�$��p���1�&
4L%!+,@�Ê�p�zѤt�j��t�j� t
$�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�%pƊ�p���1�&
4L1!++@pƊ�p�zѤt�j��t�j� t
%�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�&�̊�p���1�&
4L1!+,@�̊�p�zѤt�j��t�j� t
&�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�'):�
�q���1�&
4L-!++@):�
�q������'Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�(Z>�
�q���1�&
4L-!+,@Z>�
�q������(Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**x):P�
�q���1�&
4L+!++@:P�
�q������)Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**x*к�
�q���1�&
4L+!+,@к�
�q������*Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**`+��ט�q���1�&
4L! @��ט�q������+Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�LY!`**h,�ܘ�q���1�&
4L! @�ܘ�q������,Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�"h**�-�	ߘ�q���1�&
4L1!++@�	ߘ�q�*C�}<�M��/��H]-�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�.�
ߘ�q���1�&
4L1!+,@�
ߘ�q�*C�}<�M��/��H].�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�/'+ߘ�q���1�&
4L-!++@'+ߘ�q�*C�}<�M��/��H]/�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**�0��q���1�&
4L-!+,@��q�*C�}<�M��/��H]0�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**�1^A�q���1�&
4L-!++@^A�q�*C�}<�M��/��H]1�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�2�B�q���1�&
4L-!+,@�B�q�*C�}<�M��/��H]2�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�3�f�q���1�&
4L-!++@�f�q�*C�}<�M��/��H]3�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�4F��q���1�&
4L-!+,@F��q�*C�}<�M��/��H]4�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�5��q���1�&
4L+!++@��q�*C�}<�M��/��H]5�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�6�L���q���1�&
4L+!+,@�L���q�*C�}<�M��/��H]6�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�7h���q���1�&
4L%!++@h���q�*C�}<�M��/��H]7�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�8H����q���1�&
4L%!+,@H����q�*C�}<�M��/��H]8�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�9����q���1�&
4L1!++@����q�*C�}<�M��/��H]9�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�:>���q���1�&
4L1!+,@>���q�*C�}<�M��/��H]:�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�;LF��q���1�&
4L-!++@LF��q�*C�}<�M��/��H];�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�<�p��q���1�&
4L-!+,@�p��q�*C�}<�M��/��H]<�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�=�s��q���1�&
4L%!++@�s��q�*C�}<�M��/��H]=�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�>����q���1�&
4L%!+,@����q�*C�}<�M��/��H]>�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�?U���q���1�&
4L+!++@U���q�*C�}<�M��/��H]?�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�@S���q���1�&
4L+!+,@S���q�P�a�U@�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�A)�1��q���1�&
4L-!++@)�1��q���M�$t
AMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�B�1��q���1�&
4L-!+,@�1��q���M�$t
BMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**xC�1��q���1�&
4L+!++@�1��q���M�$t
CMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**xD�=2��q���1�&
4L+!+,@�=2��q���M�$t
DMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvxElfChnkE�E�����
�t��o���	=�����f?�m�MF���	�**HE��+!�q���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
4LU! @��+!�q���M�$t
EMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L��LNc�T�� ���.��"D�	EventData�H**�Fd0!�q���1�&
4L�! @d0!�q���M�$t
FMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�	&��8Q�@X�ٌ�
7X��LA��?�	��oData=Win32Status
/Op�** G�2!�q���1�&
4L�!++@�2!�q�*C�}<�M��/��H]$t
G�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c����c�����X�څ�����t��hA��!�	=Event
A��3�	%=SubscriberName
SessionEnv **�HX�2!�q���1�&
4L1!+,@X�2!�q�*C�}<�M��/��H]$t
H�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�I�3!�q���1�&
4L-!++@�3!�q�*C�}<�M��/��H]$t
I�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**�J��A!�q���1�&
4L-!+,@��A!�q�*C�}<�M��/��H]$t
J�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**�K	�E!�q���1�&
4L-!++@	�E!�q�*C�}<�M��/��H]$t
K�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�Lr�E!�q���1�&
4L-!+,@r�E!�q�*C�}<�M��/��H]$t
L�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�M�E!�q���1�&
4L-!++@�E!�q�*C�}<�M��/��H]$t
M�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�N�E!�q���1�&
4L-!+,@�E!�q�*C�}<�M��/��H]$t
N�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�O8�E!�q���1�&
4L+!++@8�E!�q�*C�}<�M��/��H]$t
O�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�P|]K!�q���1�&
4L+!+,@|]K!�q�*C�}<�M��/��H]$t
P�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�Q�|K!�q���1�&
4L%!++@�|K!�q�*C�}<�M��/��H]$t
Q�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�RY�K!�q���1�&
4L%!+,@Y�K!�q�*C�}<�M��/��H]$t
R�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�S�AU!�q���1�&
4L1!++@�AU!�q�*C�}<�M��/��H]$t
S�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�TGFU!�q���1�&
4L1!+,@GFU!�q�*C�}<�M��/��H]$t
T�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv4�**�Ut�n!�q���1�&
4L-!++@t�n!�q�*C�}<�M��/��H]$t
U�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientL�**�V�n!�q���1�&
4L-!+,@�n!�q�*C�}<�M��/��H]$t
V�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�WC�n!�q���1�&
4L%!++@C�n!�q�*C�}<�M��/��H]$t
W�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�X5o!�q���1�&
4L%!+,@5o!�q�*C�}<�M��/��H]$t
X�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens��1�&�**�Yo!�q���1�&
4L+!++@o!�q�*C�}<�M��/��H]$t
Y�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�Z�o!�q���1�&
4L+!+,@�o!�q�P�a�U$t
Z�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�[*�C'����1�&
4L-!++@*�C'����M�$t
[�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient�**�\��C'����1�&
4L-!+,@��C'����M�$t
\�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient�**�]�C'����1�&
4L-!++@�C'����M�$t
]�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient�**�^�1C'����1�&
4L-!+,@�1C'����M�$t
^�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient�**�_Z3C'����1�&
4L+!++@Z3C'����M�$t
_�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
TermSrv�**�`��C'����1�&
4L+!+,@��C'����M�$t
`�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
TermSrv�**�a��+C'����1�&
4L%!++@��+C'����M�$t
a�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�b1�-C'����1�&
4L%!+,@1�-C'����M�$t
b�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�cD-.C'����1�&
4L+!++@D-.C'����M�$t
c�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�d�.C'����1�&
4L+!+,@�.C'��P�a�U$t
d�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�e��.C'����1�&
4L-!++@��.C'��P�a�U$t
e�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�f��.C'����1�&
4L-!+,@��.C'��P�a�U$t
f�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�g��.C'����1�&
4L-!++@��.C'��P�a�U$t
g�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**�h9.7C'����1�&
4L-!+,@9.7C'����M�$t
h�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**�i*17C'����1�&
4L1!++@*17C'����M�$t
i�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�jm�7C'����1�&
4L1!+,@m�7C'����M�$t
j�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**xk�AC'����1�&
4L+!++@�AC'����M�$t
kMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**xli�AC'����1�&
4L+!+,@i�AC'����M�$t
lMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**�m�m�'����1�&
4L=!++@�m�'�����z��,mMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�n��z�'����1�&
4L=!+,@��z�'�����z��,nMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�o��'����1�&
4L=!++@��'�����z��,oMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�p��N�'����1�&
4L=!+,@��N�'�����z��,pMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�q*�N�'����1�&
4L=!++@*�N�'�����z��,qMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�r��'����1�&
4L=!+,@��'��0
�P���`|,rMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�s��'����1�&
4L=!++@��'��0
�P���`|,sMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�t,��'����1�&
4L=!+,@,��'��uB��'�C��'��,tMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�u�&��'����1�&
4L=!++@�&��'��uB��'�C��'��,uMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�v��'����1�&
4L=!+,@��'��uB��'��X��'��,vMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�w�#�'����1�&
4L=!++@�#�'��uB��'��X��'��,wMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�x�z��'����1�&
4L=!+,@�z��'��uB��'��X��'��,xMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�yl���'����1�&
4L=!++@l���'��uB��'��X��'��,yMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�z�$T�'����1�&
4L=!+,@�$T�'��0�`��/��*,zMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�{>T�'����1�&
4L=!++@>T�'��0�`��/��*,{Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�|��'����1�&
4L=!+,@��'��uB��'�IC��'��,|Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�}�-�'����1�&
4L=!++@�-�'��uB��'�IC��'��,}Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�~�Ή�'����1�&
4L=!+,@�Ή�'��uB��'��J��'��,~Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�H'����1�&
4L=!++@H'��uB��'��J��'��,Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**����#�'����1�&
4L=!+,@��#�'��,�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**���$�'����1�&
4L=!++@�$�'��,�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**���XĦ'����1�&
4L=!+,@�XĦ'��uB��'��J��'��,�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��F{Ħ'����1�&
4L=!++@F{Ħ'��uB��'��J��'��,�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**���]�'����1�&
4L=!+,@�]�'��uB��'��J��'��,�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**����]�'����1�&
4L=!++@��]�'��uB��'��J��'��,�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��S�ũ'����1�&
4L=!+,@S�ũ'�����z��,�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��b�ũ'����1�&
4L=!++@b�ũ'�����z��,�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��v�Ӳ'����1�&
4L=!+,@v�Ӳ'��uB��'��J��'��,�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**����Ӳ'����1�&
4L=!++@��Ӳ'��uB��'��J��'��,�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**����d�'����1�&
4L=!+,@��d�'��uB��'��J��'��,�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��X�d�'����1�&
4L-!++@X�d�'��uB��'��J��'��,�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**����d�'����1�&
4L-!+,@��d�'��uB��'��J��'��,�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**x��e�'����1�&
4L+!++@�e�'��uB��'��J��'��,�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**x��e�'����1�&
4L+!+,@�e�'��uB��'��J��'��,�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**`���g�'����1�&
4L! @��g�'��uB��'��J��'��,�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L�`**h�x�n�'����1�&
4L! @x�n�'��uB��'��J��'��,�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�	h**��+�p�'����1�&
4L1!++@+�p�'��*C�}<�M��/��H],��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**��q�p�'����1�&
4L1!+,@q�p�'��*C�}<�M��/��H],��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**��(�p�'����1�&
4L-!++@(�p�'��*C�}<�M��/��H],��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**����{�'����1�&
4L-!+,@��{�'��*C�}<�M��/��H],��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**��i�{�'����1�&
4L-!++@i�{�'��*C�}<�M��/��H],��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**���{�'����1�&
4L-!+,@�{�'��*C�}<�M��/��H],��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**����{�'����1�&
4L+!++@��{�'��*C�}<�M��/��H],��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**���|�'����1�&
4L+!+,@�|�'��*C�}<�M��/��H],��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**���|�'����1�&
4L%!++@�|�'��*C�}<�M��/��H],��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��yj}�'����1�&
4L%!+,@yj}�'��*C�}<�M��/��H],��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**���ʈ�'����1�&
4L1!++@�ʈ�'��*C�}<�M��/��H],��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**��Ј�'����1�&
4L1!+,@Ј�'��*C�}<�M��/��H],��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**��ۦ��'����1�&
4L-!++@ۦ��'��*C�}<�M��/��H],��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**������'����1�&
4L-!+,@����'��*C�}<�M��/��H],��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**������'����1�&
4L%!++@����'��*C�}<�M��/��H],��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��nə�'����1�&
4L%!+,@nə�'��*C�}<�M��/��H],��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**���˙�'����1�&
4L+!++@�˙�'��*C�}<�M��/��H],��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��#ܙ�'����1�&
4L+!+,@#ܙ�'��P�a�U,��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��`�ȴ'����1�&
4L%!++@`�ȴ'��P�a�U,��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**����ȴ'����1�&
4L%!+,@��ȴ'��P�a�U,��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**���ȴ'����1�&
4L+!++@�ȴ'��P�a�U,��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**����ȴ'����1�&
4L+!+,@��ȴ'��P�a�U,��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��yq��w����1�&
4L%!++@yq��w�����z��,��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��6��w����1�&
4L%!+,@6��w�����z��,��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��
��w����1�&
4L+!++@
��w�����z��,��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��d'��w����1�&
4L+!+,@d'��w�����z��,��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**���(H�����1�&
4L-!++@�(H������z��,��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient�**��/:H�����1�&
4L-!+,@/:H������z��,��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient�**��+UH�����1�&
4L-!++@+UH������z��,��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient�**����H�����1�&
4L-!+,@��H������z��,��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient�**��3�H�����1�&
4L+!++@3�H������z��,��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
TermSrv�**��%�H�����1�&
4L+!+,@%�H������z��,��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
TermSrv�**����_�����1�&
4L%!++@��_������z��,��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��<�a�����1�&
4L%!+,@<�a������z��,��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��b�����1�&
4L+!++@b������z��,��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��	Sb�����1�&
4L+!+,@	Sb���P�a�U,��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��L^b�����1�&
4L-!++@L^b���P�a�U,��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��6ob�����1�&
4L-!+,@6ob���P�a�U,��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**���qb�����1�&
4L-!++@�qb���P�a�U,��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**���?h�����1�&
4L-!+,@�?h������z��,��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**���Bh�����1�&
4L1!++@�Bh������z��,��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**����h�����1�&
4L1!+,@��h������z��,��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**x��p�����1�&
4L+!++@�p������z��,�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**x�?;p�����1�&
4L+!+,@?;p������z��,�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**��R�o������1�&
4L=!++@R�o������G`�0�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**���%������1�&
4L=!+,@�%������������0�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��>�������1�&
4L=!++@>�������������0�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**���^�������1�&
4L=!+,@�^�������������0�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��u|�������1�&
4L=!++@u|�������������0�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**����1������1�&
4L=!+,@��1������������0�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��N�1������1�&
4L=!++@N�1������������0�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��7�������1�&
4L=!+,@7��������l����0�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**����������1�&
4L=!++@���������l����0�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**���f������1�&
4L=!+,@�f�������l����0�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��'�f������1�&
4L=!++@'�f�������l����0�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**���������1�&
4L=!+,@�����1�eW
7�0�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**���������1�&
4L=!++@�����1�eW
7�0�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��;#�������1�&
4L=!+,@;#��������
�����0�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**���:�������1�&
4L=!++@�:��������
�����0�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**����4������1�&
4L=!+,@��4�������B����0�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��^�4������1�&
4L=!++@^�4�������B����0�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**����������1�&
4L=!+,@���������B����0�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��(�������1�&
4L=!++@(��������B����0�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�� t$���1�&
4L=!+,@ t$�1�ep�q�0�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��i�$���1�&
4L-!++@i�$�1�ep�q�0�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��2�$���1�&
4L-!+,@2�$�1�ep�q�0�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**x���$���1�&
4L+!++@��$�1�ep�q�0�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**x��'%���1�&
4L+!+,@�'%�1�ep�q�0�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**`�Q\'���1�&
4L! @Q\'�1�ep�q�0�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L�`**h��.���1�&
4L! @�.�1�ep�q�0�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�	h**���0���1�&
4L1!++@�0�*C�}<�M��/��H]0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**��A0���1�&
4L1!+,@A0�*C�}<�M��/��H]0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**���(0���1�&
4L-!++@�(0�*C�}<�M��/��H]0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**��`:���1�&
4L-!+,@`:�*C�}<�M��/��H]0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**���f:���1�&
4L-!++@�f:�*C�}<�M��/��H]0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**���z:���1�&
4L-!+,@�z:�*C�}<�M��/��H]0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��5|:���1�&
4L+!++@5|:�*C�}<�M��/��H]0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**���I;���1�&
4L+!+,@�I;�*C�}<�M��/��H]0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��(z;���1�&
4L%!++@(z;�*C�}<�M��/��H]0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**����;���1�&
4L%!+,@��;�*C�}<�M��/��H]0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**����F���1�&
4L1!++@��F�*C�}<�M��/��H]0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**����F���1�&
4L1!+,@��F�*C�}<�M��/��H]0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**��N{W���1�&
4L-!++@N{W�*C�}<�M��/��H]0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**����W���1�&
4L-!+,@��W�*C�}<�M��/��H]0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient���1�&
4L++@l�W�*C�}<�M��/��H]0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��ElfChnk�������H�I��'c*��R=�����f?�m�MF�Av�t**��l�W���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
4L�!++@l�W�*C�}<�M��/��H]0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���c�����X�څ��������*D�	EventDataA��3R��oData=Event
A��3R%=SubscriberName

Sens�**���W���1�&
4L%!+,@�W�*C�}<�M��/��H]0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��d�W���1�&
4L+!++@d�W�*C�}<�M��/��H]0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvu�**��߳W���1�&
4L+!+,@߳W�P�a�U0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvn�**��p����1�&
4L%!++@p��P�a�U0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sensdows�**��9����1�&
4L%!+,@9��P�a�U0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens-Win�**��C<����1�&
4L+!++@C<��P�a�U0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvt�**��>����1�&
4L+!+,@>��P�a�U0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvo�**���Pa�#����1�&
4L%!++@�Pa�#����G`�0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��{va�#����1�&
4L%!+,@{va�#����G`�0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��xa�#����1�&
4L+!++@xa�#����G`�0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**���'b�#����1�&
4L+!+,@�'b�#����G`�0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**���4������1�&
4L%!++@�4������G`�0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��8W5������1�&
4L%!+,@8W5������G`�0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**���Y5������1�&
4L+!++@�Y5������G`�0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**���X6������1�&
4L+!+,@�X6������G`�0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��K��M؉���1�&
4L%!++@K��M؉���G`�0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��D�M؉���1�&
4L%!+,@D�M؉���G`�0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**����M؉���1�&
4L+!++@��M؉���G`�0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��_��M؉���1�&
4L+!+,@_��M؉���G`�0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�����~����1�&
4L-!++@���~����G`�0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**����~����1�&
4L-!+,@��~����G`�0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**��(��~����1�&
4L-!++@(��~����G`�0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**�����~����1�&
4L-!+,@���~����G`�0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**��h��~����1�&
4L+!++@h��~����G`�0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
TermSrv�**���]�~����1�&
4L+!+,@�]�~����G`�0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
TermSrv�**��Oq@�~����1�&
4L%!++@Oq@�~����G`�0��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�j6E�~����1�&
4L%!+,@j6E�~����G`�0�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�k�E�~����1�&
4L+!++@k�E�~����G`�0�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�x`F�~����1�&
4L+!+,@x`F�~��P�a�U0�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��jF�~����1�&
4L-!++@�jF�~��P�a�U0�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�.�F�~����1�&
4L-!+,@.�F�~��P�a�U0�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**���F�~����1�&
4L-!++@��F�~��P�a�U0�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**��L�~����1�&
4L-!+,@�L�~����G`�0�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**��L�~����1�&
4L1!++@�L�~����G`�0�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**��M�~����1�&
4L1!+,@�M�~����G`�0�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**x	��Z�~����1�&
4L+!++@��Z�~����G`�0	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x
�S[�~����1�&
4L+!+,@�S[�~����G`�0
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**�z�o����1�&
4L=!++@z�o����z���XMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�@K����1�&
4L=!+,@@K��Ң��;����XMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�
�����1�&
4L=!++@���Ң��;����X
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��C����1�&
4L=!+,@�C��Ң��;����XMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�3C����1�&
4L=!++@3C��Ң��;����XMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��J�����1�&
4L=!+,@�J���Ң��	ߢ���XMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�Kb�����1�&
4L=!++@Kb���Ң��	ߢ���XMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���w����1�&
4L=!+,@��w��Ң��i����XMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�ɸw����1�&
4L=!++@ɸw��Ң��i����XMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**������1�&
4L=!+,@���Ң��a����XMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�9�����1�&
4L=!++@9���Ң��a����XMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�٫����1�&
4L=!+,@٫��0�Ю�~tl XMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�������1�&
4L=!++@����0�Ю�~tl XMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�#�E	����1�&
4L=!+,@#�E	��Ң��a����XMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��E	����1�&
4L=!++@�E	��Ң��a����XMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����	����1�&
4L=!+,@���	��Ң�������XMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���	����1�&
4L=!++@��	��Ң�������XMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�/�y
����1�&
4L=!+,@/�y
��Ң�������XMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�U�y
����1�&
4L=!++@U�y
��Ң�������XMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**������1�&
4L=!+,@���Ң�������XMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�!�����1�&
4L=!++@!���Ң�������XMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**� ������1�&
4L=!+,@����Ң�������X Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�!t�����1�&
4L=!++@t���Ң�������X!Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�"�������1�&
4L=!+,@�����1�D�z�|�X"Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�#������1�&
4L=!++@����1�D�z�|�X#Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�$jP����1�&
4L=!+,@jP��1�D�z�|�X$Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�%
]����1�&
4L=!++@
]��1�D�z�|�X%Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�&�� ����1�&
4L=!+,@�� ��Ң�������X&Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�'�� ����1�&
4L-!++@�� ��Ң�������X'Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�(t�� ����1�&
4L-!+,@t�� ��Ң�������X(Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**x)��� ����1�&
4L+!++@��� ��Ң�������X)Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x*GW� ����1�&
4L+!+,@GW� ��Ң�������X*Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**�+ī� ����1�&
4L9! @ī� ��Ң�������X+Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L�t�LNc�T�� �����*�**�,.�� ����1�&
4Lu! @.�� ��Ң�������X,Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8QAv&��8Q�@X�ٌ�
7F��:*A��-R=Win32Status
�**�-� ����1�&
4L1!++@Ů� ��*C�}<�M��/��H]X-�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�.̱� ����1�&
4L1!+,@̱� ��*C�}<�M��/��H]X.�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�/D�� ����1�&
4L-!++@D�� ��*C�}<�M��/��H]X/�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**�0�� ����1�&
4L-!+,@�� ��*C�}<�M��/��H]X0�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**�1��� ����1�&
4L-!++@��� ��*C�}<�M��/��H]X1�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�2�� ����1�&
4L-!+,@�� ��*C�}<�M��/��H]X2�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�3��� ����1�&
4L+!++@��� ��*C�}<�M��/��H]X3�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�4�� ����1�&
4L+!+,@�� ��*C�}<�M��/��H]X4�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�5�� ����1�&
4L%!++@�� ��*C�}<�M��/��H]X5�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�6�� ����1�&
4L%!+,@�� ��*C�}<�M��/��H]X6�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�7^� ����1�&
4L1!++@^� ��*C�}<�M��/��H]X7�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�8�	� ����1�&
4L1!+,@�	� ��*C�}<�M��/��H]X8�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�9�*!����1�&
4L-!++@�*!��*C�}<�M��/��H]X9�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�:�2!����1�&
4L-!+,@�2!��*C�}<�M��/��H]X:�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�;�4!����1�&
4L%!++@�4!��*C�}<�M��/��H]X;�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�<M!����1�&
4L%!+,@M!��*C�}<�M��/��H]X<�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�=pO!����1�&
4L+!++@pO!��*C�}<�M��/��H]X=�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�>._!����1�&
4L+!+,@._!��P�a�UX>�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�?�y.!����1�&
4L%!++@�y.!��P�a�UX?�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�@��.!����1�&
4L%!+,@��.!��P�a�UX@�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�A��.!����1�&
4L+!++@��.!��P�a�UXA�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�B�.!����1�&
4L+!+,@�.!��P�a�UXB�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�C:�8ύ���1�&
4L%!++@:�8ύ���z���XC�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�D�8ύ���1�&
4L%!+,@�8ύ���z���XD�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�E��8ύ���1�&
4L+!++@��8ύ���z���XE�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�F�X9ύ���1�&
