2013/06/20 14:08:47.990 | Debug | OnSessionChange | Thread 6 | Session has been changed. Reason: SessionLock <-- from SessionChangeDescription
2013/06/20 14:08:47.990 | Debug | GetSessionData | Thread 6 | Try to get session info. SessionId: 0 <-- from SessionChangeDescription
2013/06/20 14:08:48.020 | Trace | LogLsaSessions | Thread 6 | Number of LSA sessions: 5
2013/06/20 14:08:48.020 | Trace | LogLsaSessions | Thread 6 | SessionId: 0, Username: manager, LogonType: Interactive, LogonTime: 6/20/2013 7:05:21 AM
2013/06/20 14:08:48.020 | Trace | LogLsaSessions | Thread 6 | SessionId: 0, Username: ANONYMOUS LOGON, LogonType: Network, LogonTime: 6/20/2013 7:03:10 AM
2013/06/20 14:08:48.020 | Trace | LogLsaSessions | Thread 6 | SessionId: 0, Username: LOCAL SERVICE, LogonType: Service, LogonTime: 6/20/2013 7:02:59 AM
2013/06/20 14:08:48.020 | Trace | LogLsaSessions | Thread 6 | SessionId: 0, Username: NETWORK SERVICE, LogonType: Service, LogonTime: 6/20/2013 7:02:59 AM
2013/06/20 14:08:48.020 | Trace | LogLsaSessions | Thread 6 | SessionId: 0, Username: XPEN$, LogonType: 0, LogonTime: 6/20/2013 7:02:58 AM
2013/06/20 14:08:48.020 | Trace | LogLsaSessions | Thread 6 | ========== LSA ==========
2013/06/20 14:08:48.020 | Debug | GetSessionData | Thread 6 | Return session from cache. SessionId: 0, User: manager
...
2013/06/20 14:08:52.466 | Debug | OnSessionChange | Thread 6 | Session has been changed. Reason: ConsoleDisconnect
2013/06/20 14:08:52.466 | Debug | EventHandler | Thread 6 | Session event was received. Type: Disconnect
2013/06/20 14:08:52.466 | Debug | GetSessionData | Thread 6 | Try to get session info. SessionId: 0
2013/06/20 14:08:52.476 | Trace | LogLsaSessions | Thread 6 | Number of LSA sessions: 5
2013/06/20 14:08:52.476 | Trace | LogLsaSessions | Thread 6 | SessionId: 0, Username: manager, LogonType: Interactive, LogonTime: 6/20/2013 7:05:21 AM
2013/06/20 14:08:52.476 | Trace | LogLsaSessions | Thread 6 | SessionId: 0, Username: ANONYMOUS LOGON, LogonType: Network, LogonTime: 6/20/2013 7:03:10 AM
2013/06/20 14:08:52.476 | Trace | LogLsaSessions | Thread 6 | SessionId: 0, Username: LOCAL SERVICE, LogonType: Service, LogonTime: 6/20/2013 7:02:59 AM
2013/06/20 14:08:52.887 | Trace | LogLsaSessions | Thread 6 | SessionId: 0, Username: NETWORK SERVICE, LogonType: Service, LogonTime: 6/20/2013 7:02:59 AM
2013/06/20 14:08:52.887 | Trace | LogLsaSessions | Thread 6 | SessionId: 0, Username: XPEN$, LogonType: 0, LogonTime: 6/20/2013 7:02:58 AM
2013/06/20 14:08:52.887 | Trace | LogLsaSessions | Thread 6 | ========== LSA ==========
2013/06/20 14:08:52.887 | Debug | GetSessionData | Thread 6 | Return session from cache. SessionId: 0, User: manager
2013/06/20 14:08:52.897 | Debug | RemoveSessionFromCac | Thread 6 | Remove session from cache. SessionId: 0
...
