A trusted logon process has registered with the Local Security Authority. This logon process will be trusted to submit logon requests. Logon Process Name: %1.
An occurrence of event 515 is logged at startup and occasionally
afterwards for each logon process on the system.
A logon process is a trusted part of the operating system and handles the
overall logon function for different logon methods including
incoming RAS connections, RunAs, interactive logons initiated
by CtrlAltDel, and network logons (as in drive mappings).
Because logon processes are such trusted functions, a rogue
logon process would be a devastating security breach--but an
improbable one, given the effort and skill required.
Standard logon process for Windows Server 2003:
KSecDD
RASMAN
Secondary Logon Service
LAN Manager Workstation Service
CHAP
DCOMSCM
Winlogon
Winlogon\MSGina