4L+!+,@�X9ύ���z���XF�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�G�������1�&
4L-!++@�������+M�2 �GMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�H�������1�&
4L-!+,@�������+M�2 �HMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**xI�������1�&
4L+!++@�������+M�2 �IMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**xJ�*�����1�&
4L+!+,@�*�����+M�2 �JMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**`Kd�7�����1�&
4L! @d�7���0�@��,� �KMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L�t`**hLI9<�����1�&
4L! @I9<���0�@��,� �LMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8QAvh**�Mhj>�����1�&
4L1!++@hj>���*C�}<�M��/��H] �M�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�N�m>�����1�&
4L1!+,@�m>���*C�}<�M��/��H] �N�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�O��>�����1�&
4L-!++@��>���*C�}<�M��/��H] �O�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**�P��M�����1�&
4L-!+,@��M���*C�}<�M��/��H] �P�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**�Qp�M�����1�&
4L-!++@p�M���*C�}<�M��/��H] �Q�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�RN�����1�&
4L-!+,@N���*C�}<�M��/��H] �R�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�S�N�����1�&
4L+!++@�N���*C�}<�M��/��H] �S�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�T��Q�����1�&
4L+!+,@��Q���*C�}<�M��/��H] �T�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�U+�Q�����1�&
4L%!++@+�Q���*C�}<�M��/��H] �U�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�VX6R�����1�&
4L%!+,@X6R���*C�}<�M��/��H] �V�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�Wy)]�����1�&
4L1!++@y)]���*C�}<�M��/��H] �W�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�X�-]�����1�&
4L1!+,@�-]���*C�}<�M��/��H] �X�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�Y��������1�&
4L-!++@������0�P٭�( �Y�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�ZS�������1�&
4L-!+,@S�����0�P٭�( �Z�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�[璅�����1�&
4L%!++@璅���0�P٭�( �[�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�\��������1�&
4L%!+,@������0�P٭�( �\�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�]��������1�&
4L+!++@������0�P٭�( �]�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�^Q�������1�&
4L+!+,@Q�����P�a�U �^�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�_�����1�&
4L-!++@������{��$�_Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�`������1�&
4L-!+,@�������{��$�`Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**xa������1�&
4L+!++@�������{��$�aMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**xb�]����1�&
4L+!+,@�]��>�b�9�uM�;˼��$�bMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**`c������1�&
4L! @�������{��$�cMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L�t`**hd.Ƹ����1�&
4L! @.Ƹ�����{��$�dMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8QAvh**�e,�����1�&
4L1!++@,���*C�}<�M��/��H]$�e�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�f������1�&
4L1!+,@����*C�}<�M��/��H]$�f�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�g������1�&
4L-!++@����*C�}<�M��/��H]$�g�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**�h�L�����1�&
4L-!+,@�L���*C�}<�M��/��H]$�h�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**�i�S�����1�&
4L-!++@�S���*C�}<�M��/��H]$�i�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�j�q�����1�&
4L-!+,@�q���*C�}<�M��/��H]$�j�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�kMs�����1�&
4L+!++@Ms���*C�}<�M��/��H]$�k�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�l�������1�&
4L+!+,@�����*C�}<�M��/��H]$�l�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�m-�����1�&
4L%!++@-���*C�}<�M��/��H]$�m�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�n�W�����1�&
4L%!+,@�W���*C�}<�M��/��H]$�n�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�o�������1�&
4L1!++@�����*C�}<�M��/��H]$�o�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�p�������1�&
4L1!+,@�����*C�}<�M��/��H]$�p�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�q�q�����1�&
4L-!++@�q���*C�}<�M��/��H]$�q�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�rR|�����1�&
4L-!+,@R|���*C�}<�M��/��H]$�r�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�s�~�����1�&
4L%!++@�~���*C�}<�M��/��H]$�s�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�tV������1�&
4L%!+,@V����*C�}<�M��/��H]$�t�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�u�������1�&
4L+!++@�����*C�}<�M��/��H]$�u�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�v(������1�&
4L+!+,@(����P�a�U$�v�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�w������1�&
4L-!++@����`��ApQ�$�w�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**�x�������1�&
4L-!+,@�����`��ApQ�$�x�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**�yx������1�&
4L-!++@x����`��ApQ�$�y�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**�z6������1�&
4L-!+,@6����`��ApQ�$�z�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**�{�������1�&
4L+!++@�����`��ApQ�$�{�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
TermSrv�**�|�4�����1�&
4L+!+,@�4���`��ApQ�$�|�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
TermSrv�**�}!U�����1�&
4L%!++@!U������{��$�}�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�~�����1�&
4L%!+,@������{��$�~�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�Q�����1�&
4L+!++@Q������{��$��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��������1�&
4L+!+,@����P�a�U$���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�������1�&
4L-!++@���P�a�U$���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**��N�����1�&
4L-!+,@N���P�a�U$���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**��}�����1�&
4L-!++@}���P�a�U$���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**��V�����1�&
4L-!+,@V������{��$���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**��\�����1�&
4L1!++@\������{��$���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv���1�&
4LElfChnk�&�&�����/i`�Ll/*��R=�����f?�m�MF��3a2**��������1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
4L�!+,@�������{��$���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���c�����X�څ��������*D�	EventDataA��3R��oData=Event
A��3R%=SubscriberName
SessionEnv��**x�k\����1�&
4L+!++@k\�����{��$��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x�������1�&
4L+!+,@�������{��$��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvex**��}�
�����1�&
4L=!++@}�
�����a�w�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstallerrmSr�**���5������1�&
4L=!+,@�5������I��R�I����
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstallerdows�**��Oc������1�&
4L=!++@Oc������I��R�I����
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller**�**���D�����1�&
4L=!+,@�D�����I���I����
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller��**����D�����1�&
4L=!++@��D�����I���I����
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�PaӐ**��C�������1�&
4L=!+,@C�������I����I����
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller���**����������1�&
4L=!++@��������I����I����
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller��1�&�**���Tz
�����1�&
4L=!+,@�Tz
�����I��ԸI����
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���cz
�����1�&
4L=!++@�cz
�����I��ԸI����
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��v������1�&
4L=!+,@v������I��\�I����
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���������1�&
4L=!++@�������I��\�I����
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���!������1�&
4L=!+,@�!������I��ԸI����
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��L;������1�&
4L=!++@L;������I��ԸI����
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��cJ�����1�&
4L=!+,@cJ�����I���I����
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���J�����1�&
4L=!++@�J�����I���I����
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller4�**��I�������1�&
4L=!+,@I�������I��ֳI����
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstallerL�**��_�������1�&
4L=!++@_�������I��ֳI����
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller-!�**���%�����1�&
4L=!+,@�%���1��ihB��
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller-!�**��7�����1�&
4L=!++@7���1��ihB��
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller-!�**��A�������1�&
4L=!+,@A�������I��\�I����
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller-!�**��V�������1�&
4L-!++@V�������I��\�I����
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient4�**���֋�����1�&
4L-!+,@�֋�����I��\�I����
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**x��������1�&
4L+!++@�������I��\�I����
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x��j������1�&
4L+!+,@�j������I��\�I����
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**��
�������1�&
4L9! @
�������I��\�I����
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�La2�LNc�T�� �����*�**��U������1�&
4Lu! @U������I��\�I����
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�3&��8Q�@X�ٌ�
7F��:*A��-R=Win32Status
,�**���R������1�&
4L1!++@�R����*C�}<�M��/��H]�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv@�j�**���U������1�&
4L1!+,@�U����*C�}<�M��/��H]�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv@.��**���p������1�&
4L-!++@�p����*C�}<�M��/��H]�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles@���**��}�������1�&
4L-!+,@}�����*C�}<�M��/��H]�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles@��**��λ������1�&
4L-!++@���*C�}<�M��/��H]�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient@��**��ϡ�����1�&
4L-!+,@ϡ���*C�}<�M��/��H]�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient@��**���С�����1�&
4L+!++@����*C�}<�M��/��H]�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**���������1�&
4L+!+,@�����*C�}<�M��/��H]�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv��**����������1�&
4L%!++@������*C�}<�M��/��H]�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens��**��2������1�&
4L%!+,@2����*C�}<�M��/��H]�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�;��**��=o������1�&
4L1!++@=o����*C�}<�M��/��H]�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv;��**��t������1�&
4L1!+,@t����*C�}<�M��/��H]�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv;��**���v������1�&
4L-!++@�v����*C�}<�M��/��H]�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�;��**��T�������1�&
4L-!+,@T�����*C�}<�M��/��H]�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�	ߢ�**����������1�&
4L%!++@������*C�}<�M��/��H]�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens��Ң�**��Rſ�����1�&
4L%!+,@Rſ���*C�}<�M��/��H]�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens@���**���ǿ�����1�&
4L+!++@�ǿ���*C�}<�M��/��H]�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��fؿ�����1�&
4L+!+,@fؿ���P�a�U�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��!}������1�&
4L%!++@!}����P�a�U�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
SensL�**����������1�&
4L%!+,@������P�a�U�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens4�**��A�������1�&
4L+!++@A�����P�a�U�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��V�������1�&
4L+!+,@V�����P�a�U�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**���7��K����1�&
4L%!++@�7��K����a�w�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��|d��K����1�&
4L%!+,@|d��K����a�w�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��3f��K����1�&
4L+!++@3f��K����a�w�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**���%��K����1�&
4L+!+,@�%��K����a�w�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��:���3����1�&
4L-!++@:���3����a�w�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**��Iɘ�3����1�&
4L-!+,@Iɘ�3����a�w�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**��}ژ�3����1�&
4L-!++@}ژ�3����a�w�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**��r☏3����1�&
4L-!+,@r☏3����a�w�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**���㘏3����1�&
4L+!++@�㘏3����a�w�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
TermSrv�**��Y���3����1�&
4L+!+,@Y���3����a�w�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
TermSrv�**��~a��3����1�&
4L%!++@~a��3����a�w�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens���**��B��3����1�&
4L%!+,@B��3����a�w�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
SensjP�**���k��3����1�&
4L+!++@�k��3����a�w�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��Ƞ��3����1�&
4L+!+,@Ƞ��3��P�a�U�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��K���3����1�&
4L-!++@K���3��P�a�U�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient**�**������3����1�&
4L-!+,@����3��P�a�U�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClientt�� �**���3����1�&
4L-!++@�3��P�a�U�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles��1�&�**���.��3����1�&
4L-!+,@�.��3����a�w�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**���2��3����1�&
4L1!++@�2��3����a�w�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**���M��3����1�&
4L1!+,@�M��3����a�w�
��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**x�oƏ3����1�&
4L+!++@oƏ3����a�w�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x�9Ə3����1�&
4L+!+,@9Ə3����a�w�
�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvvx**���\�3����1�&
4L-!++@�\�3����Y�P�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClientSe�**���\�3����1�&
4L-!+,@�\�3����Y�P�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**x��\�3����1�&
4L+!++@�\�3����Y�P�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvtx**x�T\�3����1�&
4L+!+,@T\�3����Y�P�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvnx**`��r��3����1�&
4L! @�r��3����Y�P�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�La2�|1C�`**h���ƣ3����1�&
4L! @��ƣ3����Y�P�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�3t-Wh**��ޕ/�3����1�&
4L1!++@ޕ/�3��*C�}<�M��/��H]P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnvdo�**��f�/�3����1�&
4L1!+,@f�/�3��*C�}<�M��/��H]P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv-W�**��1�/�3����1�&
4L-!++@1�/�3��*C�}<�M��/��H]P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profilesinlo�**��O;�3����1�&
4L-!+,@O;�3��*C�}<�M��/��H]P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profilesgon��**���);�3����1�&
4L-!++@�);�3��*C�}<�M��/��H]P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClientgon��**���>;�3����1�&
4L-!+,@�>;�3��*C�}<�M��/��H]P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClientgon��**��'A;�3����1�&
4L+!++@'A;�3��*C�}<�M��/��H]P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvo�**���D�3����1�&
4L+!+,@�D�3��*C�}<�M��/��H]P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvW�**��YaD�3����1�&
4L%!++@YaD�3��*C�}<�M��/��H]P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sensws-W�**��X�D�3����1�&
4L%!+,@X�D�3��*C�}<�M��/��H]P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sensws-W�**��r�P�3����1�&
4L1!++@r�P�3��*C�}<�M��/��H]P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnvlo�**����P�3����1�&
4L1!+,@��P�3��*C�}<�M��/��H]P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnvn��**����T�3����1�&
4L-!++@��T�3��*C�}<�M��/��H]P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient���|1C��**����T�3����1�&
4L-!+,@��T�3��*C�}<�M��/��H]P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient����8M�**��Q�T�3����1�&
4L%!++@Q�T�3��*C�}<�M��/��H]P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens����8M�**��M�T�3����1�&
4L%!+,@M�T�3��*C�}<�M��/��H]P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens����8M�**����T�3����1�&
4L+!++@��T�3��*C�}<�M��/��H]P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvM�**���U�3����1�&
4L+!+,@�U�3��P�a�UP��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvM�**��:���3����1�&
4L%!++@:���3��P�a�UP��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens����8M�**������3����1�&
4L%!+,@����3��P�a�UP��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Senssoft�**������3����1�&
4L+!++@����3��P�a�UP��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvn�**�����3����1�&
4L+!+,@���3��P�a�UP��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvs�**���{��3����1�&
4L%!++@�{��3��u�3�;7�3��P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Senslogo�**��:���3����1�&
4L%!+,@:���3��u�3�;7�3��P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Senserat�**��G���3����1�&
4L+!++@G���3��u�3�;7�3��P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��,7��3����1�&
4L+!+,@,7��3��u�3�;7�3��P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvv�**���޲�����1�&
4L-!++@�޲�����Y�P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClientnEnv�**��t?޲�����1�&
4L-!+,@t?޲�����Y�P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClientes�**���O޲�����1�&
4L-!++@�O޲�����Y�P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClientes�**��@�޲�����1�&
4L-!+,@@�޲�����Y�P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClientnt�**����޲�����1�&
4L+!++@��޲�����Y�P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
TermSrve�**���߲�����1�&
4L+!+,@�߲�����Y�P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
TermSrve�**�����������1�&
4L%!++@���������Y�P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
SensTe�**��� ������1�&
4L%!+,@� ������Y�P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
SensSe�**��Pm������1�&
4L+!++@Pm������Y�P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrve�**����������1�&
4L+!+,@������P�a�UP��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrve�**���������1�&
4L-!++@�����P�a�UP��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClientSe�**����������1�&
4L-!+,@������P�a�UP��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClientGP�**����������1�&
4L-!++@������P�a�UP��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��ProfilesGP�**��("	������1�&
4L-!+,@("	������Y�P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��ProfilesSe�**��2%	������1�&
4L1!++@2%	������Y�P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**��V�	������1�&
4L1!+,@V�	������Y�P��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**x��*������1�&
4L+!++@�*������Y�P�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvex**x�i������1�&
4L+!+,@�i������Y�PMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvPx**�F��둟���1�&
4L=!++@F��둟����n��48	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstallernt�**�XA3쑟���1�&
4L=!+,@XA3쑟���p�!848	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstallerb�**��9�쑟���1�&
4L=!++@�9�쑟��5N瑟�;N瑟�48	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller��1�&�**��^{푟���1�&
4L=!+,@�^{푟��5N瑟�;N瑟�48	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�-r{푟���1�&
4L=!++@-r{푟��5N瑟�;N瑟�48	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller+�**��C���1�&
4L=!+,@�C����n��48	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller,�**�"S���1�&
4L=!++@"S����n��48	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller+�**��`����1�&
4L=!+,@�`���5N瑟�6N瑟�48	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller,�**�	�o����1�&
4L=!++@�o���5N瑟�6N瑟�48		Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller+�**�
��I���1�&
4L=!+,@��I��5N瑟�;N瑟�48	
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller,�**�9�I���1�&
4L=!++@9�I��5N瑟�;N瑟�48	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller+�**�FN����1�&
4L=!+,@FN��0�����,"48	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller@��**�
�c����1�&
4L=!++@�c��0�����,"48	
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller��*�**�f|~����1�&
4L=!+,@f|~����pK>848	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�}<�M���**���~����1�&
4L=!++@��~����pK>848	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller/��H]$�**��u����1�&
4L=!+,@�u����5��48	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller/��H]$�**������1�&
4L=!++@�����5��48	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller/��H]$�**�O�����1�&
4L=!+,@O����5N瑟?N瑟�48	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller/��H]$�**�F�����1�&
4L=!++@F����5N瑟?N瑟�48	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller/��H]$�**�q�O������1�&
4L=!+,@q�O�����5N瑟?N瑟�48	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�t�**���O������1�&
4L=!++@��O�����5N瑟?N瑟�48	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�B̈́������1�&
4L=!+,@B̈́�������n��48	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��������1�&
4L=!++@��������n��48	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�[�l��**���������1�&
4L=!+,@�������5N瑟?N瑟�48	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�[�l��**�H�������1�&
4L-!++@H������5N瑟?N瑟�48	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**���������1�&
4L-!+,@�������5N瑟?N瑟�48	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClientQ�$�**x�������1�&
4L+!++@������5N瑟?N瑟�48	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�x**x�@������1�&
4L+!+,@�@�����5N瑟?N瑟�48	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**`�.������1�&
4L! @�.�����5N瑟?N瑟�48	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�La2`**h��������1�&
4L! @�������5N瑟?N瑟�48	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�3h**�њ������1�&
4L1!++@њ����*C�}<�M��/��H]48	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**� /�������1�&
4L1!+,@/�����*C�}<�M��/��H]48	 �[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�!^�������1�&
4L-!++@^�����*C�}<�M��/��H]48	!�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**�"Y������1�&
4L-!+,@Y����*C�}<�M��/��H]48	"�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**�#�"������1�&
4L-!++@�"����*C�}<�M��/��H]48	#�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�$q3������1�&
4L-!+,@q3����*C�}<�M��/��H]48	$�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�%�4������1�&
4L+!++@�4����*C�}<�M��/��H]48	%�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�&
������1�&
4L+!+,@
����*C�}<�M��/��H]48	&�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�
4LElfChnk'�'���x��v���*��R=�����f?�m�MF��iih**�'Y������1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
4L�!++@Y����*C�}<�M��/��H]48	'�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���c�����X�څ��������*D�	EventDataA��3R��oData=Event
A��3R%=SubscriberName

SensnE�**�(�r������1�&
4L%!+,@�r����*C�}<�M��/��H]48	(�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sensv�**�)|4		�����1�&
4L1!++@|4		���*C�}<�M��/��H]48	)�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�
�**�*�8		�����1�&
4L1!+,@�8		���*C�}<�M��/��H]48	*�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv5��**�+�A		�����1�&
4L-!++@�A		���*C�}<�M��/��H]48	+�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClientOc��**�,xG		�����1�&
4L-!+,@xG		���*C�}<�M��/��H]48	,�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�D�**�-7I		�����1�&
4L%!++@7I		���*C�}<�M��/��H]48	-�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens��**�.�_		�����1�&
4L%!+,@�_		���*C�}<�M��/��H]48	.�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens**�**�/b		�����1�&
4L+!++@b		���*C�}<�M��/��H]48	/�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�0Kq		�����1�&
4L+!+,@Kq		���P�a�U48	0�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�1��V	�����1�&
4L%!++@��V	����5N瑟	@EN瑟�48	1�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Senstall�**�2sW	�����1�&
4L%!+,@sW	����5N瑟	@EN瑟�48	2�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
SensdIns�**�3�W	�����1�&
4L+!++@�W	����5N瑟	@EN瑟�48	3�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrve�**�4�!W	�����1�&
4L+!+,@�!W	���P�a�U48	4�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvr�**�5c�;ß���1�&
4L%!++@c�;ß����n��48	5�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�6�4�;���1�&
4L%!+,@�4�;ß����n��48	6�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�76�;���1�&
4L+!++@6�;ß����n��48	7�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�8�ѫ;ß���1�&
4L+!+,@�ѫ;ß����n��48	8�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�9H�+�����1�&
4L-!++@H�+������n��48	9�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**�:}�+�����1�&
4L-!+,@}�+������n��48	:�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**�;.�+�����1�&
4L-!++@.�+������n��48	;�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**�<�w�+�����1�&
4L-!+,@�w�+������n��48	<�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**�=�y�+�����1�&
4L+!++@�y�+������n��48	=�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
TermSrv�**�>���+�����1�&
4L+!+,@���+������n��48	>�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
TermSrv�**�?��,�����1�&
4L%!++@��,������n��48	?�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�@AH,�����1�&
4L%!+,@AH,������n��48	@�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�A��%,�����1�&
4L+!++@��%,������n��48	A�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�B
]&,�����1�&
4L+!+,@
]&,���P�a�U48	B�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�Ci&,�����1�&
4L-!++@i&,���P�a�U48	C�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�D�&,�����1�&
4L-!+,@�&,���P�a�U48	D�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�E$�&,�����1�&
4L-!++@$�&,���P�a�U48	E�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**�F�I,,�����1�&
4L-!+,@�I,,������n��48	F�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**�G�L,,�����1�&
4L1!++@�L,,������n��48	G�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�H�,,�����1�&
4L1!+,@�,,������n��48	H�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**xI�.4,�����1�&
4L+!++@�.4,������n��48	IMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**xJ7v4,�����1�&
4L+!+,@7v4,������n��48	JMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**�K{7J�����1�&
4L=!++@{7J�����ɻ��\�KMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�LK�����1�&
4L=!+,@K�����ɻ��\�LMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�M��K�����1�&
4L=!++@��K����0l� ��\�MMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�N�p(L�����1�&
4L=!+,@�p(L���0���ӛt\�NMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�O�(L�����1�&
4L=!++@�(L���0���ӛt\�OMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�P8��L�����1�&
4L=!+,@8��L������$�/\\�PMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�Q��L�����1�&
4L=!++@��L������$�/\\�QMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�R]M�����1�&
4L=!+,@]M���EDb��E�S�J}\�RMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�Sc*]M�����1�&
4L=!++@c*]M���EDb��E�S�J}\�SMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�T|�M�����1�&
4L=!+,@|�M���ID�E���G�E���\�TMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�U��M�����1�&
4L=!++@��M���ID�E���G�E���\�UMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�V�x�N�����1�&
4L=!+,@�x�N�����ɻ��\�VMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�W���N�����1�&
4L=!++@���N�����ɻ��\�WMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�X�4'O�����1�&
4L=!+,@�4'O���ID�E���H�E���\�XMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�Y�J'O�����1�&
4L=!++@�J'O���ID�E���H�E���\�YMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�Z���O�����1�&
4L=!+,@���O����0h`-��\�ZMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�[E�O�����1�&
4L=!++@E�O����0h`-��\�[Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�\�XP�����1�&
4L=!+,@�XP����0l`-��\�\Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�]&�XP�����1�&
4L=!++@&�XP����0l`-��\�]Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�^�w�U�����1�&
4L=!+,@�w�U�����ɻ��\�^Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�_��U�����1�&
4L=!++@��U�����ɻ��\�_Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�`��^�����1�&
4L=!+,@��^���ID�E���E�E���\�`Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�a�"�^�����1�&
