#pragma classflags(64)
#pragma namespace("\\\\.\\root\\WMI")

[Dynamic,Description("Windows Winlogon Trace"),guid("{d451642c-63a6-11d7-9720-00b0d03e0347}"),locale("MS\\0x409")] 
class WinLogon : EventTrace
{
  [Description("Enable Flags"),ValueDescriptions{"Core Flag", "Setup Flag", "DataStore Flag", "Machine Flag", "Session Flag", "User Flag", "WMsg Flag", "Sas Flag", "StateTrace Flag", "Job Flag", "Timeout Flag", "Power Flag", "Logon Flag", "Logoff Flag", "Lock Flag", "Unlock Flag", "ChangePassword Flag", "ScreenSaver Flag", "Accessibility Flag", "SLActivate Flag"},DefineValues{"Core", "Setup", "DataStore", "Machine", "Session", "User", "WMsg", "Sas", "StateTrace", "Job", "Timeout", "Power", "Logon", "Logoff", "Lock", "Unlock", "ChangePassword", "ScreenSaver", "Accessibility", "SLActivate"},Values{"Core", "Setup", "DataStore", "Machine", "Session", "User", "WMsg", "Sas", "StateTrace", "Job", "Timeout", "Power", "Logon", "Logoff", "Lock", "Unlock", "ChangePassword", "ScreenSaver", "Accessibility", "SLActivate"}] uint32 Flags;
};
#pragma classflags(64)
#pragma namespace("\\\\.\\root\\WMI")
instance of __namespace{ name="ms_409";};
#pragma namespace("\\\\.\\root\\WMI\\ms_409")

[AMENDMENT, LOCALE("ms_409")] 
class WinLogon : EventTrace
{
  [ValueMap{"0x00000001", "0x00000002", "0x00000004", "0x00000008", "0x00000010", "0x00000020", "0x00000040", "0x00000080", "0x00000100", "0x00000200", "0x00000400", "0x00000800", "0x00001000", "0x00002000", "0x00004000", "0x00008000", "0x00010000", "0x00020000", "0x00040000", "0x00080000"} : Amended] uint32 Flags;
};