Security Application Block WMI Events
| Retired Content |
|---|
This content is outdated and is no longer being maintained. It is provided as a courtesy for individuals who are still using these technologies. This page may contain URLs that were valid when originally published, but now link to sites or pages that no longer exist. |
| The latest Enterprise Library information can be found at the Enterprise Library site. |
The Security Application Block is instrumented with the following Windows Management Instrumentation (WMI) events:
- AuthorizationCheckFailedEvent
- AuthorizationCheckPerformedEvent
- SecurityCacheReadPerformedEvent
- SecurityConfigurationFailureEvent
The following tables describe the properties of each WMI event.
AuthorizationCheckFailedEvent Properties
WMI property |
Description |
|---|---|
UserName |
The user name that failed authorization. |
TaskName |
The task that the user was not authorized to perform. |
InstanceName |
The ID of the authorization provider that refused authorization, as specified in the configuration file. |
UtcTimeStamp |
The time that the authorization attempt failed. |
AuthorizationCheckPerformedEvent Properties
WMI property |
Description |
|---|---|
UserName |
The user name that was checked. |
TaskName |
The task the user wanted to perform. |
InstanceName |
The ID of the authorization provider that performed the check, as specified in the configuration file. |
UtcTimeStamp |
The time that the authorization check occurred. |
Note
The AuthorizationCheckPerformedEvent WMI event is raised for each authorization check that occurs, not just for the ones that succeeded.
SecurityCacheReadPerformedEvent Properties
WMI property |
Description |
|---|---|
EntityType |
The entity type of the user, as specified in the configuration file. This can be an Identity object, a Profile object, or a Principal object. |
Token |
The identity token that was retrieved from the cache. |
InstanceName |
The ID of the security cache provider that was read, as specified in the configuration file. |
UtcTimeStamp |
The time that the security cache was read. |
SecurityConfigurationFailureEvent Properties
WMI property |
Description |
|---|---|
ExceptionMessage |
The message for the exception that was raised when the attempt to create or configure a security provider failed. |
InstanceName |
The ID of the security provider that could not be created or configured, as specified in the configuration file. |
UtcTimeStamp |
The time that the configuration failure occurred. |