4L-!++@�"�^���ID�E���E�E���\�aMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�bz&�^�����1�&
4L-!+,@z&�^���ID�E���E�E���\�bMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**xc�=�^�����1�&
4L+!++@�=�^���ID�E���E�E���\�cMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**xd���^�����1�&
4L+!+,@���^���ID�E���E�E���\�dMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**�e��^�����1�&
4L9! @��^���ID�E���E�E���\�eMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�Lih�LNc�T�� �����*�**�fݵ�^�����1�&
4Lu! @ݵ�^���ID�E���E�E���\�fMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�i&��8Q�@X�ٌ�
7F��:*A��-R=Win32Status
�**�g���^�����1�&
4L1!++@���^���*C�}<�M��/��H]\�g�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�h}��^�����1�&
4L1!+,@}��^���*C�}<�M��/��H]\�h�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�i%��^�����1�&
4L-!++@%��^���*C�}<�M��/��H]\�i�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**�j�_�����1�&
4L-!+,@�_���*C�}<�M��/��H]\�j�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**�kY�_�����1�&
4L-!++@Y�_���*C�}<�M��/��H]\�k�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�l*�_�����1�&
4L-!+,@*�_���*C�}<�M��/��H]\�l�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�m}�_�����1�&
4L+!++@}�_���*C�}<�M��/��H]\�m�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�nEl_�����1�&
4L+!+,@El_���*C�}<�M��/��H]\�n�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�o�_�����1�&
4L%!++@�_���*C�}<�M��/��H]\�o�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�p��_�����1�&
4L%!+,@��_���*C�}<�M��/��H]\�p�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�q��_�����1�&
4L1!++@��_���*C�}<�M��/��H]\�q�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�rօ_�����1�&
4L1!+,@օ_���*C�}<�M��/��H]\�r�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�s	%_�����1�&
4L-!++@	%_���*C�}<�M��/��H]\�s�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�t]+_�����1�&
4L-!+,@]+_���*C�}<�M��/��H]\�t�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�u$._�����1�&
4L%!++@$._���*C�}<�M��/��H]\�u�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�v	C_�����1�&
4L%!+,@	C_���*C�}<�M��/��H]\�v�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�wE_�����1�&
4L+!++@E_���*C�}<�M��/��H]\�w�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�xDV_�����1�&
4L+!+,@DV_���P�a�U\�x�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�y�IW_�����1�&
4L%!++@�IW_���ID�E��P��E���\�y�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�z�eW_�����1�&
4L%!+,@�eW_���ID�E��P��E���\�z�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�{�iW_�����1�&
4L+!++@�iW_���ID�E��P��E���\�{�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�|lkW_�����1�&
4L+!+,@lkW_���P�a�U\�|�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�}
в6����1�&
4L%!++@
в6����ɻ��\�}�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�~��6����1�&
4L%!+,@��6����ɻ��\�~�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�`�6����1�&
4L+!++@`�6����ɻ��\��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**����6����1�&
4L+!+,@��6����ɻ��\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**����=�����1�&
4L%!++@��=�����ɻ��\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��C��=�����1�&
4L%!+,@C��=�����ɻ��\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��硪=�����1�&
4L+!++@硪=�����ɻ��\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**����=�����1�&
4L+!+,@��=�����ɻ��\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��~z۵���1�&
4L%!++@~z۵���ɻ��\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��"6z۵���1�&
4L%!+,@"6z۵���ɻ��\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**���7z۵���1�&
4L+!++@�7z۵���ɻ��\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**���!{۵���1�&
4L+!+,@�!{۵���ɻ��\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**����)�����1�&
4L=!++@��)�����
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��-������1�&
4L=!+,@-������
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���������1�&
4L=!++@�������
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���۝�����1�&
4L=!+,@�۝�����
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���������1�&
4L=!++@�������
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���%8�����1�&
4L=!+,@�%8�����
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��B38�����1�&
4L=!++@B38�����
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����������1�&
4L=!+,@��������
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����������1�&
4L=!++@��������
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���l�����1�&
4L=!+,@�l�����
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��y�l�����1�&
4L=!++@y�l�����
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���Y�����1�&
4L=!+,@�Y�����
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��ri�����1�&
4L=!++@ri�����
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��C)������1�&
4L=!+,@C)������
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���7������1�&
4L=!++@�7������
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��
�<�����1�&
4L=!+,@
�<�����
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��N�<�����1�&
4L=!++@N�<�����
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����������1�&
4L=!+,@��������
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��e�������1�&
4L=!++@e�������
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���'p�����1�&
4L=!+,@�'p�����
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��7p�����1�&
4L=!++@7p�����
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��x�	�����1�&
4L=!+,@x�	�����
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��
�����1�&
4L=!++@
�����
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����������1�&
4L=!+,@��������
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���������1�&
4L=!++@�������
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���S=�����1�&
4L=!+,@�S=�����
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���b=�����1�&
4L=!++@�b=�����
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����������1�&
4L=!+,@��������
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����������1�&
4L=!++@��������
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��f�r�����1�&
4L=!+,@f�r�����
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��h�r�����1�&
4L=!++@h�r�����
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���s
�����1�&
4L=!+,@�s
�����
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����
�����1�&
4L=!++@��
�����
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���������1�&
4L=!+,@�������
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��X������1�&
4L=!++@X������
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��?NB�����1�&
4L=!+,@?NB�����
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���\B�����1�&
4L=!++@�\B�����
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���������1�&
4L=!+,@�������
�� ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**x���
 �����1�&
4L+!++@��
 ���`�b�)\�E�"��E ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x�� �����1�&
4L+!+,@� ���`�b�)\�E�"��E ��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**����w:�����1�&
4L=!++@��w:�������{Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���bc;�����1�&
4L=!+,@�bc;�����d6����d6���Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���5�;�����1�&
4L=!++@�5�;�����d6����d6���Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���W<�����1�&
4L=!+,@�W<�����d6����d6���Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���W<�����1�&
4L=!++@�W<�����d6����d6���Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���<�����1�&
4L=!+,@�<������*�
Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��+)�<�����1�&
4L=!++@+)�<������*�
Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��Y
�=�����1�&
4L=!+,@Y
�=�����d6����d6���Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��C�=�����1�&
4L=!++@C�=�����d6����d6���Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��~s&>�����1�&
4L=!+,@~s&>�����d6����d6���Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���&>�����1�&
4L=!++@�&>�����d6����d6���Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��A>�>�����1�&
4L=!+,@A>�>������%
7�
Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���L�>�����1�&
4L=!++@�L�>������%
7�
Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��t][?�����1�&
4L=!+,@t][?�����d6����d6���Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��/x[?�����1�&
4L=!++@/x[?�����d6����d6���Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��u�?�����1�&
4L=!+,@u�?�����d6����d6���Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�����?�����1�&
4L=!++@���?�����d6����d6���Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���@�����1�&
4L=!+,@�@�����d6����d6���Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��i�@�����1�&
4L=!++@i�@�����d6����d6���Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����C�����1�&
4L=!+,@��C�����d6����d6���Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����C�����1�&
4L=!++@��C�����d6����d6���Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��o�D�����1�&
4L=!+,@o�D���0�`���Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller���1�&
4LElfChnk�g�g�8��B���AL��B=�����f?�m�MF��1/�-**��[$�D�����1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
4L�!++@[$�D���0�`���Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c����c�����X�څ��������D�	EventDataA��3B��oData=Event
A��3B%=SubscriberName
"TrustedInstaller*�**��K�`H�����1�&
4L=!+,@K�`H�������{Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller)�**����`H�����1�&
4L=!++@��`H�������{Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller*�**��]�M�����1�&
4L=!+,@]�M������X$��
Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller+�**x��gM�����1�&
4L+!++@�gM������X$��
Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**x��M�����1�&
4L+!+,@�M������X$��
Px�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**���M_�����1�&
4L=!++@�M_�����8A�ET��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller
�**��v4`�����1�&
4L=!+,@v4`�����8A�ET��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerSe�**����S`�����1�&
4L=!++@��S`����cZ[��wfZ[���T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerrmSr�**��<��`�����1�&
4L=!+,@<��`����cZ[��wfZ[���T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerv�**����`�����1�&
4L=!++@��`����cZ[��wfZ[���T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller**�**���o�a�����1�&
4L=!+,@�o�a�����8A�ET��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller3�**��|�a�����1�&
4L=!++@|�a�����8A�ET��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�!W	�**���5b�����1�&
4L=!+,@�5b�����8A�ET��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller���**���Hb�����1�&
4L=!++@�Hb�����8A�ET��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**��b�����1�&
4L=!+,@b����cZ[��UhZ[���T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�����b�����1�&
4L=!++@���b����cZ[��UhZ[���T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**���Sc�����1�&
4L=!+,@�Sc���0��˵4
�T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��@�Sc�����1�&
4L=!++@@�Sc���0��˵4
�T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**���g�����1�&
4L=!+,@�g�����8A�ET��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**���ʰg�����1�&
4L-!++@�ʰg�����8A�ET��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**���Ͱg�����1�&
4L-!+,@�Ͱg�����8A�ET��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient���**x��g�����1�&
4L+!++@�g�����8A�ET��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**x��S�g�����1�&
4L+!+,@�S�g�����8A�ET��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**��f�������1�&
4L9! @f������cZ[���eZ[���T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L�-�LNc�T�� ������**��)e������1�&
4Lu! @)e�����cZ[���eZ[���T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q1/&��8Q�@X�ٌ�
7F��:A��-B=Win32Status
�**��l�������1�&
4L1!++@l�����*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**����������1�&
4L1!+,@������*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**��Z�������1�&
4L-!++@Z�����*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**��C�����1�&
4L-!+,@C���*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**��5	�����1�&
4L-!++@5	���*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��5"	�����1�&
4L-!+,@5"	���*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**���C	�����1�&
4L-!++@�C	���*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��V	�����1�&
4L-!+,@V	���*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**���W	�����1�&
4L+!++@�W	���*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��n�	�����1�&
4L+!+,@n�	���*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��^;
�����1�&
4L%!++@^;
���*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens4�**����
�����1�&
4L%!+,@��
���*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��O������1�&
4L1!++@O����*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**��t������1�&
4L1!+,@t����*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**��������1�&
4L-!++@����*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��#������1�&
4L-!+,@#����*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��4������1�&
4L%!++@4����*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��8������1�&
4L%!+,@8����*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**���������1�&
4L+!++@�����*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��]������1�&
4L+!+,@]����P�a�UT���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��R"�����1�&
4L-!++@R"�����1I��L��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��0U"�����1�&
4L-!+,@0U"�����1I��L��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient���**x��c"�����1�&
4L+!++@�c"�����1I��L��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**x�5�"�����1�&
4L+!+,@5�"�����1I��L��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvlx**`�t��~����1�&
4L! @t��~����Mon4�L��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L�-�c�`**h�,E��~����1�&
4L! @,E��~����Mon4�L��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q1/Winh**��/d��~����1�&
4L1!++@/d��~��*C�}<�M��/��H]L���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvin�**��rg��~����1�&
4L1!+,@rg��~��*C�}<�M��/��H]L���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvin�**��(���~����1�&
4L-!++@(���~��*C�}<�M��/��H]L���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles-Win�**��]ޫ�~����1�&
4L-!+,@]ޫ�~��*C�}<�M��/��H]L���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles-Win�**���U��~����1�&
4L-!++@�U��~��*C�}<�M��/��H]L���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient-Win�**��V��~����1�&
4L-!+,@�V��~��*C�}<�M��/��H]L��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient-Win�**�.w��~����1�&
4L-!++@.w��~��*C�}<�M��/��H]L��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient-Win�**�Ҍ��~����1�&
4L-!+,@Ҍ��~��*C�}<�M��/��H]L��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientn/Op�**�����~����1�&
4L+!++@����~��*C�}<�M��/��H]L��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvt�**�1���~����1�&
4L+!+,@1���~��*C�}<�M��/��H]L��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv��**�<Ͳ�~����1�&
4L%!++@<Ͳ�~��*C�}<�M��/��H]L��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�LNc��**����~����1�&
4L%!+,@���~��*C�}<�M��/��H]L��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens��8Q�@�**�9���~����1�&
4L1!++@9���~��*C�}<�M��/��H]L��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvin�**�ߖ��~����1�&
4L1!+,@ߖ��~��*C�}<�M��/��H]L��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvin�**�	V(��~����1�&
4L-!++@V(��~��*C�}<�M��/��H]L�	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient-Win�**�
�-��~����1�&
4L-!+,@�-��~��*C�}<�M��/��H]L�
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient-Win�**��/��~����1�&
4L%!++@�/��~��*C�}<�M��/��H]L��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Senssoft�**��B��~����1�&
4L%!+,@�B��~��*C�}<�M��/��H]L��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sensicro�**�
�D��~����1�&
4L+!++@�D��~��*C�}<�M��/��H]L�
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvM�**��U��~����1�&
4L+!+,@�U��~��P�a�UL��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvM�**����w����1�&
4L-!++@���w����1I��L��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClienticro�**�K��w����1�&
4L-!+,@K��w����1I��L��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClientsoft�**���w����1�&
4L-!++@��w����1I��L��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient-Win�**�"�w����1�&
4L-!+,@"�w����1I��L��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient-Win�**���w����1�&
4L+!++@��w����1I��L��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
TermSrvt�**�Pl�w����1�&
4L+!+,@Pl�w����1I��L��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
TermSrvo�**�>[�w����1�&
4L%!++@>[�w����1I��L��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens����8M�**����w����1�&
4L%!+,@���w����1I��L��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens����8M�**��w����1�&
4L+!++@�w����1I��L��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvM�**��I�w����1�&
4L+!+,@�I�w��P�a�UL��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvM�**��]�w����1�&
4L-!++@�]�w��P�a�UL��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClienticro�**��t�w����1�&
4L-!+,@�t�w��P�a�UL��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientsoft�**�	|�w����1�&
4L-!++@	|�w��P�a�UL��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles-Win�**����w����1�&
4L-!+,@���w����1I��L��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profilesdows�**�N��w����1�&
4L1!++@N��w����1I��L��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvin�**��E�w����1�&
4L1!+,@�E�w����1I��L��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvgo�**x֝$�w����1�&
4L+!++@֝$�w����1I��L�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvsx**x ��$�w����1�&
4L+!+,@��$�w����1I��L� Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvtx**�!Ix����1�&
4L=!++@Ix����/�+d�!Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller-Win�**�"��x����1�&
4L=!+,@��x���O�x�)S�x��d�"Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerdows�**�#�
Zx����1�&
4L=!++@�
Zx���O�x�#T�x��d�#Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller-Win�**�$���x����1�&
4L=!+,@���x���O�x�#T�x��d�$Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerlogo�**�%���x����1�&
4L=!++@���x���O�x�#T�x��d�%Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallern/Op�**�&�v�x����1�&
4L=!+,@�v�x����/�+d�&Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallererat�**�'�x����1�&
4L=!++@�x����/�+d�'Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstalleriona�**�(�&x����1�&
4L=!+,@�&x���O�x�cX�x��d�(Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerl�c��**�)'x����1�&
4L=!++@'x���O�x��T�x��d�)Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerTr�**�*���x����1�&
4L=!+,@���x��0��ǚVt!d�*Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerTr�**�+/��x����1�&
4L=!++@/��x��0��ǚVt!d�+Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerTr�**�,wvZx����1�&
4L=!+,@wvZx���O�x�tU�x��d�,Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerTr�**�-݌Zx����1�&
4L=!++@݌Zx���O�x�tU�x��d�-Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerTr�**�.0%�x����1�&
4L=!+,@0%�x��0
�p�Vt!d�.Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerTr�**�/�<�x����1�&
4L=!++@�<�x��0
�p�Vt!d�/Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerTr�**�0jˋx����1�&
4L=!+,@jˋx���O�x�cX�x��d�0Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerTr�**�1��x����1�&
4L=!++@��x���O�x�cX�x��d�1Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerTr�**�2�!x����1�&
4L=!+,@�!x����/�+d�2Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerTr�**�3��!x����1�&
4L=!++@��!x����/�+d�3Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerTr�**�4Ի�&x����1�&
4L=!+,@Ի�&x����/�+d�4Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerTr�**x5H��&x����1�&
4L+!++@H��&x����/�+d�5Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�x**x6�&x����1�&
4L+!+,@�&x����/�+d�6Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvpx**�7n�8x����1�&
4L=!++@n�8x����5���d�7Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallern/Op�**�87�H9x����1�&
4L=!+,@7�H9x����5���d�8Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallern/Op�**�9�Í9x����1�&
4L=!++@�Í9x��Cʺ4x��̺4x��d�9Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallern/Op�**�:��%:x����1�&
4L=!+,@��%:x�������G�d�:Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallern/Op�**�;�&:x����1�&
4L=!++@�&:x�������G�d�;Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallern/Op�**�<�ٿ:x����1�&
4L=!+,@�ٿ:x�������G�d�<Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallern/Op�**�=$�:x����1�&
4L=!++@$�:x�������G�d�=Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallern/Op�**�>͝�>x����1�&
4L=!+,@͝�>x��Cʺ4x�
yѺ4x��d�>Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallern/Op�**�?��>x����1�&
4L-!++@��>x��Cʺ4x�
yѺ4x��d�?Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient-Win�**�@���>x����1�&
4L-!+,@���>x��Cʺ4x�
yѺ4x��d�@Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient-Win�**xA���>x����1�&
4L+!++@���>x��Cʺ4x�
yѺ4x��d�AMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvMx**xB.T�>x����1�&
4L+!+,@.T�>x��Cʺ4x�
yѺ4x��d�BMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvox**`CUYr�����1�&
4L! @UYr�����5���d�CMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L�-`**hD6Tr�����1�&
4L! @6Tr�����5���d�DMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q1/����h**�E4Br�����1�&
4L1!++@4Br���*C�}<�M��/��H]d�E�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv���**�F�Er�����1�&
4L1!+,@�Er���*C�}<�M��/��H]d�F�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv���**�G%dr�����1�&
4L-!++@%dr���*C�}<�M��/��H]d�G�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles������**�H�$r�����1�&
4L-!+,@�$r���*C�}<�M��/��H]d�H�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles������**�Ic:'r�����1�&
4L-!++@c:'r���*C�}<�M��/��H]d�I�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient������**�JY;'r�����1�&
4L-!+,@Y;'r���*C�}<�M��/��H]d�J�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient������**�KR'r�����1�&
4L-!++@R'r���*C�}<�M��/��H]d�K�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient������**�L<h'r�����1�&
4L-!+,@<h'r���*C�}<�M��/��H]d�L�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient������**�M�i'r�����1�&
4L+!++@�i'r���*C�}<�M��/��H]d�M�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv\�**�N�((r�����1�&
4L+!+,@�((r���*C�}<�M��/��H]d�N�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�Or(r�����1�&
4L%!++@r(r���*C�}<�M��/��H]d�O�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens+!�**�P��(r�����1�&
4L%!+,@��(r���*C�}<�M��/��H]d�P�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens@��**�Q(1r�����1�&
4L1!++@(1r���*C�}<�M��/��H]d�Q�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvP�**�RG,1r�����1�&
4L1!+,@G,1r���*C�}<�M��/��H]d�R�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvP�**�SY�3r�����1�&
4L-!++@Y�3r���*C�}<�M��/��H]d�S�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient6���P�**�Ta�3r�����1�&
4L-!+,@a�3r���*C�}<�M��/��H]d�T�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient6���P�**�U(�3r�����1�&
4L%!++@(�3r���*C�}<�M��/��H]d�U�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens6���Ĉ**�V[�3r�����1�&
4L%!+,@[�3r���*C�}<�M��/��H]d�V�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens<�����**�W��3r�����1�&
4L+!++@��3r���*C�}<�M��/��H]d�W�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv)�**�Xʶ3r�����1�&
4L+!+,@ʶ3r���P�a�Ud�X�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�Y��uA����1�&
4L-!++@��uA����5���d�Y�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient+�**�Z��uA����1�&
4L-!+,@��uA����5���d�Z�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient,�**�[�#�uA����1�&
4L-!++@�#�uA����5���d�[�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient+�**�\c\�uA����1�&
4L-!+,@c\�uA����5���d�\�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient,�**�]�^�uA����1�&
4L+!++@�^�uA����5���d�]�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
TermSrv�**�^���uA����1�&
4L+!+,@���uA����5���d�^�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
TermSrv�**�_^!�uA����1�&
4L%!++@^!�uA����5���d�_�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens4�**�`�"vA����1�&
4L%!+,@�"vA����5���d�`�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�a(evA����1�&
4L+!++@(evA����5���d�a�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�bq�vA����1�&
4L+!+,@q�vA��P�a�Ud�b�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�cH�vA����1�&
4L-!++@H�vA��P�a�Ud�c�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�d��vA����1�&
4L-!+,@��vA��P�a�Ud�d�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�e��vA����1�&
4L-!++@��vA��P�a�Ud�e�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**�f9�vA����1�&
4L-!+,@9�vA����5���d�f�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**�g��vA����1�&
4L1!++@��vA����5���d�g�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�
4LElfChnkhh��p�}��F�-*��R=�����f?�m�MF��IH**�hS�vA����1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
4L�!+,@S�vA����5���d�h�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���c�����X�څ��������*D�	EventDataA��3R��oData=Event
A��3R%=SubscriberName
SessionEnv**�**xi��vA����1�&
4L+!++@��vA����5���d�iMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvlx**xjU�vA����1�&
4L+!+,@U�vA����5���d�jMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvrx**�kK6��A����1�&
4L=!++@K6��A����?���`	kMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�lh���A����1�&
4L=!+,@h���A����?���`	lMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�mj��A����1�&
4L=!++@j��A����?���`	mMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�n�7��A����1�&
4L=!+,@�7��A�����3�+`	nMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�o�I��A����1�&
4L=!++@�I��A�����3�+`	oMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�p��!�A����1�&
4L=!+,@��!�A��M�.�A���.�A��`	pMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�q��!�A����1�&
4L=!++@��!�A��M�.�A���.�A��`	qMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�r曻�A����1�&
4L=!+,@曻�A��0��ei��t`	rMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�s|���A����1�&
4L=!++@|���A��0��ei��t`	sMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�t�eU�A����1�&
4L=!+,@�eU�A��M�.�A���.�A��`	tMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�uhyU�A����1�&
4L=!++@hyU�A��M�.�A���.�A��`	uMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�v���A����1�&
4L=!+,@���A���b�?��M���9�`	vMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�w��A����1�&
4L=!++@��A���b�?��M���9�`	wMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�xS��A����1�&
4L=!+,@S��A��M�.�A��.�A��`	xMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�y���A����1�&
4L=!++@���A��M�.�A��.�A��`	yMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�zA�#�A����1�&
4L=!+,@A�#�A��M�.�A��.�A��`	zMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�{��#�A����1�&
4L=!++@��#�A��M�.�A��.�A��`	{Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�|ˍ��A����1�&
4L=!+,@ˍ��A��M�.�A�^�.�A��`	|Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�}����A����1�&
4L=!++@����A��M�.�A�^�.�A��`	}Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�~��A����1�&
4L=!+,@��A��M�.�A���.�A��`	~Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��+��A����1�&
4L=!++@�+��A��M�.�A���.�A��`	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���lV�A����1�&
4L=!+,@�lV�A����?���`	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���{V�A����1�&
4L=!++@�{V�A����?���`	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���J�A����1�&
4L=!+,@�J�A��M�.�A�-�.�A��`	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**x��A����1�&
4L+!++@�A��M�.�A�-�.�A��`	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x��,�A����1�&
4L+!+,@�,�A��M�.�A�-�.�A��`	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**����A����1�&
4L=!++@��A�����!��\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����#�A����1�&
4L=!+,@��#�A���ғ�A�Փ�A��\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���\l�A����1�&
4L=!++@�\l�A����%!`\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���@�A����1�&
4L=!+,@�@�A���ғ�A�֓�A��\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���R�A����1�&
4L=!++@�R�A���ғ�A�֓�A��\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���ʠ�A����1�&
4L=!+,@�ʠ�A�����!��\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���ڠ�A����1�&
4L=!++@�ڠ�A�����!��\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**������A����1�&
4L=!+,@����A���ғ�A��Փ�A��\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**������A����1�&
4L-!++@����A���ғ�A��Փ�A��\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**������A����1�&
4L-!+,@����A���ғ�A��Փ�A��\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**x���A����1�&
4L+!++@��A���ғ�A��Փ�A��\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x��>��A����1�&
4L+!+,@�>��A���ғ�A��Փ�A��\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**��n�J������1�&
4L9! @n�J�������!��\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�LH�LNc�T�� �����*�**���uK������1�&
4Lu! @�uK�������!��\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�I&��8Q�@X�ٌ�
7F��:*A��-R=Win32Status
.�**`���X������1�&
4L! @��X�������!��\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�LH`**h��\������1�&
4L! @�\�������!��\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�Ih**���^������1�&
4L1!++@�^����*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�� �^������1�&
4L1!+,@ �^����*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**��K�^������1�&
4L-!++@K�^����*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**����f������1�&
4L-!+,@��f����*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**���i������1�&
4L-!++@�i����*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**���i������1�&
4L-!+,@�i����*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**���:i������1�&
4L-!++@�:i����*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**���Qi������1�&
4L-!+,@�Qi����*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**��Si������1�&
4L+!++@Si����*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��}�i������1�&
4L+!+,@}�i����*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��5j������1�&
4L%!++@5j����*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**����j������1�&
4L%!+,@��j����*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**����r������1�&
4L1!++@��r����*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**����r������1�&
4L1!+,@��r����*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**��W�t������1�&
4L-!++@W�t����*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**���t������1�&
4L-!+,@�t����*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**����t������1�&
4L%!++@��t����*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**����t������1�&
4L%!+,@��t����*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��V�t������1�&
4L+!++@V�t����*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**����t������1�&
4L+!+,@��t����P�a�U\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��M��A����1�&
4L-!++@M��A�����!��\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**��
��A����1�&
4L-!+,@
��A�����!��\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**����A����1�&
4L-!++@��A�����!��\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**��m5�A����1�&
4L-!+,@m5�A�����!��\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**���6�A����1�&
4L+!++@�6�A�����!��\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
TermSrv�**����A����1�&
4L+!+,@��A�����!��\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
TermSrv�**���l�A����1�&
4L%!++@�l�A�����!��\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��`�A����1�&
4L%!+,@`�A�����!��\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��~Q�A����1�&
4L+!++@~Q�A�����!��\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�����A����1�&
4L+!+,@���A��P�a�U\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**����A����1�&
4L-!++@��A��P�a�U\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**��T�A����1�&
4L-!+,@T�A��P�a�U\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**����A����1�&
4L-!++@��A��P�a�U\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**���t#�A����1�&
4L-!+,@�t#�A�����!��\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**���w#�A����1�&
4L1!++@�w#�A�����!��\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**����#�A����1�&
4L1!+,@��#�A�����!��\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**x���+�A����1�&
4L+!++@��+�A��0�`��D;�+\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x�^',�A����1�&
4L+!+,@^',�A��0�`��D;�+\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**��8t��A����1�&
4L=!++@8t��A�����e�0`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��Gz��A����1�&
4L=!+,@Gz��A��_kv�A��lv�A��`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����F�A����1�&
4L=!++@��F�A�����e�0`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���H��A����1�&
4L=!+,@�H��A��_kv�A�qv�A��`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���Y��A����1�&
4L=!++@�Y��A��_kv�A�qv�A��`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����z�A����1�&
4L=!+,@��z�A��_kv�A��uv�A��`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����z�A����1�&
4L=!++@��z�A��_kv�A��uv�A��`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�����A����1�&
4L=!+,@���A��_kv�A��uv�A��`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��`��A����1�&
4L=!++@`��A��_kv�A��uv�A��`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��s_��A����1�&
4L=!+,@s_��A��_kv�A��uv�A��`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���o��A����1�&
4L=!++@�o��A��_kv�A��uv�A��`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����G�A����1�&
4L=!+,@��G�A��_kv�A�Wwv�A��`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���H�A����1�&
4L=!++@�H�A��_kv�A�Wwv�A��`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�����A����1�&
4L=!+,@���A��_kv�A�Wwv�A��`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��m���A����1�&
4L=!++@m���A��_kv�A�Wwv�A��`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��@�{�A����1�&
4L=!+,@@�{�A��_kv�A�Wwv�A��`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���{�A����1�&
4L=!++@�{�A��_kv�A�Wwv�A��`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��`{�A����1�&
4L=!+,@`{�A��_kv�A��v�A��`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����A����1�&
4L=!++@��A��_kv�A��v�A��`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��g��A����1�&
4L=!+,@g��A�����e�0`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**������A����1�&
4L=!++@����A�����e�0`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��2|��A����1�&
4L=!+,@2|��A��_kv�A�ikv�A��`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**x��>��A����1�&
4L+!++@�>��A��_kv�A�ikv�A��`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x��^��A����1�&
4L+!+,@�^��A��_kv�A�ikv�A��`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**���J�B����1�&
4L=!++@�J�B������0`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���[B����1�&
4L=!+,@�[B���: \`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���ݥB����1�&
4L=!++@�ݥB������0`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��&3>B����1�&
4L=!+,@&3>B������0`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���O>B����1�&
4L=!++@�O>B������0`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����B����1�&
4L=!+,@��B������0`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��O��B����1�&
4L=!++@O��B������0`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��^
$
B����1�&
4L=!+,@^
$
B�����A�p���A��`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���&$
B����1�&
4L-!++@�&$
B�����A�p���A��`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**���*$
B����1�&
4L-!+,@�*$
B�����A�p���A��`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**x�FC$
B����1�&
4L+!++@FC$
B�����A�p���A��`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x�Ի$
B����1�&
4L+!+,@Ի$
B�����A�p���A��`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**`��������1�&
4L! @���������0`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�LH`**h�	G������1�&
4L! @	G��������0`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�Ih**���g������1�&
4L1!++@�g����*C�}<�M��/��H]`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**���k������1�&
4L1!+,@�k����*C�}<�M��/��H]`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**��z�������1�&
4L-!++@z�����*C�}<�M��/��H]`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**���������1�&
4L-!+,@�����*C�}<�M��/��H]`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**��0,�����1�&
4L-!++@0,���*C�}<�M��/��H]`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**��-�����1�&
4L-!+,@-���*C�}<�M��/��H]`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**��Q�����1�&
4L-!++@Q���*C�}<�M��/��H]`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**���f�����1�&
4L-!+,@�f���*C�}<�M��/��H]`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**��%i�����1�&
4L+!++@%i���*C�}<�M��/��H]`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**���8�����1�&
4L+!+,@�8���*C�}<�M��/��H]`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��Os�����1�&
4L%!++@Os���*C�}<�M��/��H]`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��������1�&
4L%!+,@����*C�}<�M��/��H]`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��P�����1�&
4L1!++@P���*C�}<�M��/��H]`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**��7T�����1�&
4L1!+,@7T���*C�}<�M��/��H]`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**���\�����1�&
4L-!++@�\���*C�}<�M��/��H]`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**��4c�����1�&
4L-!+,@4c���*C�}<�M��/��H]`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**��e�����1�&
4L%!++@e���*C�}<�M��/��H]`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**���y�����1�&
4L%!+,@�y���*C�}<�M��/��H]`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��6}�����1�&
4L+!++@6}���*C�}<�M��/��H]`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��֍�����1�&
4L+!+,@֍���P�a�U`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��������1�&
4L-!++@��������0`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**��������1�&
4L-!+,@��������0`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**��e�����1�&
4L-!++@e�������0`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**��������1�&
4L-!+,@��������0`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**��(�����1�&
4L+!++@(�������0`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
TermSrv�**�������1�&
4L+!+,@�������0`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
TermSrv�**��������1�&
4L%!++@��������0`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��U%����1�&
4L%!+,@U%������0`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**���_����1�&
4L+!++@�_������0`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��������1�&
4L+!+,@����P�a�U`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��������1�&
4L-!++@����P�a�U`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�������1�&
4L-!+,@����P�a�U`��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�������1�&
4L-!++@����P�a�U`��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**�������1�&
4L-!+,@��������0`��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**�������1�&
4L1!++@��������0`��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�Q�����1�&
4L1!+,@Q�������0`��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**x�#����1�&
4L+!++@�#������0`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x��#����1�&
4L+!+,@��#������0`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**�!��(����1�&
4L=!++@!��(������^`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller���1�&
4L=!+,@.��)���(�`$X`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�ElfChnk���`���ڐq��B=�����f?�m�MF��1C�A**�.��)����1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
4L�!+,@.��)���(�`$X`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c����c�����X�څ��������D�	EventDataA��3B��oData=Event
A��3B%=SubscriberName
"TrustedInstaller�**�	��)����1�&
4L=!++@��)����.$���.$��`�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerj�**�
�~m*����1�&
4L=!+,@�~m*����.$�
��.$��`�
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**�Иm*����1�&
4L=!++@Иm*����.$�
��.$��`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**�1(+����1�&
4L=!+,@1(+����.$�*�.$��`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**�
�7+����1�&
4L=!++@�7+����.$�*�.$��`�
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**��Π+����1�&
4L=!+,@�Π+����.$�*�.$��`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**�ݠ+����1�&
4L=!++@ݠ+����.$�*�.$��`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**��a;,����1�&
4L=!+,@�a;,����.$�*�.$��`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**�w�;,����1�&
4L=!++@w�;,����.$�*�.$��`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**��6�,����1�&
4L=!+,@�6�,����.$�*�.$��`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**��O�,����1�&
4L=!++@�O�,����.$�*�.$��`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**��'o-����1�&
4L=!+,@�'o-����.$�I�.$��`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**��>o-����1�&
4L=!++@�>o-����.$�I�.$��`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**���	.����1�&
4L=!+,@��	.����.$�*�.$��`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**�J
.����1�&
4L=!++@J
.����.$�*�.$��`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**�΍�.����1�&
4L=!+,@΍�.������^`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**����.����1�&
4L=!++@���.������^`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**���q2����1�&
4L=!+,@��q2����.$���.$��`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**x,er2����1�&
4L+!++@,er2����.$���.$��`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**x��r2����1�&
4L+!+,@��r2����.$���.$��`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**�UqF����1�&
4L=!++@UqF����[�}X�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerer�**��z-G����1�&
4L=!+,@�z-G��\q�A�uq�A��X�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerer�**��$jG����1�&
4L=!++@�$jG��\q�A��s�A��X�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerer�**� LH����1�&
4L=!+,@LH����[�}X� Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerer�**�!� H����1�&
4L=!++@� H����[�}X�!Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerer�**�"�#�H����1�&
4L=!+,@�#�H����[�}X�"Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerer�**�#01�H����1�&
4L=!++@01�H����[�}X�#Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��**�$�8�L����1�&
4L=!+,@�8�L��0��� ��d X�$Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**�%6V�L����1�&
4L-!++@6V�L��0��� ��d X�%Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient��#̀**�&Z�L����1�&
4L-!+,@Z�L��0��� ��d X�&Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient**�**x'�u�L����1�&
4L+!++@�u�L��0��� ��d X�'Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvlx**x(C�L����1�&
4L+!+,@C�L��0��� ��d X�(Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvrx**�)`�l������1�&
4L-!++@`�l��������,0�)Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�*��l������1�&
4L-!+,@��l��������,0�*Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientiona�**x+�l������1�&
4L+!++@�l��������,0�+Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvox**x,L�l������1�&
4L+!+,@L�l��������,0�,Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvnx**�-Yu�������1�&
4L9! @Yu�����wX��vh���0�-Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L�A�LNc�T�� �����ft�**�.`�������1�&
4Lu! @`�����wX��vh���0�.Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q1C&��8Q�@X�ٌ�
7F��:A��-B=Win32Status
�**�/���������1�&
4L1!++@�������*C�}<�M��/��H]0�/�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvTe�**�0n��������1�&
4L1!+,@n������*C�}<�M��/��H]0�0�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv*�**�1޲�������1�&
4L-!++@޲�����*C�}<�M��/��H]0�1�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles��**�2�3������1�&
4L-!+,@�3����*C�}<�M��/��H]0�2�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profilesn32S�**�3�:������1�&
4L-!++@�:����*C�}<�M��/��H]0�3�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient**�**�4�X������1�&
4L-!+,@�X����*C�}<�M��/��H]0�4�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�5�Y������1�&
4L+!++@�Y����*C�}<�M��/��H]0�5�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�6��������1�&
4L+!+,@������*C�}<�M��/��H]0�6�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�7�0������1�&
4L%!++@�0����*C�}<�M��/��H]0�7�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens��f��**�8&�������1�&
4L%!+,@&�����*C�}<�M��/��H]0�8�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens��**�9AE������1�&
4L1!++@AE����*C�}<�M��/��H]0�9�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�:cJ������1�&
4L1!+,@cJ����*C�}<�M��/��H]0�:�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�;3<������1�&
4L-!++@3<����*C�}<�M��/��H]0�;�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient��**�<"C������1�&
4L-!+,@"C����*C�}<�M��/��H]0�<�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient��**�=3E������1�&
4L%!++@3E����*C�}<�M��/��H]0�=�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens��**�>�Y������1�&
4L%!+,@�Y����*C�}<�M��/��H]0�>�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens��**�?�[������1�&
4L+!++@�[����*C�}<�M��/��H]0�?�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�@ol������1�&
4L+!+,@ol����P�a�U0�@�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�A�8�����1�&
4L-!++@�8�������L�AMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�Bo<�����1�&
4L-!+,@o<�������L�BMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientssio�**xC�J�����1�&
4L+!++@�J�������L�CMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**xDfL�����1�&
4L+!+,@fL�������L�DMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvtx**`EQN{������1�&
4L! @QN{����0��t�'(�L�EMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L�Aoft`**hF�	������1�&
4L! @�	����0��t�'(�L�FMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q1Con�h**�G(�������1�&
4L1!++@(�����*C�}<�M��/��H]L�G�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv1C��**�HZ+�������1�&
4L1!+,@Z+�����*C�}<�M��/��H]L�H�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�8M�**�I�D�������1�&
4L-!++@�D�����*C�}<�M��/��H]L�I�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profilesicro�**�JRΐ������1�&
4L-!+,@Rΐ����*C�}<�M��/��H]L�J�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profilesicro�**�Kꐓ������1�&
4L-!++@ꐓ����*C�}<�M��/��H]L�K�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClienticro�**�Lu��������1�&
4L-!+,@u������*C�}<�M��/��H]L�L�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClienticro�**�M���������1�&
4L-!++@�������*C�}<�M��/��H]L�M�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClienticro�**�NbՓ������1�&
4L-!+,@bՓ����*C�}<�M��/��H]L�N�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientsoft�**�O�֓������1�&
4L+!++@�֓����*C�}<�M��/��H]L�O�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvt�**�P�h�������1�&
4L+!+,@�h�����*C�}<�M��/��H]L�P�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvt�**�Q������1�&
4L%!++@����*C�}<�M��/��H]L�Q�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Senssoft�**�RZ������1�&
4L%!+,@ZŘ����*C�}<�M��/��H]L�R�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Senssoft�**�S��������1�&
4L1!++@������*C�}<�M��/��H]L�S�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvin�**�T��������1�&
4L1!+,@������*C�}<�M��/��H]L�T�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvin�**�UL��������1�&
4L-!++@L������*C�}<�M��/��H]L�U�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient-Win�**�V$�������1�&
4L-!+,@$�����*C�}<�M��/��H]L�V�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient-Win�**�W��������1�&
4L%!++@������*C�}<�M��/��H]L�W�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Senssoft�**�X��������1�&
4L%!+,@������*C�}<�M��/��H]L�X�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sensicro�**�Y��������1�&
4L+!++@������*C�}<�M��/��H]L�Y�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvt�**�Z0�������1�&
4L+!+,@0�����P�a�UL�Z�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvs�**�[�d������1�&
4L-!++@�d���������V,�[Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient-Win�**�\�#d������1�&
4L-!+,@�#d���������V,�\Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient-Win�**x]5d������1�&
4L+!++@5d���������V,�]Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvMx**x^{7d������1�&
4L+!+,@{7d���������V,�^Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvox**`_�������1�&
4L! @����������V,�_Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L�A`**h`�������1�&
4L! @����������V,�`Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q1C��_kh**�ac������1�&
4L1!++@c����*C�}<�M��/��H],�a�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv_k�**�b�������1�&
4L1!+,@�����*C�}<�M��/��H],�b�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv_k�**�c�5������1�&
4L-!++@�5����*C�}<�M��/��H],�c�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�A��_k�**�d��*������1�&
4L-!+,@��*����*C�}<�M��/��H],�d�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�A��_k�**�e��-������1�&
4L-!++@��-����*C�}<�M��/��H],�e�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�A��_k�**�fͿ-������1�&
4L-!+,@Ϳ-����*C�}<�M��/��H],�f�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�A��_k�**�g��-������1�&
4L-!++@��-����*C�}<�M��/��H],�g�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�A��_k�**�h��-������1�&
4L-!+,@��-����*C�}<�M��/��H],�h�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�A��_k�**�iv�-������1�&
4L+!++@v�-����*C�}<�M��/��H],�i�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�j&�2������1�&
4L+!+,@&�2����*C�}<�M��/��H],�j�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�k�2������1�&
4L%!++@�2����*C�}<�M��/��H],�k�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens=!�**�l�"3������1�&
4L%!+,@�"3����*C�}<�M��/��H],�l�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
SensL�**�mv;������1�&
4L1!++@v;����*C�}<�M��/��H],�m�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvL�**�n�z;������1�&
4L1!+,@�z;����*C�}<�M��/��H],�n�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvL�**�oxj>������1�&
4L-!++@xj>����*C�}<�M��/��H],�o�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientL�**�p
q>������1�&
4L-!+,@
q>����*C�}<�M��/��H],�p�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientL�**�qJs>������1�&
4L%!++@Js>����*C�}<�M��/��H],�q�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens4�**�r��>������1�&
4L%!+,@��>����*C�}<�M��/��H],�r�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens+!�**�s��>������1�&
4L+!++@��>����*C�}<�M��/��H],�s�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvJ�**�t8�>������1�&
4L+!+,@8�>����P�a�U,�t�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�uN�m������1�&
4L-!++@N�m����������T�uMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientL�**�v]�m������1�&
4L-!+,@]�m����������T�vMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**xw�m������1�&
4L+!++@�m����������T�wMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**xx��m������1�&
4L+!+,@��m����������T�xMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**`y�������1�&
4L! @�����������T�yMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L�A`**hzz+������1�&
4L! @z+����������T�zMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q1CTrh**�{�S������1�&
4L1!++@�S����*C�}<�M��/��H]T�{�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvTr�**�|�V������1�&
4L1!+,@�V����*C�}<�M��/��H]T�|�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvGP�**�}�s������1�&
4L-!++@�s����*C�}<�M��/��H]T�}�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profilesnt�**�~��������1�&
4L-!+,@������*C�}<�M��/��H]T�~�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles��**�f?������1�&
4L-!++@f?����*C�}<�M��/��H]T��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient��1�&�**��Q������1�&
4L-!+,@Q����*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**���r������1�&
4L-!++@�r����*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient+�**��0�������1�&
4L-!+,@0�����*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient,�**��
�������1�&
4L+!++@
�����*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**���������1�&
4L+!+,@�����*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��[�������1�&
4L%!++@[�����*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens4�**����������1�&
4L%!+,@������*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��L������1�&
4L1!++@L����*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**��Q������1�&
4L1!+,@Q����*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**���������1�&
4L-!++@�����*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**���#������1�&
4L-!+,@�#����*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient4�**��{%������1�&
4L%!++@{%����*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens4�**���5������1�&
4L%!+,@�5����*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens4�**���7������1�&
4L+!++@�7����*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��
H������1�&
4L+!+,@
H����P�a�UT���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��V�mC����1�&
4L-!++@V�mC��������T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient�**����mC����1�&
4L-!+,@��mC��������T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient�**����mC����1�&
4L-!++@��mC��������T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient�**���0nC����1�&
4L-!+,@�0nC��������T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient4�**��2nC����1�&
4L+!++@2nC��������T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
TermSrv�**��7AnC����1�&
4L+!+,@7AnC��������T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
TermSrv�**��ے�C����1�&
4L%!++@ے�C��������T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens4�**���p�C����1�&
4L%!+,@�p�C��������T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�����C����1�&
4L+!++@���C��������T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��یC����1�&
4L+!+,@یC��P�a�UT���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��z�C����1�&
4L-!++@z�C��P�a�UT���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�����C����1�&
4L-!+,@���C��P�a�UT���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��/�C����1�&
4L-!++@/�C��P�a�UT���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**��3�C����1�&
4L-!+,@3�C��������T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles4�**���	�C����1�&
4L1!++@�	�C��������T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvL�**���H�C����1�&
4L1!+,@�H�C��������T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**x���C����1�&
4L+!++@��C��������T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**x��6�C����1�&
4L+!+,@�6�C��������T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**����n����1�&
4L=!++@��n����@(��TX	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�����o����1�&
4L=!+,@���o����@(��TX	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**���ZIp����1�&
4L=!++@�ZIp����@(��TX	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�����p����1�&
4L=!+,@���p�����j�L��j��TX	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�����p����1�&
4L=!++@���p�����j�L��j��TX	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**����}q����1�&
4L=!+,@��}q����@(��TX	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller4�**���~q����1�&
4L=!++@�~q����@(��TX	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller+�**���Vr����1�&
4L=!+,@�Vr�����j����j��TX	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller,�@.��)���(�`$X��1�&
4L��|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�ElfChnk�H�H� �������![���B=�����f?�m�MF���;):**���fr����1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
4L�!++@�fr�����j����j��TX	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c����c�����X�څ��������D�	EventDataA��3B��oData=Event
A��3B%=SubscriberName
"TrustedInstaller�**��ػ�r����1�&
4L=!+,@ػ�r�����j����j��TX	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerj�**��(̲r����1�&
4L=!++@(̲r�����j����j��TX	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**���QKs����1�&
4L=!+,@�QKs��0��[e���TX	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**���bKs����1�&
4L=!++@�bKs��0��[e���TX	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**��b>�s����1�&
4L=!+,@b>�s����*L�>�
TX	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**��"P�s����1�&
4L=!++@"P�s����*L�>�
TX	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**���}t����1�&
4L=!+,@�}t�����j�Z��j��TX	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**��O,}t����1�&
4L=!++@O,}t�����j�Z��j��TX	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**����u����1�&
4L=!+,@��u�����j�Z��j��TX	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**��t�u����1�&
4L=!++@t�u�����j�Z��j��TX	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**���<�{����1�&
4L=!+,@�<�{�����j�Z��j��TX	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**���U�{����1�&
4L=!++@�U�{�����j�Z��j��TX	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**����|�����1�&
4L=!+,@��|�����@(��TX	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**���}�����1�&
4L=!++@�}�����@(��TX	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**��B]�����1�&
4L=!+,@B]������j����j��TX	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**x���]�����1�&
4L+!++@��]������j����j��TX	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvsx**x�\�^�����1�&
4L+!+,@\�^������j����j��TX	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**��xҘ����1�&
4L=!++@xҘ����j��d��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller"�**��$}�����1�&
4L=!+,@$}�����[����[���d��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��|㽙����1�&
4L=!++@|㽙���Pnp$`d��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerv�**����V�����1�&
4L=!+,@��V�����[����[���d��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerer�**��O�V�����1�&
4L=!++@O�V�����[����[���d��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerer�**���������1�&
4L=!+,@�������j��d��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerer�**��L������1�&
4L=!++@L������j��d��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerer�**��'b������1�&
4L=!+,@'b������[��
��[���d��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerer�**��2q������1�&
4L=!++@2q������[��
��[���d��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerer�**��?�ޟ����1�&
4L=!+,@?�ޟ����[��
��[���d��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��**��P�ޟ����1�&
4L-!++@P�ޟ����[��
��[���d��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClienttall�**��Z�ޟ����1�&
4L-!+,@Z�ޟ����[��
��[���d��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientClie�**x��ޟ����1�&
4L+!++@�ޟ����[��
��[���d��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvPx**x��Dߟ����1�&
4L+!+,@�Dߟ����[��
��[���d��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**��߬c
j����1�&
4L9! @߬c
j����j��d��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L):�LNc�T�� �����Sr�**��=�g
j����1�&
4Lu! @=�g
j��0� LH�!d��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�;&��8Q�@X�ٌ�
7F��:A��-B=Win32Status
�**����i
j����1�&
4L1!++@��i
j��*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**����i
j����1�&
4L1!+,@��i
j��*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv4�**��M�i
j����1�&
4L-!++@M�i
j��*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**����q
j����1�&
4L-!+,@��q
j��*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles @`�**��Kt
j����1�&
4L-!++@Kt
j��*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��t
j����1�&
4L-!+,@t
j��*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**���.t
j����1�&
4L-!++@�.t
j��*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��iFt
j����1�&
4L-!+,@iFt
j��*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**���Gt
j����1�&
4L+!++@�Gt
j��*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**���u
j����1�&
4L+!+,@�u
j��*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��BDu
j����1�&
4L%!++@BDu
j��*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**����u
j����1�&
4L%!+,@��u
j��*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**���}
j����1�&
4L1!++@�}
j��*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**����}
j����1�&
4L1!+,@��}
j��*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**����
j����1�&
4L-!++@��
j��*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**����
j����1�&
4L-!+,@��
j��*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��\�
j����1�&
4L%!++@\�
j��*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��;�
j����1�&
4L%!+,@;�
j��*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��D�
j����1�&
4L+!++@D�
j��*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��[�
j����1�&
4L+!+,@[�
j��P�a�Ud���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��r(t}����1�&
4L-!++@r(t}����j��d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient�**����(t}����1�&
4L-!+,@��(t}����j��d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient�**��~�(t}����1�&
4L-!++@~�(t}����j��d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient�**����(t}����1�&
4L-!+,@��(t}����j��d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient�**��z�(t}����1�&
4L+!++@z�(t}����j��d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
TermSrv�**����(t}����1�&
4L+!+,@��(t}����j��d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
TermSrv�**����Kt}����1�&
4L%!++@��Kt}����j��d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens @QN�**����Mt}����1�&
4L%!+,@��Mt}����j��d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��2JNt}����1�&
4L+!++@2JNt}����j��d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvc�**��mNt}����1�&
4L+!+,@mNt}��P�a�Ud���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**���zNt}����1�&
4L-!++@�zNt}��P�a�Ud���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient>��Gd�**��/�Nt}����1�&
4L-!+,@/�Nt}��P�a�Ud���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient>��Gd�**��։Nt}����1�&
4L-!++@։Nt}��P�a�Ud���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles>��Gd�**��1Qt}����1�&
4L-!+,@1Qt}����j��d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles>��Gd�**��qQt}����1�&
4L1!++@qQt}����j��d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvGd�**���Qt}����1�&
4L1!+,@�Qt}����j��d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvGd�**x�@�ct}����1�&
4L+!++@@�ct}��0� �x-�;d��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**x�گct}����1�&
4L+!+,@گct}��0� �x-�;d��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**���_��}����1�&
4L=!++@�_��}����@��T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�Q�**���
4�}����1�&
4L=!+,@�
4�}��Aړ}��Cړ}��T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��Wԙ}����1�&
4L=!++@Wԙ}�����`�qQT��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��ckm�}����1�&
4L=!+,@ckm�}����@��T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**����m�}����1�&
4L=!++@��m�}����@��T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��7��}����1�&
4L=!+,@7��}���C5�/�
T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��5�}����1�&
4L=!++@5�}���C5�/�
T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**���碛}����1�&
4L=!+,@�碛}��0��{�9`P
T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�[�l��**�����}����1�&
4L=!++@���}��0��{�9`P
T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller>��Gd�**���8=�}����1�&
4L=!+,@�8=�}��0��pc��T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerMic�**��\L=�}����1�&
4L=!++@\L=�}��0��pc��T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerindo�**���؜}����1�&
4L=!+,@�؜}��Aړ}��Fړ}��T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerinlo�**���:؜}����1�&
4L=!++@�:؜}��Aړ}��Fړ}��T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller���|1C��**��صr�}����1�&
4L=!+,@صr�}��Aړ}��Fړ}��T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallersoft�**��I�r�}����1�&
4L=!++@I�r�}��Aړ}��Fړ}��T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller-Win�**��k�}����1�&
4L=!+,@�k�}��Aړ}��Fړ}��T�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller1C�**����}����1�&
4L=!++@���}��Aړ}��Fړ}��T�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerssio�**��
��}����1�&
4L=!+,@�
��}��Aړ}��Fړ}��T�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerssio�**�K(��}����1�&
4L=!++@K(��}��Aړ}��Fړ}��T�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerofil�**�_o�}����1�&
4L=!+,@_o�}��Aړ}��Fړ}��T�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerofil�**�t>o�}����1�&
4L=!++@t>o�}��Aړ}��Fړ}��T�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerClie�**�	���}����1�&
4L=!+,@	���}����@��T�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerClie�**��͠�}����1�&
4L=!++@�͠�}����@��T�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerClie�**��Mt�}����1�&
4L=!+,@�Mt�}����@��T�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerClie�**x	�@u�}����1�&
4L+!++@�@u�}����@��T�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**x
8�u�}����1�&
4L+!+,@8�u�}����@��T�
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvax**���}����1�&
4L=!++@��}�����V��d�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerl�c��**�����}����1�&
4L=!+,@����}��-k��}�
n��}��d�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��**�
e��}����1�&
4L=!++@e��}��-k��}�o��}��d�
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��S��}����1�&
4L=!+,@�S��}��-k��}�>p��}��d�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��n��}����1�&
4L=!++@�n��}��-k��}�>p��}��d�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��:�}����1�&
4L=!+,@�:�}��-k��}�>p��}��d�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**���:�}����1�&
4L=!++@��:�}��-k��}�>p��}��d�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller
�**��`	�}����1�&
4L=!+,@�`	�}��-k��}��n��}��d�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerSe�**��	�}����1�&
4L-!++@�	�}��-k��}��n��}��d�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**���	�}����1�&
4L-!+,@��	�}��-k��}��n��}��d�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient��**x��	�}����1�&
4L+!++@��	�}��-k��}��n��}��d�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**x�
�}����1�&
4L+!+,@�
�}��-k��}��n��}��d�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�x**`(�t.����1�&
4L! @(�t.�����V��d�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L):ogo`**hυy.����1�&
4L! @υy.�����V��d�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�;owsh**�1�{.����1�&
4L1!++@1�{.��*C�}<�M��/��H]d��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvOp�**���{.����1�&
4L1!+,@��{.��*C�}<�M��/��H]d��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvTr�**���{.����1�&
4L-!++@��{.��*C�}<�M��/��H]d��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���ProfilesTr�**��.����1�&
4L-!+,@�.��*C�}<�M��/��H]d��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���ProfilesGP�**���.����1�&
4L-!++@��.��*C�}<�M��/��H]d��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientnt�**�d�.����1�&
4L-!+,@d�.��*C�}<�M��/��H]d��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient��**����.����1�&
4L-!++@���.��*C�}<�M��/��H]d��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient��1�&�**� �.����1�&
4L-!+,@�.��*C�}<�M��/��H]d� �[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�!��.����1�&
4L+!++@��.��*C�}<�M��/��H]d�!�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�"�̈.����1�&
4L+!+,@�̈.��*C�}<�M��/��H]d�"�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrve�**�#��.����1�&
4L%!++@��.��*C�}<�M��/��H]d�#�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
SensTe�**�$�S�.����1�&
4L%!+,@�S�.��*C�}<�M��/��H]d�$�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
SensTe�**�%%Ɣ.����1�&
4L1!++@%Ɣ.��*C�}<�M��/��H]d�%�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�&�ʔ.����1�&
4L1!+,@�ʔ.��*C�}<�M��/��H]d�&�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�'(��.����1�&
4L-!++@(��.��*C�}<�M��/��H]d�'�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�(��.����1�&
4L-!+,@��.��*C�}<�M��/��H]d�(�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�)��.����1�&
4L%!++@��.��*C�}<�M��/��H]d�)�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sensnt�**�*��.����1�&
4L%!+,@��.��*C�}<�M��/��H]d�*�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
SensClie�**�+��.����1�&
4L+!++@��.��*C�}<�M��/��H]d�+�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrve�**�,(�.����1�&
4L+!+,@(�.��P�a�Ud�,�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrve�**�-I$ή����1�&
4L%!++@I$ή�����V��d�-�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
SensTe�**�.�N����1�&
4L%!+,@�Nή�����V��d�.�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
SensTe�**�/�Q����1�&
4L+!++@�Qή�����V��d�/�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvP�**�0\�ή����1�&
4L+!+,@\�ή�����V��d�0�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�1�
Ѯ����1�&
4L%!++@�
Ѯ�����V��d�1�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens��**�2�Ѯ����1�&
4L%!+,@�Ѯ�����V��d�2�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sensl�c��**�3!Ѯ����1�&
4L+!++@!Ѯ�����V��d�3�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrva�**�4�Ѯ����1�&
4L+!+,@�Ѯ�����V��d�4�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrva�**�5��⋎����1�&
4L-!++@��⋎�����V��d�5�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClientl�c��**�6^�⋎����1�&
4L-!+,@^�⋎�����V��d�6�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient��**�7��⋎����1�&
4L-!++@��⋎�����V��d�7�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient�**�8�䋎����1�&
4L-!+,@�䋎�����V��d�8�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClientTe�**�9{�䋎����1�&
4L+!++@{�䋎�����V��d�9�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
TermSrvP�**�:�䋎����1�&
4L+!+,@�䋎�����V��d�:�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
TermSrv�**�;�m������1�&
4L%!++@�m�������V��d�;�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens��**�<��������1�&
4L%!+,@���������V��d�<�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sensl�c��**�=�=
������1�&
4L+!++@�=
�������V��d�=�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrva�**�>V�������1�&
4L+!+,@V�����P�a�Ud�>�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvt�**�?��������1�&
4L-!++@������P�a�Ud�?�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientl�c��**�@��������1�&
4L-!+,@������P�a�Ud�@�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientTe�**�A%�������1�&
4L-!++@%�����P�a�Ud�A�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profilestall�**�B��������1�&
4L-!+,@������0�!��T#�d�B�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profilestall�**�C �������1�&
4L1!++@ �����0�!��T#�d�C�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvll�**�D)�������1�&
4L1!+,@)�����0�!��T#�d�D�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvll�**xE��"������1�&
4L+!++@��"����0�!��T#�d�EMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvrx**xF_^#������1�&
4L+!+,@_^#����0�!��T#�d�FMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�x**�G�J������1�&
4L=!++@�J��������QPGMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerl�c��**�H��������1�&
4L=!+,@������C,H���e,H����PHMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerl�c��"Trus��1�&
4L++@w;�����0��L�� PIMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��ElfChnkI�I��`��Sn"����f��B=�����f?�m�MF��E�C**�Iw;�������1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
4L�!++@w;�����0��L�� PIMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c����c�����X�څ��������D�	EventDataA��3B��oData=Event
A��3B%=SubscriberName
"TrustedInstaller�**�J�E1������1�&
4L=!+,@�E1�����O�A(0pPJMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerj�**�K�i1������1�&
4L=!++@�i1�����O�A(0pPKMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**�LI>˽�����1�&
4L=!+,@I>˽���0���Ѡ4�PLMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**�M	m˽�����1�&
4L=!++@	m˽���0���Ѡ4�PMMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**�N�Ae������1�&
4L=!+,@�Ae����0�@3�|$$PNMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**�O�Pe������1�&
4L=!++@�Pe����0�@3�|$$POMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**�Ph��������1�&
4L=!+,@h��������b�
YH�1�D��PPMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**�QE��������1�&
4L=!++@E��������b�
YH�1�D��PQMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**�Rx��������1�&
4L=!+,@x��������b�
YH�1�D��PRMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**�Sձ�������1�&
4L=!++@ձ�������b�
YH�1�D��PSMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**�TdD5������1�&
4L=!+,@dD5����C,H����1H����PTMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**�U�U5������1�&
4L=!++@�U5����C,H����1H����PUMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**�V�������1�&
4L=!+,@�����C,H����0H����PVMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**�W.*������1�&
4L=!++@.*����C,H����0H����PWMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**�X�ϨȎ����1�&
4L=!+,@�ϨȎ��C,H����0H����PXMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**�Y��Ȏ����1�&
4L=!++@��Ȏ��C,H����0H����PYMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller\�^��**�Z왧ˎ����1�&
4L=!+,@왧ˎ��C,H����0H����PZMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�[t��ˎ����1�&
4L=!++@t��ˎ��C,H����0H����P[Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�\iO�ώ����1�&
4L=!+,@iO�ώ������QP\Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�]B^�ώ����1�&
4L=!++@B^�ώ������QP]Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�^%�׎����1�&
4L=!+,@%�׎������QP^Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**x_���׎����1�&
4L+!++@���׎������QP_Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�x**x`��׎����1�&
4L+!+,@��׎������QP`Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**�a������1�&
4L=!++@�������k��`�aMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerer�**�b_d�����1�&
4L=!+,@_d����ė��ŗ��`�bMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerer�**�c������1�&
4L=!++@�����ė��ŗ��`�cMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerer�**�d��s����1�&
4L=!+,@��s�����k��`�dMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��**�e�	t����1�&
4L=!++@�	t�����k��`�eMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��**�f�����1�&
4L=!+,@����Ofp6e+�`�fMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller���**�g(����1�&
4L=!++@(���Ofp6e+�`�gMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�h������1�&
4L=!+,@�����ė�&ʗ��`�hMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�i������1�&
4L=!++@�����ė�&ʗ��`�iMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�jj�������1�&
4L=!+,@j�����0���`�8�`�jMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller���**�k�������1�&
4L-!++@�����0���`�8�`�kMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient��**�l3�������1�&
4L-!+,@3�����0���`�8�`�lMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient4�**xm�������1�&
4L+!++@�����0���`�8�`�mMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvrx**xn�v������1�&
4L+!+,@�v����0���`�8�`�nMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�x**�o�a#����1�&
4L9! @�a#�����k��`�oMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L�C�LNc�T�� �����na�**�p��%#����1�&
4Lu! @��%#�����k��`�pMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8QE&��8Q�@X�ٌ�
7F��:A��-B=Win32Status
�**�qN(#����1�&
4L1!++@N(#��*C�}<�M��/��H]`�q�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�r�(#����1�&
4L1!+,@�(#��*C�}<�M��/��H]`�r�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�s� (#����1�&
4L-!++@� (#��*C�}<�M��/��H]`�s�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles**�**�t7j3#����1�&
4L-!+,@7j3#��*C�}<�M��/��H]`�t�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles��**�u`76#����1�&
4L-!++@`76#��*C�}<�M��/��H]`�u�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient��u
�**�v.86#����1�&
4L-!+,@.86#��*C�}<�M��/��H]`�v�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient���**�w\6#����1�&
4L-!++@\6#��*C�}<�M��/��H]`�w�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient���**�x�x6#����1�&
4L-!+,@�x6#��*C�}<�M��/��H]`�x�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient���**�y�z6#����1�&
4L+!++@�z6#��*C�}<�M��/��H]`�y�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv
�**�z��7#����1�&
4L+!+,@��7#��*C�}<�M��/��H]`�z�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�{��7#����1�&
4L%!++@��7#��*C�}<�M��/��H]`�{�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens��**�|r�8#����1�&
4L%!+,@r�8#��*C�}<�M��/��H]`�|�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens��**�}>SB#����1�&
4L1!++@>SB#��*C�}<�M��/��H]`�}�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�
�**�~�WB#����1�&
4L1!+,@�WB#��*C�}<�M��/��H]`�~�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**���C#����1�&
4L-!++@��C#��*C�}<�M��/��H]`��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient���**����C#����1�&
4L-!+,@��C#��*C�}<�M��/��H]`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient���**��H�C#����1�&
4L%!++@H�C#��*C�}<�M��/��H]`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens��(t�**��4�C#����1�&
4L%!+,@4�C#��*C�}<�M��/��H]`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens��**����C#����1�&
4L+!++@��C#��*C�}<�M��/��H]`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**����C#����1�&
4L+!+,@��C#�����cl�K����:�`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**���&�3����1�&
4L-!++@�&�3��0��k��`$�O`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient��Mt�**���(�3����1�&
4L-!+,@�(�3��0��k��`$�O`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient���**���G�3����1�&
4L-!++@�G�3��0��k��`$�O`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient��1�&�**��5
�3����1�&
4L-!+,@5
�3��0��k��`$�O`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient�**����3����1�&
4L+!++@��3��0��k��`$�O`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
TermSrv�**��k��3����1�&
4L+!+,@k��3��0��k��`$�O`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
TermSrv�**���ۼ3����1�&
4L%!++@�ۼ3�����k��`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens1Qt�**��2(�3����1�&
4L%!+,@2(�3�����k��`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens��**�����3����1�&
4L+!++@���3�����k��`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**����3����1�&
4L+!+,@��3�����cl�K����:�`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**����3����1�&
4L-!++@��3�����cl�K����:�`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientگct�**���c�3����1�&
4L-!+,@�c�3�����cl�K����:�`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��Fg�3����1�&
4L-!++@Fg�3�����cl�K����:�`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**���W�3����1�&
4L-!+,@�W�3���ė��j���`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**��\Z�3����1�&
4L1!++@\Z�3���ė��j���`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**��$�3����1�&
4L1!+,@$�3���ė��j���`���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**x��b�3����1�&
4L+!++@�b�3���ė��j���`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�x**x����3����1�&
4L+!+,@���3���ė��j���`��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**���.RU����1�&
4L=!++@�.RU����em�$P��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��6��U����1�&
4L=!+,@6��U��,�4P�	f�4P��P��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�[�l��**�����V����1�&
4L=!++@���V��,�4P�x�4P��P��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller>��Gd�**��z�DW����1�&
4L=!+,@z�DW��,�4P���4P��P��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerMic�**��J�DW����1�&
4L=!++@J�DW��,�4P���4P��P��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerindo�**���]�W����1�&
4L=!+,@�]�W��,�4P�3�4P��P��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerinlo�**���y�W����1�&
4L=!++@�y�W��,�4P�3�4P��P��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller���|1C��**���,zX����1�&
4L=!+,@�,zX��,�4P�x�4P��P��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallersoft�**��\;zX����1�&
4L=!++@\;zX��,�4P�x�4P��P��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller-Win�**����Y����1�&
4L=!+,@��Y��,�4P���4P��P��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller1C�**����Y����1�&
4L=!++@��Y��,�4P���4P��P��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerssio�**���̮Y����1�&
4L=!+,@�̮Y��,�4P���4P��P��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerssio�**���ۮY����1�&
4L=!++@�ۮY��,�4P���4P��P��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerofil�**��-:IZ����1�&
4L=!+,@-:IZ��,�4P���4P��P��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerofil�**���SIZ����1�&
4L=!++@�SIZ��,�4P���4P��P��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerClie�**�����Z����1�&
4L=!+,@���Z��,�4P���4P��P��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerClie�**��3��Z����1�&
4L=!++@3��Z��,�4P���4P��P��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerClie�**����N]����1�&
4L=!+,@��N]��,�4P�x�4P��P��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerClie�**���O]����1�&
4L=!++@�O]��,�4P�x�4P��P��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller8�u��**��
d����1�&
4L=!+,@
d���O)nk�P��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**x���
d����1�&
4L+!++@��
d���O)nk�P��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�x**x�%�
d����1�&
4L+!+,@%�
d���O)nk�P��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**���,�x����1�&
4L=!++@�,�x����8P�;T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��^�y����1�&
4L=!+,@^�y���/mt�3mt��T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**����y����1�&
4L=!++@��y���/mt�P3mt��T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��Z�rz����1�&
4L=!+,@Z�rz���0��u��T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**����rz����1�&
4L=!++@��rz���0��u��T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller
�**���"
{����1�&
4L=!+,@�"
{����8P�;T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerSe�**���1
{����1�&
4L=!++@�1
{����8P�;T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��u��{����1�&
4L=!+,@u��{���O�T"�.hT��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller���**��WХ{����1�&
4L=!++@WХ{���O�T"�.hT��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��������1�&
4L=!+,@�����/mt�P4mt��T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**���������1�&
4L-!++@������/mt�P4mt��T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientL�**���������1�&
4L-!+,@������/mt�P4mt��T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient@1��**x�z������1�&
4L+!++@z�����/mt�P4mt��T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**x��m�����1�&
4L+!+,@�m����/mt�P4mt��T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**`�|Kt]���1�&
4L! @|Kt]���8P�;T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L�C�1�&`**h�y�x]���1�&
4L! @y�x]���8P�;T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8QEGPh**����z]���1�&
4L1!++@��z]�*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**��_�z]���1�&
4L1!+,@_�z]�*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**���z]���1�&
4L-!++@�z]�*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles��1�&�**��>J�]���1�&
4L-!+,@>J�]�*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**��_ׅ]���1�&
4L-!++@_ׅ]�*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient**�**���م]���1�&
4L-!+,@�م]�*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient#�**��z�]���1�&
4L-!++@z�]�*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�S�.�**��t�]���1�&
4L-!+,@t�]�*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient���**��c�]���1�&
4L+!++@c�]�*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv.�**����]���1�&
4L+!+,@��]�*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��� �]���1�&
4L%!++@� �]�*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens**�**��⷇]���1�&
4L%!+,@⷇]�*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**���]���1�&
4L1!++@�]�*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv*�**��3��]���1�&
4L1!+,@3��]�*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**��7��]���1�&
4L-!++@7��]�*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient(�.�**��3��]���1�&
4L-!+,@3��]�*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient���**����]���1�&
4L%!++@��]�*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens���**����]���1�&
4L%!+,@��]�*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens���**���’]���1�&
4L+!++@�’]�*C�}<�M��/��H]T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��Ӓ]���1�&
4L+!+,@Ӓ]����
�L�
���T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�����c^���1�&
4L-!++@���c^���8P�;T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient��1�&�**��V��c^���1�&
4L-!+,@V��c^���8P�;T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient�**��$��c^���1�&
4L-!++@$��c^���8P�;T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient�**��;1�c^���1�&
4L-!+,@;1�c^���8P�;T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient�**���2�c^���1�&
4L+!++@�2�c^���8P�;T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
TermSrv�**����c^���1�&
4L+!+,@��c^���8P�;T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
TermSrv�**���d�c^���1�&
4L%!++@�d�c^���8P�;T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens��1�&�**��e�c^���1�&
4L%!+,@e�c^���8P�;T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens���**��\��c^���1�&
4L+!++@\��c^���8P�;T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��q�c^���1�&
4L+!+,@q�c^����
�L�
���T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**���(�c^���1�&
4L-!++@�(�c^����
�L�
���T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient��1�&�**����c^���1�&
4L-!+,@��c^����
�L�
���T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��p�c^���1�&
4L-!++@p�c^����
�L�
���T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**��dd^���1�&
4L-!+,@dd^���8P�;T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**��d^���1�&
4L1!++@d^���8P�;T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**����d^���1�&
4L1!+,@��d^���8P�;T���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**x�dBd^���1�&
4L+!++@dBd^���8P�;T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**x�՜d^���1�&
4L+!+,@՜d^���8P�;T��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**�����^���1�&
4L=!++@���^������(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerD�**��;<��^���1�&
4L=!+,@;<��^��4�^'�4�^�(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerE�**��R#�^���1�&
4L=!++@R#�^������(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**��$���^���1�&
4L=!+,@$���^�0��C��t(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**���ǻ�^���1�&
4L=!++@�ǻ�^�0��C��t(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**����U�^���1�&
4L=!+,@��U�^�P�p1(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�
��1�&
4LMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��ElfChnk�������H���Fx)���B=�����f?�m�MF���;):**����U�^���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
4L�!++@��U�^�P�p1(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c����c�����X�څ��������D�	EventDataA��3B��oData=Event
A��3B%=SubscriberName
"TrustedInstaller�**����^���1�&
4L=!+,@��^�0�@�N��(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerj�**����^���1�&
4L=!++@��^�0�@�N��(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**���ӊ�^���1�&
4L=!+,@�ӊ�^�hb��B���B�h(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**��Cꊨ^���1�&
4L=!++@Cꊨ^�hb��B���B�h(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**��g�$�^���1�&
4L=!+,@g�$�^�P�[�=(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**���$�^���1�&
4L=!++@�$�^�P�[�=(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**���#��^���1�&
4L=!+,@�#��^������(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**��4��^���1�&
4L=!++@4��^������(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**����Y�^���1�&
4L=!+,@��Y�^������(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**��5�Y�^���1�&
4L=!++@5�Y�^������(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**��Wy�^���1�&
4L=!+,@Wy�^�P�yMI(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**����^���1�&
4L=!++@��^�P�yMI(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**����^���1�&
4L=!+,@��^�P���(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**����^���1�&
4L=!++@��^�P���(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**��-���^���1�&
4L=!+,@-���^������(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**��}���^���1�&
4L=!++@}���^������(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller\�^��**�����^���1�&
4L=!+,@���^�0���o��
!(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**x����^���1�&
4L+!++@���^�0���o��
!(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvsx**x�K���^���1�&
4L+!+,@K���^�0���o��
!(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**���1��^���1�&
4L=!++@�1��^���T<��\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller"�**���q��^���1�&
4L=!+,@�q��^�����^Ƨ��^�\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller"�**����^���1�&
4L=!++@��^�����^��^�\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**����^���1�&
4L=!+,@���^��X�GX\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerv�**��%��^���1�&
4L=!++@�%��^��X�GX\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerer�**����^���1�&
4L=!+,@���^�0�P�P\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerer�**�3��^���1�&
4L=!++@3��^�0�P�P\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerer�**���^���1�&
4L=!+,@��^�Pt@e�?�\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��**����^���1�&
4L-!++@���^�Pt@e�?�\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClienttall�**����^���1�&
4L-!+,@���^�Pt@e�?�\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientuste�**x���^���1�&
4L+!++@���^�Pt@e�?�\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**x�o��^���1�&
4L+!+,@�o��^�Pt@e�?�\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvtx**�	��"����1�&
4L9! @��"����T<��\�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L):�LNc�T�� �����Op�**�
�"����1�&
4Lu! @�"����T<��\�
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�;&��8Q�@X�ٌ�
7F��:A��-B=Win32Status
uste�**�9١"����1�&
4L1!++@9١"��*C�}<�M��/��H]\��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvie�**��ܡ"����1�&
4L1!+,@�ܡ"��*C�}<�M��/��H]\��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv4�**�
���"����1�&
4L-!++@���"��*C�}<�M��/��H]\�
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�v��**���"����1�&
4L-!+,@��"��*C�}<�M��/��H]\��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**�^��"����1�&
4L-!++@^��"��*C�}<�M��/��H]\��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�*��"����1�&
4L-!+,@*��"��*C�}<�M��/��H]\��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**����"����1�&
4L-!++@���"��*C�}<�M��/��H]\��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��г"����1�&
4L-!+,@�г"��*C�}<�M��/��H]\��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�Uҳ"����1�&
4L+!++@Uҳ"��*C�}<�M��/��H]\��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�`��"����1�&
4L+!+,@`��"��*C�}<�M��/��H]\��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvl�**��ش"����1�&
4L%!++@�ش"��*C�}<�M��/��H]\��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
SensGP�**�7�"����1�&
4L%!+,@7�"��*C�}<�M��/��H]\��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��"�"����1�&
4L1!++@�"�"��*C�}<�M��/��H]\��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�F'�"����1�&
4L1!+,@F'�"��*C�}<�M��/��H]\��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**���"����1�&
4L-!++@��"��*C�}<�M��/��H]\��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**���"����1�&
4L-!+,@��"��*C�}<�M��/��H]\��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientTe�**�[�"����1�&
4L%!++@[�"��*C�}<�M��/��H]\��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
SensSe�**���"����1�&
4L%!+,@��"��*C�}<�M��/��H]\��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
SensSe�**���"����1�&
4L+!++@��"��*C�}<�M��/��H]\��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrve�**���"����1�&
4L+!+,@��"��:€�+yC�N%"ϟ\��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�nd	Z���1�&
4L-!++@nd	Z����N�e(�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientl�c��**� Zg	Z���1�&
4L-!+,@Zg	Z����N�e(� Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClienterat�**x!@u	Z���1�&
4L+!++@@u	Z����N�e(�!Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvnx**x"Zx	Z���1�&
4L+!+,@Zx	Z����N�e(�"Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvnx**`#O-~5W���1�&
4L! @O-~5W����N�e(�#Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L):on�`**h$��5W���1�&
4L! @��5W����N�e(�$Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�;t-Wh**�%7�5W���1�&
4L1!++@7�5W�*C�}<�M��/��H](�%�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvdo�**�&� �5W���1�&
4L1!+,@� �5W�*C�}<�M��/��H](�&�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvdo�**�'�:�5W���1�&
4L-!++@�:�5W�*C�}<�M��/��H](�'�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profilesindo�**�(ލ5W���1�&
4L-!+,@ލ5W�*C�}<�M��/��H](�(�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profilesindo�**�)o��5W���1�&
4L-!++@o��5W�*C�}<�M��/��H](�)�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientindo�**�*�Ԑ5W���1�&
4L-!+,@�Ԑ5W�*C�}<�M��/��H](�*�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientws-W�**�+2�5W���1�&
4L-!++@2�5W�*C�}<�M��/��H](�+�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientinlo�**�,��5W���1�&
4L-!+,@��5W�*C�}<�M��/��H](�,�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientgon��**�-~�5W���1�&
4L+!++@~�5W�*C�}<�M��/��H](�-�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv��**�.ݏ�5W���1�&
4L+!+,@ݏ�5W�*C�}<�M��/��H](�.�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv��**�/ ��5W���1�&
4L%!++@ ��5W�*C�}<�M��/��H](�/�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sensgon��**�0���5W���1�&
4L%!+,@���5W�*C�}<�M��/��H](�0�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sensinlo�**�1,&�5W���1�&
4L1!++@,&�5W�*C�}<�M��/��H](�1�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvlo�**�2�*�5W���1�&
4L1!+,@�*�5W�*C�}<�M��/��H](�2�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvlo�**�34�5W���1�&
4L-!++@4�5W�*C�}<�M��/��H](�3�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientinlo�**�4�:�5W���1�&
4L-!+,@�:�5W�*C�}<�M��/��H](�4�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientinlo�**�5�<�5W���1�&
4L%!++@�<�5W�*C�}<�M��/��H](�5�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sensgon��**�6�Q�5W���1�&
4L%!+,@�Q�5W�*C�}<�M��/��H](�6�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens����8M�**�7�S�5W���1�&
4L+!++@�S�5W�*C�}<�M��/��H](�7�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvt�**�8�^�5W���1�&
4L+!+,@�^�5W�ŀ�;�I�����(�8�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvo�**�9���"���1�&
4L-!++@���"����N�e(�9�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClienticro�**�:���"���1�&
4L-!+,@���"����N�e(�:�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClienticro�**�;���"���1�&
4L-!++@���"����N�e(�;�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClienticro�**�<&Ӻ"���1�&
4L-!+,@&Ӻ"����N�e(�<�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClienticro�**�=�Ժ"���1�&
4L+!++@�Ժ"����N�e(�=�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
TermSrvM�**�>�"���1�&
4L+!+,@�"����N�e(�>�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
TermSrv��**�?k�"���1�&
4L%!++@k�"����N�e(�?�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sensgon��**�@��"���1�&
4L%!+,@��"����N�e(�@�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sensinlo�**�A�x�"���1�&
4L+!++@�x�"����N�e(�A�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvW�**�B���"���1�&
4L+!+,@���"�ŀ�;�I�����(�B�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvo�**�Cj��"���1�&
4L-!++@j��"�ŀ�;�I�����(�C�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientindo�**�Dw��"���1�&
4L-!+,@w��"�ŀ�;�I�����(�D�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientindo�**�E߻�"���1�&
4L-!++@߻�"�ŀ�;�I�����(�E�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profilesindo�**�FR��"���1�&
4L-!+,@R��"����N�e(�F�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profilesindo�**�G0��"���1�&
4L1!++@0��"����N�e(�G�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvdo�**�H	�"���1�&
4L1!+,@	�"����N�e(�H�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnvdo�**xI���"���1�&
4L+!++@���"����N�e(�IMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvcx**xJH��"���1�&
4L+!+,@H��"����N�e(�JMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**�K���:"���1�&
4L=!++@���:"��� ���T�KMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller���**�L���;"���1�&
4L=!+,@���;"��5"w��5"�T�LMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerMic�**�Mc�;"���1�&
4L=!++@c�;"��5"w��5"�T�MMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerindo�**�N&2k<"���1�&
4L=!+,@&2k<"����@�T�NMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerindo�**�O�Lk<"���1�&
4L=!++@�Lk<"����@�T�OMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerindo�**�P�B="���1�&
4L=!+,@�B="�0
���,HT�PMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerindo�**�Q�Q="���1�&
4L=!++@�Q="�0
���,HT�QMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerindo�**�Ryџ="���1�&
4L=!+,@yџ="�P,�+958T�RMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerindo�**�S��="���1�&
4L=!++@��="�P,�+958T�SMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerindo�**�TP�:>"���1�&
4L=!+,@P�:>"��5"��5"�T�TMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerindo�**�U��:>"���1�&
4L=!++@��:>"��5"��5"�T�UMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerindo�**�V	�>"���1�&
4L=!+,@	�>"��5"7��5"�T�VMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerindo�**�W�-�>"���1�&
4L=!++@�-�>"��5"7��5"�T�WMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerindo�**�X�o?"���1�&
4L=!+,@�o?"��5"7��5"�T�XMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerinlo�**�Ykp?"���1�&
4L=!++@kp?"��5"7��5"�T�YMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller���|1C��**�ZԞ@"���1�&
4L=!+,@Ԟ@"��5"7��5"�T�ZMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallersoft�**�[��@"���1�&
4L=!++@��@"��5"7��5"�T�[Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller-Win�**�\�W�@"���1�&
4L=!+,@�W�@"��5"
��5"�T�\Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerE�**�]�n�@"���1�&
4L=!++@�n�@"��5"
��5"�T�]Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerssio�**�^�P<A"���1�&
4L=!+,@�P<A"��� ���T�^Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerssio�**�_kx<A"���1�&
4L=!++@kx<A"��� ���T�_Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerofil�**�`�O�H"���1�&
4L=!+,@�O�H"��5"��5"�T�`Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerofil�**xa�g�H"���1�&
4L+!++@�g�H"��5"��5"�T�aMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**xb��H"���1�&
4L+!+,@��H"��5"��5"�T�bMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvtx**�c�f8_"���1�&
4L=!++@�f8_"������\�cMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallererat�**�d�U�_"���1�&
4L=!+,@�U�_"���Y"D�Y"�\�dMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallererat�**�e��
`"���1�&
4L=!++@��
`"���Y"D�Y"�\�eMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallererat�**�f汦`"���1�&
4L=!+,@汦`"������\�fMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstalleriona�**�gAԦ`"���1�&
4L=!++@AԦ`"������\�gMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstallerl�c��**�h�@a"���1�&
4L=!+,@�@a"�P�#Fs3�\�hMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��**�i�@a"���1�&
4L=!++@�@a"�P�#Fs3�\�iMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�j!��e"���1�&
4L=!+,@!��e"���Y"D�Y"�\�jMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�k���e"���1�&
4L-!++@���e"���Y"D�Y"�\�kMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClientl�c��**�ll��e"���1�&
4L-!+,@l��e"���Y"D�Y"�\�lMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClienterat�**xm���e"���1�&
4L+!++@���e"���Y"D�Y"�\�mMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvnx**xn�F�e"���1�&
4L+!+,@�F�e"���Y"D�Y"�\�nMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvnx**`o.��B"���1�&
4L! @.��B"������\�oMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L):on�`**hp�׻�B"���1�&
4L! @�׻�B"������\�pMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�;.t-Wh**`q�9��B"���1�&
4L! @�9��B"������\�qMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L):`**hr^���B"���1�&
4L! @^���B"������\�rMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�;.���h**`sXò�B"���1�&
4L! @Xò�B"������\�sMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L):`**htj��B"���1�&
4L! @j��B"������\�tMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�;h**�uK��B"���1�&
4L1!++@K��B"�*C�}<�M��/��H]\�u�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�v���B"���1�&
4L1!+,@���B"�*C�}<�M��/��H]\�v�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�w*��B"���1�&
4L-!++@*��B"�*C�}<�M��/��H]\�w�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**�x���B"���1�&
4L-!+,@���B"�*C�}<�M��/��H]\�x�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**�ya���B"���1�&
4L-!++@a���B"�*C�}<�M��/��H]\�y�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�z=���B"���1�&
4L-!+,@=���B"�*C�}<�M��/��H]\�z�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�{6
��B"���1�&
4L-!++@6
��B"�*C�}<�M��/��H]\�{�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient4�**�|0!��B"���1�&
4L-!+,@0!��B"�*C�}<�M��/��H]\�|�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient4�**�}�"��B"���1�&
4L+!++@�"��B"�*C�}<�M��/��H]\�}�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�~����B"���1�&
4L+!+,@����B"�*C�}<�M��/��H]\�~�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�� ��B"���1�&
4L%!++@� ��B"�*C�}<�M��/��H]\��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�����B"���1�&
4L%!+,@���B"�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��8��B"���1�&
4L1!++@8��B"�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**��V��B"���1�&
4L1!+,@V��B"�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**��Q���B"���1�&
4L-!++@Q���B"�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient=!�**��I���B"���1�&
4L-!+,@I���B"�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient=!�**��e���B"���1�&
4L%!++@e���B"�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
SensL�**�����B"���1�&
4L%!+,@���B"�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens4�**�����B"���1�&
4L+!++@���B"�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**���&��B"���1�&
4L+!+,@�&��B"����M�EH��*\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**���	;ȇ2���1�&
4L-!++@�	;ȇ2������\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient�4L��1�&
4Loft-Windows-Winlogon/Operational�c��ElfChnk�*�*������'���A*��R=�����f?�m�MF��e�c**��g
;ȇ2���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
4L�!+,@g
;ȇ2������\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���c�����X�څ��������*D�	EventDataA��3R��oData=Event
A��3R%=SubscriberName

GPClient�**��z,;ȇ2���1�&
4L-!++@z,;ȇ2������\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClientj�**���n;ȇ2���1�&
4L-!+,@�n;ȇ2������\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient��1�&�**���q;ȇ2���1�&
4L+!++@�q;ȇ2������\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
TermSrv�**��
�;ȇ2���1�&
4L+!+,@
�;ȇ2������\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
TermSrvl�**���Qȇ2���1�&
4L%!++@�Qȇ2������\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
SensdIns�**���Sȇ2���1�&
4L%!+,@�Sȇ2������\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sensuste�**����Uȇ2���1�&
4L+!++@��Uȇ2������\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvr�**����Uȇ2���1�&
4L+!+,@��Uȇ2����M�EH��*\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��+�Uȇ2���1�&
4L-!++@+�Uȇ2����M�EH��*\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient"�**����Uȇ2���1�&
4L-!+,@��Uȇ2����M�EH��*\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient"�**���Uȇ2���1�&
4L-!++@�Uȇ2����M�EH��*\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles"�**���Zȇ2���1�&
4L-!+,@�Zȇ2������\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles"�**��[Zȇ2���1�&
4L1!++@[Zȇ2������\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv"�**��AwZȇ2���1�&
4L1!+,@AwZȇ2������\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv"�**x���bȇ2���1�&
4L+!++@��bȇ2������\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvax**x���bȇ2���1�&
4L+!+,@��bȇ2������\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvox**��1�2���1�&
4L=!++@1�2�������d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��A���2���1�&
4L=!+,@A���2���3�2
ڃ3�2�d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����6��2���1�&
4L=!++@��6��2���3�2
ڃ3�2�d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**������2���1�&
4L=!+,@����2�P�L$.@d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**������2���1�&
4L=!++@����2�P�L$.@d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���Gk��2���1�&
4L=!+,@�Gk��2�P�L$.@d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��kk��2���1�&
4L=!++@kk��2�P�L$.@d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����2���1�&
4L=!+,@��2�P�L$.@d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�����2���1�&
4L=!++@���2�P�L$.@d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**������2���1�&
4L=!+,@����2�P�L$.@d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��j���2���1�&
4L=!++@j���2�P�L$.@d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��:��2���1�&
4L=!+,@:��2�P�L$.@d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��$:��2���1�&
4L=!++@$:��2�P�L$.@d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��I��2���1�&
4L=!+,@I��2���3�26�3�2�d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���Y��2���1�&
4L=!++@�Y��2���3�26�3�2�d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���um��2���1�&
4L=!+,@�um��2���3�2�3�2�d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���m��2���1�&
4L=!++@�m��2���3�2�3�2�d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**������2���1�&
4L=!+,@����2���3�2�3�2�d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�����2���1�&
4L=!++@���2���3�2�3�2�d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��3U��2���1�&
4L=!+,@3U��2���3�2�3�2�d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��o��2���1�&
4L=!++@o��2���3�2�3�2�d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����k�2���1�&
4L=!+,@��k�2���3�2�3�2�d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��B	l�2���1�&
4L=!++@B	l�2���3�2�3�2�d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���<	�2���1�&
4L=!+,@�<	�2�������d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���P	�2���1�&
4L=!++@�P	�2�������d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���� �2���1�&
4L=!+,@�� �2�������d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**x��("�2���1�&
4L+!++@�("�2�������d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x�`L"�2���1�&
4L+!+,@`L"�2�������d	�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**��e$&�2���1�&
4L=!++@e$&�2������\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��q�&�2���1�&
4L=!+,@q�&�2���!�2���!�2�\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��Rs'�2���1�&
4L=!++@Rs'�2���!�2k��!�2�\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����'�2���1�&
4L=!+,@��'�2������\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����'�2���1�&
4L=!++@��'�2������\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��g�6(�2���1�&
4L=!+,@g�6(�2������\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����6(�2���1�&
4L=!++@��6(�2������\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��r��(�2���1�&
4L=!+,@r��(�2���!�2���!�2�\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����(�2���1�&
4L=!++@��(�2���!�2���!�2�\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���F-�2���1�&
4L=!+,@�F-�2���!�2k��!�2�\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��<G-�2���1�&
4L-!++@<G-�2���!�2k��!�2�\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**���G-�2���1�&
4L-!+,@�G-�2���!�2k��!�2�\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**x�$!G-�2���1�&
4L+!++@$!G-�2���!�2k��!�2�\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x�yG-�2���1�&
4L+!+,@yG-�2���!�2k��!�2�\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**��� ��2���1�&
4L9! @� ��2������\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L�c�LNc�T�� �����*�**���#��2���1�&
4Lu! @�#��2������\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�e&��8Q�@X�ٌ�
7F��:*A��-R=Win32Status
�**���&��2���1�&
4L1!++@�&��2�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**���&��2���1�&
4L1!+,@�&��2�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**��T,&��2���1�&
4L-!++@T,&��2�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**���j6��2���1�&
4L-!+,@�j6��2�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**���Y9��2���1�&
4L-!++@�Y9��2�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**���p9��2���1�&
4L-!+,@�p9��2�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**��ˏ9��2���1�&
4L-!++@ˏ9��2�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**����9��2���1�&
4L-!+,@��9��2�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**���9��2���1�&
4L+!++@�9��2�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��=:��2���1�&
4L+!+,@=:��2�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��E|:��2���1�&
4L%!++@E|:��2�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**���:��2���1�&
4L%!+,@�:��2�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��eC��2���1�&
4L1!++@eC��2�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**��ojC��2���1�&
4L1!+,@ojC��2�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**���6R��2���1�&
4L-!++@�6R��2�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**��3=R��2���1�&
4L-!+,@3=R��2�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**��E?R��2���1�&
4L%!++@E?R��2�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**���TR��2���1�&
4L%!+,@�TR��2�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��WR��2���1�&
4L+!++@WR��2�*C�}<�M��/��H]\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**���gR��2���1�&
4L+!+,@�gR��2�JI��Y	�H�g@��\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**���Qh��2���1�&
4L+!++@�Qh��2���!�2��!�2�\`��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��Xhh��2���1�&
4L+!+,@Xhh��2���!�2��!�2�\`��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**���P#s=���1�&
4L-!++@�P#s=������\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**���_#s=���1�&
4L-!+,@�_#s=������\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**��9~#s=���1�&
4L-!++@9~#s=������\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**��
�#s=���1�&
4L-!+,@
�#s=������\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**����#s=���1�&
4L+!++@��#s=������\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
TermSrv�**��y;#s=���1�&
4L+!+,@y;#s=������\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
TermSrv�**��e`#s=���1�&
4L%!++@e`#s=������\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��z#s=���1�&
4L%!+,@z#s=������\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**���#s=���1�&
4L+!++@�#s=������\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��?�#s=���1�&
4L+!+,@?�#s=�JI��Y	�H�g@��\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��� #s=���1�&
4L-!++@� #s=�JI��Y	�H�g@��\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**���" #s=���1�&
4L-!+,@�" #s=�JI��Y	�H�g@��\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**���& #s=���1�&
4L-!++@�& #s=�JI��Y	�H�g@��\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**��
�$#s=���1�&
4L-!+,@
�$#s=������\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**��q�$#s=���1�&
4L1!++@q�$#s=������\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**��%c%#s=���1�&
4L1!+,@%c%#s=������\���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**x�p�-#s=���1�&
4L+!++@p�-#s=������\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x��L.#s=���1�&
4L+!+,@�L.#s=������\��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**��	��Cs=���1�&
4L=!++@	��Cs=���$��X��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�����Ds=���1�&
4L=!+,@���Ds=���$��X��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���NEs=���1�&
4L=!++@�NEs=��Ht����X��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��鐰Es=���1�&
4L=!+,@鐰Es=���$��X��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��I��Es=���1�&
4L=!++@I��Es=���$��X��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��KFs=���1�&
4L=!+,@KFs=�P�G�10X��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��.1KFs=���1�&
4L=!++@.1KFs=�P�G�10X��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���<�Fs=���1�&
4L=!+,@�<�Fs=�0�� �4�hX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���L�Fs=���1�&
4L=!++@�L�Fs=�0�� �4�hX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��koGs=���1�&
4L=!+,@koGs=�P�>s=�T�>s=�X��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��u~Gs=���1�&
4L=!++@u~Gs=�P�>s=�T�>s=�X��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��<wHs=���1�&
4L=!+,@<wHs=�P�>s=�T�>s=�X��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��=�Hs=���1�&
4L=!++@=�Hs=�P�>s=�T�>s=�X��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��d�Hs=���1�&
4L=!+,@d�Hs=�P�>s=�T�>s=�X��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����Hs=���1�&
4L=!++@��Hs=�P�>s=�T�>s=�X��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����LIs=���1�&
4L=!+,@��LIs=�P�>s=�T�>s=�X��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����LIs=���1�&
4L=!++@��LIs=�P�>s=�T�>s=�X��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�;��Is=���1�&
4L=!+,@;��Is=�P�>s=�Y�>s=�X�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���Is=���1�&
4L=!++@��Is=�P�>s=�Y�>s=�X�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���Qs=���1�&
4L=!+,@��Qs=�P�XVl0X�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�S�Qs=���1�&
4L=!++@S�Qs=�P�XVl0X�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��
Ys=���1�&
4L=!+,@�
Ys=���$��X�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**xX�
Ys=���1�&
4L+!++@X�
Ys=���$��X�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x��
Ys=���1�&
4L+!+,@��
Ys=���$��X�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**���ks=���1�&
4L=!++@��ks=���d��n`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��<ls=���1�&
4L=!+,@�<ls=�P���!�`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�	�-ols=���1�&
4L=!++@�-ols=�T!Fgs=

%Fgs=�`�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�
b	ms=���1�&
4L=!+,@b	ms=��D�P���`�
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�u6	ms=���1�&
4L=!++@u6	ms=��D�P���`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�:�ms=���1�&
4L=!+,@:�ms=���d��n`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�
��ms=���1�&
4L=!++@��ms=���d��n`�
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��Ȳrs=���1�&
4L=!+,@�Ȳrs=��D�@l��`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�%�rs=���1�&
4L-!++@%�rs=��D�@l��`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�2�rs=���1�&
4L-!+,@2�rs=��D�@l��`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**x��rs=���1�&
4L+!++@��rs=��D�@l��`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x\k�rs=���1�&
4L+!+,@\k�rs=��D�@l��`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**`��8'�=���1�&
4L! @��8'�=���d��n`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L�c`**h�:'�=���1�&
4L! @�:'�=���d��n`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�e.h**`���.�=���1�&
4L! @���.�=���d��n`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L�c`**h3��.�=���1�&
4L! @3��.�=���d��n`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�e.h**`N\2�=���1�&
4L! @N\2�=���d��n`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L�c`**h�2�=���1�&
4L! @�2�=���d��n`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�e.h**`�.4�=���1�&
4L! @�.4�=���d��n`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L�c`**h�"4�=���1�&
4L! @�"4�=���d��n`�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�eh**� �#4�=���1�&
4L1!++@ �#4�=�*C�}<�M��/��H]`��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**���#4�=���1�&
4L1!+,@��#4�=�*C�}<�M��/��H]`��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**��$4�=���1�&
4L-!++@�$4�=�*C�}<�M��/��H]`��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**��.4�=���1�&
4L-!+,@�.4�=�*C�}<�M��/��H]`��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**���04�=���1�&
4L-!++@��04�=�*C�}<�M��/��H]`��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**� t�04�=���1�&
4L-!+,@t�04�=�*C�}<�M��/��H]`� �[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�!	�04�=���1�&
4L-!++@	�04�=�*C�}<�M��/��H]`�!�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�"<�04�=���1�&
4L-!+,@<�04�=�*C�}<�M��/��H]`�"�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�#��04�=���1�&
4L+!++@��04�=�*C�}<�M��/��H]`�#�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�$�x14�=���1�&
4L+!+,@�x14�=�*C�}<�M��/��H]`�$�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�%S�14�=���1�&
4L%!++@S�14�=�*C�}<�M��/��H]`�%�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�&�24�=���1�&
4L%!+,@�24�=�*C�}<�M��/��H]`�&�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�'�:4�=���1�&
4L1!++@�:4�=�*C�}<�M��/��H]`�'�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�(:4�=���1�&
4L1!+,@:4�=�*C�}<�M��/��H]`�(�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�)ʝ;4�=���1�&
4L-!++@ʝ;4�=�*C�}<�M��/��H]`�)�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�*#�;4�=���1�&
4L-!+,@#�;4�=�*C�}<�M��/��H]`�*�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�ElfChnk+�+��(����L$�L �*��R=�����f?�m�MF��A	@**�+ݥ;4�=���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
4L�!++@ݥ;4�=�*C�}<�M��/��H]`�+�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���c�����X�څ��������*D�	EventDataA��3R��oData=Event
A��3R%=SubscriberName

Sensnt�**�,>�;4�=���1�&
4L%!+,@>�;4�=�*C�}<�M��/��H]`�,�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
SensClie�**�-{�;4�=���1�&
4L+!++@{�;4�=�*C�}<�M��/��H]`�-�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvP�**�.�;4�=���1�&
4L+!+,@�;4�=�l���6��O��Xf�`�.�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�/?8�=���1�&
4L+!++@?8�=�T!Fgs=HJFgs=�`d/�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�04A?8�=���1�&
4L+!+,@4A?8�=�T!Fgs=HJFgs=�`d0�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�1:��t?���1�&
4L-!++@:��t?���d��n`�1�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**�2K��t?���1�&
4L-!+,@K��t?���d��n`�2�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**�3���t?���1�&
4L-!++@���t?���d��n`�3�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**�4���t?���1�&
4L-!+,@���t?���d��n`�4�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**�5z��t?���1�&
4L+!++@z��t?���d��n`�5�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
TermSrv�**�6_��t?���1�&
4L+!+,@_��t?���d��n`�6�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
TermSrv�**�7r��t?���1�&
4L%!++@r��t?���d��n`�7�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�8y��t?���1�&
4L%!+,@y��t?���d��n`�8�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�9���t?���1�&
4L+!++@���t?���d��n`�9�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�:�t?���1�&
4L+!+,@�t?�l���6��O��Xf�`�:�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�;��t?���1�&
4L-!++@��t?�l���6��O��Xf�`�;�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�<y"�t?���1�&
4L-!+,@y"�t?�l���6��O��Xf�`�<�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�=�$�t?���1�&
4L-!++@�$�t?�l���6��O��Xf�`�=�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**�>\S�t?���1�&
4L-!+,@\S�t?���d��n`�>�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**�?�U�t?���1�&
4L1!++@�U�t?���d��n`�?�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�@}��t?���1�&
4L1!+,@}��t?���d��n`�@�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**xA'��t?���1�&
4L+!++@'��t?���d��n`�AMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**xB��t?���1�&
4L+!+,@��t?���d��n`�BMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**�C<���?���1�&
4L=!++@<���?���r�L�CMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�Dt�9�?���1�&
4L=!+,@t�9�?��h8���L�DMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�EC�v�?���1�&
4L=!++@C�v�?�&Ћ?@Ћ?�L�EMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�Fj��?���1�&
4L=!+,@j��?���r�L�FMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�Gj�?���1�&
4L=!++@j�?���r�L�GMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�H���?���1�&
4L=!+,@���?���r�L�HMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�I���?���1�&
4L=!++@���?���r�L�IMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�J����?���1�&
4L=!+,@����?���r�L�JMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�K汒?���1�&
4L-!++@汒?���r�L�KMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�L鱒?���1�&
4L-!+,@鱒?���r�L�LMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**xM����?���1�&
4L+!++@����?���r�L�MMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**xNwV��?���1�&
4L+!+,@wV��?���r�L�NMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**�O��?���1�&
4L9! @��?���r�L�OMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L	@�LNc�T�� �����*�**�P�i��?���1�&
4Lu! @�i��?���r�L�PMicrosoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�A&��8Q�@X�ٌ�
7F��:*A��-R=Win32Status
�**�Q>�?���1�&
4L1!++@>�?�*C�}<�M��/��H]L�Q�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�Rs���?���1�&
4L1!+,@s���?�*C�}<�M��/��H]L�R�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�S@2��?���1�&
4L-!++@@2��?�*C�}<�M��/��H]L�S�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**�T%?ʒ?���1�&
4L-!+,@%?ʒ?�*C�}<�M��/��H]L�T�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**�UGʒ?���1�&
4L-!++@Gʒ?�*C�}<�M��/��H]L�U�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�VXʒ?���1�&
4L-!+,@Xʒ?�*C�}<�M��/��H]L�V�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�WZʒ?���1�&
4L+!++@Zʒ?�*C�}<�M��/��H]L�W�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�X��?���1�&
4L+!+,@��?�*C�}<�M��/��H]L�X�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�Y�n�?���1�&
4L%!++@�n�?�*C�}<�M��/��H]L�Y�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�Z_��?���1�&
4L%!+,@_��?�*C�}<�M��/��H]L�Z�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�[��?���1�&
4L1!++@��?�*C�}<�M��/��H]L�[�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�\���?���1�&
4L1!+,@���?�*C�}<�M��/��H]L�\�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�]�_!�?���1�&
4L-!++@�_!�?�*C�}<�M��/��H]L�]�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�^�e!�?���1�&
4L-!+,@�e!�?�*C�}<�M��/��H]L�^�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�_;h!�?���1�&
4L%!++@;h!�?�*C�}<�M��/��H]L�_�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�`…!�?���1�&
4L%!+,@…!�?�*C�}<�M��/��H]L�`�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�a �!�?���1�&
4L+!++@ �!�?�*C�}<�M��/��H]L�a�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�bG�!�?���1�&
4L+!+,@G�!�?�����#>5B�8���L�b�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�cP�g�?���1�&
4L%!++@P�g�?�&Ћ?�Ћ?�L�c�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�dR�g�?���1�&
4L%!+,@R�g�?�&Ћ?�Ћ?�L�d�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�e�g�?���1�&
4L+!++@�g�?�&Ћ?�Ћ?�L�e�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�f��g�?���1�&
4L+!+,@��g�?�����#>5B�8���L�f�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�gX�.n?���1�&
4L%!++@X�.n?���r�L�g�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�h�u�.n?���1�&
4L%!+,@�u�.n?���r�L�h�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�i�w�.n?���1�&
4L+!++@�w�.n?���r�L�i�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�j�
�.n?���1�&
4L+!+,@�
�.n?���r�L�j�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�k"Y�"�H���1�&
4L-!++@"Y�"�H���r�L�k�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**�l%Z�"�H���1�&
4L-!+,@%Z�"�H���r�L�l�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**�m�l�"�H���1�&
4L-!++@�l�"�H���r�L�m�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**�n���"�H���1�&
4L-!+,@���"�H���r�L�n�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**�o!��"�H���1�&
4L+!++@!��"�H���r�L�o�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
TermSrv�**�pB��"�H���1�&
4L+!+,@B��"�H���r�L�p�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
TermSrv�**�q���"�H���1�&
4L%!++@���"�H�&Ћ?k`1�?�L�q�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�rek�"�H���1�&
4L%!+,@ek�"�H�&Ћ?k`1�?�L�r�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�s+��"�H���1�&
4L+!++@+��"�H�&Ћ?k`1�?�L�s�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�ta��"�H���1�&
4L+!+,@a��"�H�����#>5B�8���L�t�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�u���"�H���1�&
4L-!++@���"�H�����#>5B�8���L�u�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�vq��"�H���1�&
4L-!+,@q��"�H�����#>5B�8���L�v�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�w���"�H���1�&
4L-!++@���"�H�����#>5B�8���L�w�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**�x���"�H���1�&
4L-!+,@���"�H�&Ћ?�`1�?�L�x�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**�y��"�H���1�&
4L1!++@��"�H�&Ћ?�`1�?�L�y�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�z9��"�H���1�&
4L1!+,@9��"�H�&Ћ?�`1�?�L�z�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**x{��"�H���1�&
4L+!++@��"�H�0�P��)�tSL�{Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x|��"�H���1�&
4L+!+,@��"�H�0�P��)�tSL�|Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**�}��?�H���1�&
4L=!++@��?�H�������D�}Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�~I��@�H���1�&
4L=!+,@I��@�H�������D�~Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�p�*A�H���1�&
4L=!++@p�*A�H��$;�HU$;�H�D�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��0T�A�H���1�&
4L=!+,@0T�A�H�������D��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���g�A�H���1�&
4L=!++@�g�A�H�������D��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��3_B�H���1�&
4L=!+,@3_B�H�P���1�D��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���H_B�H���1�&
4L=!++@�H_B�H�P���1�D��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���S�B�H���1�&
4L=!+,@�S�B�H��$;�Hj$;�H�D��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��`�B�H���1�&
4L=!++@`�B�H��$;�Hj$;�H�D��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����C�H���1�&
4L=!+,@��C�H��$;�H$;�H�D��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����C�H���1�&
4L=!++@��C�H��$;�H$;�H�D��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��&�,D�H���1�&
4L=!+,@&�,D�H�P��b>�D��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����,D�H���1�&
4L=!++@��,D�H�P��b>�D��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�����D�H���1�&
4L=!+,@���D�H��$;�H$;�H�D��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��[��D�H���1�&
4L=!++@[��D�H��$;�H$;�H�D��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���C`E�H���1�&
4L=!+,@�C`E�H��$;�H$;�H�D��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��\`E�H���1�&
4L=!++@\`E�H��$;�H$;�H�D��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����E�H���1�&
4L=!+,@��E�H�P��}�I�D��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��!(�E�H���1�&
4L=!++@!(�E�H�P��}�I�D��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���N�J�H���1�&
4L=!+,@�N�J�H�������D��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���z�J�H���1�&
4L=!++@�z�J�H�������D��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���1�Q�H���1�&
4L=!+,@�1�Q�H�P���b��D��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**x�:�Q�H���1�&
4L+!++@:�Q�H�P���b��D��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x��=�Q�H���1�&
4L+!+,@�=�Q�H�P���b��D��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**�����d�H���1�&
4L=!++@���d�H������QX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��
32e�H���1�&
4L=!+,@
32e�H�dZ]_�H�[]_�H�X��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��H!re�H���1�&
4L=!++@H!re�H�dZ]_�HE^]_�H�X��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����f�H���1�&
4L=!+,@��f�H������QX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���f�H���1�&
4L=!++@�f�H������QX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���G�f�H���1�&
4L=!+,@�G�f�H������QX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���V�f�H���1�&
4L=!++@�V�f�H������QX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��fZk�H���1�&
4L=!+,@fZk�H������QX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��]�Zk�H���1�&
4L-!++@]�Zk�H������QX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**����Zk�H���1�&
4L-!+,@��Zk�H������QX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**x�	�Zk�H���1�&
4L+!++@	�Zk�H������QX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x��[k�H���1�&
4L+!+,@�[k�H������QX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**`���iC�H���1�&
4L! @��iC�H������QX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L	@`**h��jC�H���1�&
4L! @�jC�H������QX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�A.h**`��	���H���1�&
4L! @�	���H������QX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L	@`**h�<y���H���1�&
4L! @<y���H������QX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�A.h**`�KC���H���1�&
4L! @KC���H������QX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L	@`**h�|����H���1�&
4L! @|����H������QX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�A.h**`��΋Y�H���1�&
4L! @�΋Y�H������QX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L	@`**h��C�Y�H���1�&
4L! @�C�Y�H������QX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�A.h**`�!L��H���1�&
4L! @!L��H������QX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L	@`**h�TtL��H���1�&
4L! @TtL��H������QX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�A.h**`��Ί�H���1�&
4L! @�Ί�H������QX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L	@`**h��E��H���1�&
4L! @�E��H������QX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�A.h**`��l˥�H���1�&
4L! @�l˥�H������QX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L	@`**h���˥�H���1�&
4L! @��˥�H������QX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�A.h**x�@��EI���1�&
4L+!++@@��EI������QX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x�tػEI���1�&
4L+!+,@tػEI������QX��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**��C|
PEI���1�&
4L=!++@C|
PEI���*8�&(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**����AQEI���1�&
4L=!+,@��AQEI���*8�&(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��[�QEI���1�&
4L=!++@[�QEI���/KEIl�/KEI�(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��GREI���1�&
4L=!+,@GREI���/KEIl�/KEI�(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��}ZREI���1�&
4L=!++@}ZREI���/KEIl�/KEI�(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���W�REI���1�&
4L=!+,@�W�REI���/KEI�/KEI�(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��f�REI���1�&
4L=!++@f�REI���/KEI�/KEI�(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���YTSEI���1�&
4L=!+,@�YTSEI���/KEI�/KEI�(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���iTSEI���1�&
4L=!++@�iTSEI���/KEI�/KEI�(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��+��SEI���1�&
4L=!+,@+��SEI�	b�]�H�~��&(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�����SEI���1�&
4L=!++@���SEI�	b�]�H�~��&(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��H�TEI���1�&
4L=!+,@H�TEI��9�8Kv=D(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���Z�TEI���1�&
4L=!++@�Z�TEI��9�8Kv=D(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��c�"UEI���1�&
4L=!+,@c�"UEI���*8�&(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���"UEI���1�&
4L=!++@�"UEI���*8�&(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**�����UEI���1�&
4L=!+,@���UEI���/KEI6�/KEI�(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���мUEI���1�&
4L=!++@�мUEI���/KEI6�/KEI�(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���WVEI���1�&
4L=!+,@�WVEI���/KEI6�/KEI�(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���WVEI���1�&
4L=!++@�WVEI���/KEI6�/KEI�(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���f�`EI���1�&
4L=!+,@�f�`EI��9�8��D(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��V��`EI���1�&
4L=!++@V��`EI��9�8��D(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���d'aEI���1�&
4L=!+,@�d'aEI��9�8��D(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���r'aEI���1�&
4L=!++@�r'aEI��9�8��D(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���f�dEI���1�&
4L=!+,@�f�dEI��9�8��D(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**��Iu�dEI���1�&
4L=!++@Iu�dEI��9�8��D(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**���4nEI���1�&
4L=!+,@�4nEI���*8�&(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��"TrustedInstaller�**x��5nEI���1�&
4L+!++@�5nEI���*8�&(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x��=5nEI���1�&
4L+!+,@�=5nEI���*8�&(\�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvxElfChnk�m	�m	��P�C[�eO����B=�����f?�m�MF���**��qa�EI���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
4L�!++@qa�EI�����fd��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c����c�����X�څ��������D�	EventDataA��3B��oData=Event
A��3B%=SubscriberName
"TrustedInstaller*�**�����EI���1�&
4L=!+,@���EI��9��"hd��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller-�**��'N�EI���1�&
4L=!++@'N�EI���|EI��|EI�d��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�;4�**�����EI���1�&
4L=!+,@���EI���|EI�|EI�d��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller=��**��t��EI���1�&
4L=!++@t��EI���|EI�|EI�d��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller��1�&�**��1��EI���1�&
4L=!+,@1��EI�����fd��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**��l��EI���1�&
4L=!++@l��EI�����fd��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**������EI���1�&
4L=!+,@����EI�����fd��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�����EI���1�&
4L-!++@���EI�����fd��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient?��**�����EI���1�&
4L-!+,@���EI�����fd��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient5�**x�o(��EI���1�&
4L+!++@o(��EI�����fd��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**x�
���EI���1�&
4L+!+,@
���EI�����fd��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvex**����~O�J���1�&
4L9! @��~O�J�����fd��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L�LNc�T�� ������**����O�J���1�&
4Lu! @��O�J�����fd��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�&��8Q�@X�ٌ�
7F��:A��-B=Win32Status
�**����O�J���1�&
4L1!++@��O�J�*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**��1�O�J���1�&
4L1!+,@1�O�J�*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**��b�O�J���1�&
4L-!++@b�O�J�*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**��	��O�J���1�&
4L-!+,@	��O�J�*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**���O�J���1�&
4L-!++@�O�J�*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��t�O�J���1�&
4L-!+,@t�O�J�*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**����O�J���1�&
4L-!++@��O�J�*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**����O�J���1�&
4L-!+,@��O�J�*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**����O�J���1�&
4L+!++@��O�J�*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��zԞO�J���1�&
4L+!+,@zԞO�J�*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**���#�O�J���1�&
4L%!++@�#�O�J�*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��G��O�J���1�&
4L%!+,@G��O�J�*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��yѧO�J���1�&
4L1!++@yѧO�J�*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�� ֧O�J���1�&
4L1!+,@ ֧O�J�*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**��^�O�J���1�&
4L-!++@^�O�J�*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**����O�J���1�&
4L-!+,@��O�J�*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�����O�J���1�&
4L%!++@���O�J�*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**���O�J���1�&
4L%!+,@�O�J�*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**��x�O�J���1�&
4L+!++@x�O�J�*C�}<�M��/��H]d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��)�O�J���1�&
4L+!+,@)�O�J��r��F�`"��d���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�����U�J���1�&
4L+!++@���U�J���|EI��|EI�dh��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��1$�U�J���1�&
4L+!+,@1$�U�J���|EI��|EI�dh��[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**��v��y�K���1�&
4L-!++@v��y�K����C�F<��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��
��y�K���1�&
4L-!+,@
��y�K����C�F<��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**x���y�K���1�&
4L+!++@��y�K����C�F<��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**x�J��y�K���1�&
4L+!+,@J��y�K����C�F<��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**`��l#L���1�&
4L! @�l#L����C�F<��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L`**h��J�#L���1�&
4L! @�J�#L����C�F<��Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�h**��ܬ�#L���1�&
4L1!++@ܬ�#L�*C�}<�M��/��H]<���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�� ��#L���1�&
4L1!+,@ ��#L�*C�}<�M��/��H]<���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**��ʊ#L���1�&
4L-!++@ʊ#L�*C�}<�M��/��H]<���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**��G��#L���1�&
4L-!+,@G��#L�*C�}<�M��/��H]<���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**���f�#L���1�&
4L-!++@�f�#L�*C�}<�M��/��H]<���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**���h�#L���1�&
4L-!+,@�h�#L�*C�}<�M��/��H]<���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��뇜#L���1�&
4L-!++@뇜#L�*C�}<�M��/��H]<���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��6��#L���1�&
4L-!+,@6��#L�*C�}<�M��/��H]<���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**��#L���1�&
4L+!++@#L�*C�}<�M��/��H]<���[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�	��#L���1�&
4L+!+,@��#L�*C�}<�M��/��H]<�	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�	#��#L���1�&
4L%!++@#��#L�*C�}<�M��/��H]<�	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�	|�#L���1�&
4L%!+,@|�#L�*C�}<�M��/��H]<�	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�	X�#L���1�&
4L1!++@X�#L�*C�}<�M��/��H]<�	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�	9$�#L���1�&
4L1!+,@9$�#L�*C�}<�M��/��H]<�	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�	+^�#L���1�&
4L-!++@+^�#L�*C�}<�M��/��H]<�	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�	�b�#L���1�&
4L-!+,@�b�#L�*C�}<�M��/��H]<�	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�	Gd�#L���1�&
4L%!++@Gd�#L�*C�}<�M��/��H]<�	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�	
s�#L���1�&
4L%!+,@
s�#L�*C�}<�M��/��H]<�	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�		Wt�#L���1�&
4L+!++@Wt�#L�*C�}<�M��/��H]<�		�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�
	��#L���1�&
4L+!+,@��#L�6���B�.���<�
	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�	�� &L���1�&
4L+!++@�� &L����C�F<@	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�	{� &L���1�&
4L+!+,@{� &L����C�F<@	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�
	_�%|S���1�&
4L-!++@_�%|S����C�F<�
	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient�**�	X�%|S���1�&
4L-!+,@X�%|S����C�F<�	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient�**�	0�%|S���1�&
4L-!++@0�%|S����C�F<�	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient�**�	���%|S���1�&
4L-!+,@���%|S����C�F<�	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
GPClient�**�	���%|S���1�&
4L+!++@���%|S����C�F<�	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
TermSrv�**�	l�%|S���1�&
4L+!+,@l�%|S����C�F<�	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
TermSrv�**�	5�&|S���1�&
4L%!++@5�&|S����C�F<�	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�	�&|S���1�&
4L%!+,@�&|S����C�F<�	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�	��&|S���1�&
4L+!++@��&|S����C�F<�	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�	��&|S���1�&
4L+!+,@��&|S�6���B�.���<�	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�	��&|S���1�&
4L-!++@��&|S�6���B�.���<�	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�	�&|S���1�&
4L-!+,@�&|S�6���B�.���<�	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�	4&|S���1�&
4L-!++@4&|S�6���B�.���<�	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**�	��!&|S���1�&
4L-!+,@��!&|S����C�F<�	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**�	��!&|S���1�&
4L1!++@��!&|S����C�F<�	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�	�="&|S���1�&
4L1!+,@�="&|S����C�F<�	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**x	17)&|S���1�&
4L+!++@17)&|S����C�F<�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**x	�`)&|S���1�&
4L+!+,@�`)&|S����C�F<�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**�	�O@|S���1�&
4L=!++@�O@|S���t���`�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**� 	2�@|S���1�&
4L=!+,@2�@|S��@�;|S�B�;|S�`� 	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�!	�՛A|S���1�&
4L=!++@�՛A|S������`�!	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�"	�b5B|S���1�&
4L=!+,@�b5B|S��@�;|SH�;|S�`�"	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�#	x5B|S���1�&
4L=!++@x5B|S��@�;|SH�;|S�`�#	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�$	Q�B|S���1�&
4L=!+,@Q�B|S��9`�|/`�$	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�%	4L�B|S���1�&
4L=!++@4L�B|S��9`�|/`�%	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�&	��jC|S���1�&
4L=!+,@��jC|S��@�;|S�A�;|S�`�&	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�'	�jC|S���1�&
4L=!++@�jC|S��@�;|S�A�;|S�`�'	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�(	e�D|S���1�&
4L=!+,@e�D|S��@�;|S�M�;|S�`�(	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�)	��D|S���1�&
4L=!++@��D|S��@�;|S�M�;|S�`�)	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�*	W��D|S���1�&
4L=!+,@W��D|S��@�;|S�M�;|S�`�*	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�+	"��D|S���1�&
4L=!++@"��D|S��@�;|S�M�;|S�`�+	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�,	�@:E|S���1�&
4L=!+,@�@:E|S��@�;|S�M�;|S�`�,	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�-	pV:E|S���1�&
4L=!++@pV:E|S��@�;|S�M�;|S�`�-	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�.	5��E|S���1�&
4L=!+,@5��E|S��@�;|S�M�;|S�`�.	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�/	��E|S���1�&
4L=!++@��E|S��@�;|S�M�;|S�`�/	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�0	��9H|S���1�&
4L=!+,@��9H|S��@�;|S�A�;|S�`�0	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�1	
�9H|S���1�&
4L=!++@
�9H|S��@�;|S�A�;|S�`�1	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�2	�
:K|S���1�&
4L=!+,@�
:K|S���t���`�2	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�3	:K|S���1�&
4L=!++@:K|S���t���`�3	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�4	z��R|S���1�&
4L=!+,@z��R|S��9`�}�{`�4	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**x5	q��R|S���1�&
4L+!++@q��R|S��9`�}�{`�5	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**x6	�ȹR|S���1�&
4L+!+,@�ȹR|S��9`�}�{`�6	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**�7	�W�d|S���1�&
4L=!++@�W�d|S����^�@X�7	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�8	��e|S���1�&
4L=!+,@��e|S���`|S��`|S�X�8	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�9	F�e|S���1�&
4L=!++@F�e|S���`|S��`|S�X�9	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�:	��cf|S���1�&
4L=!+,@��cf|S�0�P>���pX�:	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�;	�df|S���1�&
4L=!++@�df|S�0�P>���pX�;	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�<	z�f|S���1�&
4L=!+,@z�f|S��9"c=�*4X�<	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�=	�f|S���1�&
4L=!++@�f|S��9"c=�*4X�=	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�>	�k|S���1�&
4L=!+,@�k|S���`|S��`|S�X�>	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���"TrustedInstaller�**�?	l��k|S���1�&
4L-!++@l��k|S���`|S��`|S�X�?	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�@	���k|S���1�&
4L-!+,@���k|S���`|S��`|S�X�@	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**xA	{��k|S���1�&
4L+!++@{��k|S���`|S��`|S�X�A	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**xB	4�k|S���1�&
4L+!+,@4�k|S���`|S��`|S�X�B	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**`C	x�_�T���1�&
4L! @x�_�T����^�@X�C	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L`**hD	��_�T���1�&
4L! @��_�T����^�@X�D	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�h**�E	�]�_�T���1�&
4L1!++@�]�_�T�*C�}<�M��/��H]X�E	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�F	U`�_�T���1�&
4L1!+,@U`�_�T�*C�}<�M��/��H]X�F	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�G	�u�_�T���1�&
4L-!++@�u�_�T�*C�}<�M��/��H]X�G	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**�H	��_�T���1�&
4L-!+,@��_�T�*C�}<�M��/��H]X�H	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���Profiles�**�I	t`�T���1�&
4L-!++@t`�T�*C�}<�M��/��H]X�I	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�J	e`�T���1�&
4L-!+,@e`�T�*C�}<�M��/��H]X�J	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�K	�"`�T���1�&
4L-!++@�"`�T�*C�}<�M��/��H]X�K	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�L	\6`�T���1�&
4L-!+,@\6`�T�*C�}<�M��/��H]X�L	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�M	�7`�T���1�&
4L+!++@�7`�T�*C�}<�M��/��H]X�M	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�N	��`�T���1�&
4L+!+,@��`�T�*C�}<�M��/��H]X�N	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�O	�R`�T���1�&
4L%!++@�R`�T�*C�}<�M��/��H]X�O	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�P	\�`�T���1�&
4L%!+,@\�`�T�*C�}<�M��/��H]X�P	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�Q	ma
`�T���1�&
4L1!++@ma
`�T�*C�}<�M��/��H]X�Q	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�R	f
`�T���1�&
4L1!+,@f
`�T�*C�}<�M��/��H]X�R	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�S	�\`�T���1�&
4L-!++@�\`�T�*C�}<�M��/��H]X�S	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�T	�c`�T���1�&
4L-!+,@�c`�T�*C�}<�M��/��H]X�T	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�U	�e`�T���1�&
4L%!++@�e`�T�*C�}<�M��/��H]X�U	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�V	�|`�T���1�&
4L%!+,@�|`�T�*C�}<�M��/��H]X�V	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�W	�~`�T���1�&
4L+!++@�~`�T�*C�}<�M��/��H]X�W	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�X	��`�T���1�&
4L+!+,@��`�T������&�M�M���3X�X	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�Y	7Tb�T���1�&
4L+!++@7Tb�T���`|S	qQ�`|S�X\Y	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�Z	�9Tb�T���1�&
4L+!+,@�9Tb�T���`|S	qQ�`|S�X\Z	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�[	��kW���1�&
4L-!++@��kW����^�@$mDu[	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**�\	��kW���1�&
4L-!+,@��kW����^�@$mDu\	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���GPClient�**x]	��kW���1�&
4L+!++@��kW����^�@$mDu]	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**x^	Y��kW���1�&
4L+!+,@Y��kW����^�@$mDu^	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrvx**�_	�
lW���1�&
4L%!++@�
lW�щ �/�I�'E#X�_	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�`	p
lW���1�&
4L%!+,@p
lW�щ �/�I�'E#X�`	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�a	�
lW���1�&
4L+!++@�
lW�щ �/�I�'E#X�a	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�b	U=ClW���1�&
4L+!+,@U=ClW�щ �/�I�'E#X�b	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv�**�c	"�DlW���1�&
4L%!++@"�DlW�щ �/�I�'E#X�c	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�d	nzElW���1�&
4L%!+,@nzElW�щ �/�I�'E#X�d	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�e	�ElW���1�&
4L1!++@�ElW�щ �/�I�'E#X�e	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�f	��ElW���1�&
4L1!+,@��ElW�щ �/�I�'E#X�f	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���SessionEnv�**�g	��VlW���1�&
4L%!++@��VlW�щ �/�I�'E#X�g	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
	Sens�**�h	ݤVlW���1�&
4L%!+,@ݤVlW�щ �/�I�'E#X�h	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
	Sens�**�i	��VlW���1�&
4L1!++@��VlW�щ �/�I�'E#X�i	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���	SessionEnv�**�j	�VlW���1�&
4L1!+,@�VlW�щ �/�I�'E#X�j	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���	SessionEnv�**�k	8�cmW���1�&
4L%!++@8�cmW�0����H s�uX�k	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�l	��cmW���1�&
4L%!+,@��cmW�0����H s�uX�l	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���
Sens�**�m	��cmW���1�&
4L+!++@��cmW�0����H s�uX�m	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���TermSrv���1�&
4LElfChnkn	
n	
�@���~+�m�)*��R=�����f?�m�MF��9
**�n	��fmW���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
4L�!+,@��fmW��b��J���˲?X�n	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c���c�����X�څ��������*D�	EventDataA��3R��oData=Event
A��3R%=SubscriberName
TermSrv*�**�o	�r<�W���1�&
4L9! @�r<�W���`|SR�`|S�$mDuo	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L9
�LNc�T�� �����*�**�p	��>�W���1�&
4Lu! @��>�W���`|SR�`|S�$mDup	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�&��8Q�@X�ٌ�
7F��:*A��-R=Win32Status
�**xq	p�W���1�&
4L+!++@p�W������J��n�!d$mDuq	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**xr	?�W���1�&
4L+!+,@?�W������J��n�!d$mDur	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**�s	-�W���1�&
4L%!++@-�W���`|SH�`|S�X�s	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�t	q��W���1�&
4L%!+,@q��W���`|SH�`|S�X�t	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�u	��W���1�&
4L+!++@��W���`|SH�`|S�X�u	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�v	���W���1�&
4L+!+,@���W���`|SH�`|S�X�v	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�w	��W���1�&
4L%!++@��W���`|SH�`|S�X�w	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�x	�}�W���1�&
4L%!+,@�}�W���`|SH�`|S�X�x	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�y	���W���1�&
4L1!++@���W���`|SH�`|S�X�y	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�z	~��W���1�&
4L1!+,@~��W���`|SH�`|S�X�z	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�{	3c�W���1�&
4L%!++@3c�W���`|SH�`|S�X�{	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
	Sens�**�|	3Ec�W���1�&
4L%!+,@3Ec�W���`|SH�`|S�X�|	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
	Sens�**�}	CGc�W���1�&
4L1!++@CGc�W���`|SH�`|S�X�}	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��	SessionEnv�**�~	OMc�W���1�&
4L1!+,@OMc�W���`|SH�`|S�X�~	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��	SessionEnv�**�	%Oc�W���1�&
4L%!++@%Oc�W���`|SH�`|S�X�	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	�ac�W���1�&
4L%!+,@�ac�W���`|SH�`|S�X��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	�cc�W���1�&
4L+!++@�cc�W���`|SH�`|S�X��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��	}h�W���1�&
4L+!+,@}h�W���`|SH�`|S�X��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��	�? �W���1�&
4L-!++@�? �W����^�@X��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**��	�@ �W���1�&
4L-!+,@�@ �W����^�@X��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**��	UL �W���1�&
4L-!++@UL �W����^�@X��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**��	�t �W���1�&
4L-!+,@�t �W����^�@X��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
GPClient�**��	3w �W���1�&
4L+!++@3w �W����^�@X��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
TermSrv�**��	� �W���1�&
4L+!+,@� �W����^�@X��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
TermSrv�**��	��5�W���1�&
4L%!++@��5�W�@X��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	j7�W���1�&
4L%!+,@j7�W�@X��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	�D7�W���1�&
4L+!++@�D7�W�@X��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��	�c7�W���1�&
4L+!+,@�c7�W������J��n�!dX��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��	�l7�W���1�&
4L-!++@�l7�W������J��n�!dX��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**��	��7�W���1�&
4L-!+,@��7�W������J��n�!dX��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**��	��7�W���1�&
4L-!++@��7�W������J��n�!dX��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**��	;�9�W���1�&
4L-!+,@;�9�W����^�@X��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**��	>�9�W���1�&
4L1!++@>�9�W����^�@X��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**��	�9�W���1�&
4L1!+,@�9�W����^�@X��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**x�	�M>�W���1�&
4L+!++@�M>�W����^�@X��	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x�	i>�W���1�&
4L+!+,@i>�W����^�@X��	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**��	j.��W���1�&
4L-!++@j.��W���P+��`��	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**��	�1��W���1�&
4L-!+,@�1��W���P+��`��	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**x�	8@��W���1�&
4L+!++@8@��W���P+��`��	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x�	{D��W���1�&
4L+!+,@{D��W���P+��`��	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**`�	r���W���1�&
4L! @r���W���P+��`��	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L9
`**h�	�(��W���1�&
4L! @�(��W���P+��`��	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�h**��	os�W���1�&
4L1!++@os�W�*C�}<�M��/��H]`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**��	�qs�W���1�&
4L1!+,@�qs�W�*C�}<�M��/��H]`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**��	��s�W���1�&
4L-!++@��s�W�*C�}<�M��/��H]`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**��	�|�W���1�&
4L-!+,@�|�W�*C�}<�M��/��H]`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��Profiles�**��	�|�W���1�&
4L-!++@�|�W�*C�}<�M��/��H]`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**��	��|�W���1�&
4L-!+,@��|�W�*C�}<�M��/��H]`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**��	)�|�W���1�&
4L+!++@)�|�W�*C�}<�M��/��H]`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��	��W���1�&
4L+!+,@��W�*C�}<�M��/��H]`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��	��W���1�&
4L%!++@��W�*C�}<�M��/��H]`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	�&�W���1�&
4L%!+,@�&�W�*C�}<�M��/��H]`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	��W���1�&
4L1!++@��W�*C�}<�M��/��H]`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**��	���W���1�&
4L1!+,@���W�*C�}<�M��/��H]`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**��	��W���1�&
4L-!++@��W�*C�}<�M��/��H]`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**��	��W���1�&
4L-!+,@��W�*C�}<�M��/��H]`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**��	D�W���1�&
4L%!++@D�W�*C�}<�M��/��H]`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	��W���1�&
4L%!+,@��W�*C�}<�M��/��H]`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	�W���1�&
4L+!++@�W�*C�}<�M��/��H]`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��	B)�W���1�&
4L+!+,@B)�W�5s��tjD�[L}�p`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��	��!�W���1�&
4L%!++@��!�W�0��\��X `��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	>�!�W���1�&
4L%!+,@>�!�W�0��\��X `��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	:�!�W���1�&
4L+!++@:�!�W�0��\��X `��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��	��!�W���1�&
4L+!+,@��!�W�5s��tjD�[L}�p`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��	3�� W���1�&
4L%!++@3�� W�0
� q�@:�!`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	��� W���1�&
4L%!+,@��� W�0
� q�@:�!`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	h�� W���1�&
4L+!++@h�� W�0
� q�@:�!`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��	fE� W���1�&
4L+!+,@fE� W�0
� q�@:�!`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��	x���(W���1�&
4L-!++@x���(W���P+���.�:�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**��	̣��(W���1�&
4L-!+,@̣��(W���P+���.�:�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**x�	���(W���1�&
4L+!++@���(W���P+���.�:�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x�	~
��(W���1�&
4L+!+,@~
��(W���P+���.�:�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**��	�%�(W���1�&
4L%!++@�%�(W���P+��`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	�&�(W���1�&
4L%!+,@�&�(W���P+��`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	�&�(W���1�&
4L+!++@�&�(W���P+��`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��	��C�(W���1�&
4L+!+,@��C�(W�� �&��@��qB��`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��	@D�(W���1�&
4L%!++@@D�(W�� �&��@��qB��`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	BD�(W���1�&
4L%!+,@BD�(W�� �&��@��qB��`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	QD�(W���1�&
4L1!++@QD�(W�� �&��@��qB��`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**��	�XD�(W���1�&
4L1!+,@�XD�(W�� �&��@��qB��`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**��	esh�(W���1�&
4L%!++@esh�(W���P+��`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
	Sens�**��	��h�(W���1�&
4L%!+,@��h�(W���P+��`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
	Sens�**��	��h�(W���1�&
4L1!++@��h�(W���P+��`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��	SessionEnv�**��	ۖh�(W���1�&
4L1!+,@ۖh�(W���P+��`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��	SessionEnv�**��	0��(W���1�&
4L%!++@0��(W�0	�PͽDD!D`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	���(W���1�&
4L%!+,@���(W�0	�PͽDD!D`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	A���(W���1�&
4L+!++@A���(W�0	�PͽDD!D`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��	���(W���1�&
4L+!+,@���(W���b�]A�B�k!�L`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**`�	��)W���1�&
4L! @��)W��1��W�2��W��.�:�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L9
`**h�	6%��)W���1�&
4L! @6%��)W��1��W�2��W��.�:�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�h**x�	�Oi�)W���1�&
4L+!++@�Oi�)W�����O�fv�j��.�:�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x�	�vi�)W���1�&
4L+!+,@�vi�)W�����O�fv�j��.�:�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**��	Qx��)W���1�&
4L%!++@Qx��)W�����O�fv�j�`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	b���)W���1�&
4L%!+,@b���)W�����O�fv�j�`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	"���)W���1�&
4L+!++@"���)W�����O�fv�j�`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��	�â�)W���1�&
4L+!+,@�â�)W�����O�fv�j�`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��	�W��)W���1�&
4L%!++@�W��)W�����O�fv�j�`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	$���)W���1�&
4L%!+,@$���)W�����O�fv�j�`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	����)W���1�&
4L1!++@����)W�����O�fv�j�`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**��	E���)W���1�&
4L1!+,@E���)W�����O�fv�j�`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**��	q���)W���1�&
4L%!++@q���)W�0
�PU�Ht#`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
	Sens�**��	ˤ�)W���1�&
4L%!+,@ˤ�)W�0
�PU�Ht#`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
	Sens�**��	��)W���1�&
4L1!++@�Τ�)W�0
�PU�Ht#`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��	SessionEnv�**��	*֤�)W���1�&
4L1!+,@*֤�)W�0
�PU�Ht#`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��	SessionEnv�**��	�ؤ�)W���1�&
4L%!++@�ؤ�)W�0
�PU�Ht#`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	���)W���1�&
4L%!+,@���)W�0
�PU�Ht#`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	����)W���1�&
4L+!++@����)W�0
�PU�Ht#`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��	C+��)W���1�&
4L+!+,@C+��)W�0
�PU�Ht#`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��	��T
<[���1�&
4L-!++@��T
<[���P+���c�`�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**��	�T
<[���1�&
4L-!+,@�T
<[���P+���c�`�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**x�	�T
<[���1�&
4L+!++@�T
<[���P+���c�`�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x�	dfU
<[���1�&
4L+!+,@dfU
<[���P+���c�`�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**`�	���
<[���1�&
4L! @���
<[�� ��D����T�c�`�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L9
`**h�	@ũ
<[���1�&
4L! @@ũ
<[�� ��D����T�c�`�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�h**��	�<[���1�&
4L-!++@�<[�� ��D����TK�e�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**��	��<[���1�&
4L-!+,@��<[�� ��D����TK�e�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**x�	b#<[���1�&
4L+!++@b#<[�� ��D����TK�e�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x�	�k<[���1�&
4L+!+,@�k<[�� ��D����TK�e�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**��	�:<[���1�&
4L%!++@�:<[�0	��0γ�Tld`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	=�:<[���1�&
4L%!+,@=�:<[�0	��0γ�Tld`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	T�:<[���1�&
4L+!++@T�:<[�0	��0γ�Tld`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**x�	E�Y<[���1�&
4L+!++@E�Y<[�� ��D����T�c�`�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x�	g�Y<[���1�&
4L+!+,@g�Y<[�� ��D����T�c�`�	Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**��	*Bh<[���1�&
4L+!+,@*Bh<[�%�n�'G���J��`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��	#�h<[���1�&
4L%!++@#�h<[�%�n�'G���J��`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	Hk<[���1�&
4L%!+,@Hk<[�� ��D����T`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	"7k<[���1�&
4L1!++@"7k<[�� ��D����T`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**��	S@k<[���1�&
4L1!+,@S@k<[�� ��D����T`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**��	V�<[���1�&
4L%!++@V�<[�� ��D����T`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
	Sens�**��	�<[���1�&
4L%!+,@�<[�� ��D����T`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
	Sens�**��	�<[���1�&
4L1!++@�<[�� ��D����T`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��	SessionEnv�**��	+<[���1�&
4L1!+,@+<[�� ��D����T`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��	SessionEnv�**��	�<[���1�&
4L%!++@�<[�� ��D����T`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	�&<[���1�&
4L%!+,@�&<[�� ��D����T`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	�(<[���1�&
4L+!++@�(<[�� ��D����T`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��	M|#<[���1�&
4L+!+,@M|#<[�Pb�	�B���!�`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��	��+?[���1�&
4L%!++@��+?[���P+��`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	f+?[���1�&
4L%!+,@f+?[���P+��`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	+?[���1�&
4L+!++@+?[���P+��`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��	�B+?[���1�&
4L+!+,@�B+?[���P+��`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**��	�d+?[���1�&
4L%!++@�d+?[���P+��`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	��+?[���1�&
4L%!+,@��+?[���P+��`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**��	p�+?[���1�&
4L1!++@p�+?[���P+��`��	�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�
��+?[���1�&
4L1!+,@��+?[���P+��`�
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��SessionEnv�**�
%qb�?[���1�&
4L-!++@%qb�?[�)h �3x�K�cW���IpE
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**�
�rb�?[���1�&
4L-!+,@�rb�?[�)h �3x�K�cW���IpE
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��GPClient�**x
�b�?[���1�&
4L+!++@�b�?[�)h �3x�K�cW���IpE
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x
q
c�?[���1�&
4L+!+,@q
c�?[�)h �3x�K�cW���IpE
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**`
�ʮ�?[���1�&
4L! @�ʮ�?[��1��W@��W�IpE
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�L9
`**h
����?[���1�&
4L! @����?[��1��W@��W�IpE
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational��8Q�h**x
����?[���1�&
4L+!++@����?[�)h �3x�K�cW���IpE
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**x
���?[���1�&
4L+!+,@���?[�)h �3x�K�cW���IpE
Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrvx**�	
Ñ
�?[���1�&
4L%!++@Ñ
�?[�)h �3x�K�cW���`�	
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
	Sens�**�

��
�?[���1�&
4L%!+,@��
�?[�)h �3x�K�cW���`�

�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
	Sens�**�
*�
�?[���1�&
4L1!++@*�
�?[�)h �3x�K�cW���`�
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��	SessionEnv�**�
��
�?[���1�&
4L1!+,@��
�?[�)h �3x�K�cW���`�
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��	SessionEnv�**�
�
�?[���1�&
4L%!++@�
�?[�)h �3x�K�cW���`�
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�
f�
�?[���1�&
4L%!+,@f�
�?[�)h �3x�K�cW���`�
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��
Sens�**�
��
�?[���1�&
4L+!++@��
�?[�)h �3x�K�cW���`�
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�**�
hs6�?[���1�&
4L+!+,@hs6�?[��Zb��A�#cE�`�
�[�l��>��Gd�Microsoft-Windows-Winlogon�����|1C�̣���8Microsoft-Windows-Winlogon/Operational�c��TermSrv�

Anon7 - 2021