2013/06/20 14:08:54.229 | Debug | OnSessionChange | Thread 6 | Session has been changed. Reason: SessionUnlock <-- from SessionChangeDescription
2013/06/20 14:08:54.229 | Debug | GetSessionData | Thread 6 | Try to get session info. SessionId: 1381303103 <-- from SessionChangeDescription
2013/06/20 14:08:54.259 | Trace | LogLsaSessions | Thread 6 | Number of LSA sessions: 6
2013/06/20 14:08:54.269 | Trace | LogLsaSessions | Thread 6 | SessionId: 1, Username: user, LogonType: Interactive, LogonTime: 6/20/2013 7:08:53 AM
2013/06/20 14:08:54.269 | Trace | LogLsaSessions | Thread 6 | SessionId: 0, Username: manager, LogonType: Interactive, LogonTime: 6/20/2013 7:05:21 AM
2013/06/20 14:08:54.269 | Trace | LogLsaSessions | Thread 6 | SessionId: 0, Username: ANONYMOUS LOGON, LogonType: Network, LogonTime: 6/20/2013 7:03:10 AM
2013/06/20 14:08:54.269 | Trace | LogLsaSessions | Thread 6 | SessionId: 0, Username: LOCAL SERVICE, LogonType: Service, LogonTime: 6/20/2013 7:02:59 AM
2013/06/20 14:08:54.269 | Trace | LogLsaSessions | Thread 6 | SessionId: 0, Username: NETWORK SERVICE, LogonType: Service, LogonTime: 6/20/2013 7:02:59 AM
2013/06/20 14:08:54.269 | Trace | LogLsaSessions | Thread 6 | SessionId: 0, Username: XPEN$, LogonType: 0, LogonTime: 6/20/2013 7:02:58 AM
2013/06/20 14:08:54.269 | Trace | LogLsaSessions | Thread 6 | ========== LSA ==========
2013/06/20 14:08:54.269 | Trace | LogAllSessions | Thread 6 | Event session id: 1381303103. All available sessions:
2013/06/20 14:08:54.279 | Trace | LogAllSessions | Thread 6 | SessionId: 0
2013/06/20 14:08:54.279 | Trace | LogAllSessions | Thread 6 | SessionId: 65536
2013/06/20 14:08:54.279 | Trace | LogAllSessions | Thread 6 | SessionId: 1
2013/06/20 14:08:54.279 | Warn | EventHandler | Thread 6 | System.ComponentModel.Win32Exception (0x80004005): The specified session cannot be found
...
2013/06/20 14:08:54.279 | Debug | OnSessionChange | Thread 6 | Session has been changed. Reason: ConsoleConnect
2013/06/20 14:08:54.349 | Debug | GetSessionData | Thread 6 | Try to get session info. SessionId: 1381303103
2013/06/20 14:08:54.369 | Trace | LogLsaSessions | Thread 6 | Number of LSA sessions: 6
2013/06/20 14:08:54.369 | Trace | LogLsaSessions | Thread 6 | SessionId: 1, Username: user, LogonType: Interactive, LogonTime: 6/20/2013 7:08:53 AM
2013/06/20 14:08:54.369 | Trace | LogLsaSessions | Thread 6 | SessionId: 0, Username: manager, LogonType: Interactive, LogonTime: 6/20/2013 7:05:21 AM
2013/06/20 14:08:54.369 | Trace | LogLsaSessions | Thread 6 | SessionId: 0, Username: ANONYMOUS LOGON, LogonType: Network, LogonTime: 6/20/2013 7:03:10 AM
2013/06/20 14:08:54.369 | Trace | LogLsaSessions | Thread 6 | SessionId: 0, Username: LOCAL SERVICE, LogonType: Service, LogonTime: 6/20/2013 7:02:59 AM
2013/06/20 14:08:54.369 | Trace | LogLsaSessions | Thread 6 | SessionId: 0, Username: NETWORK SERVICE, LogonType: Service, LogonTime: 6/20/2013 7:02:59 AM
2013/06/20 14:08:54.369 | Trace | LogLsaSessions | Thread 6 | SessionId: 0, Username: XPEN$, LogonType: 0, LogonTime: 6/20/2013 7:02:58 AM
2013/06/20 14:08:54.369 | Trace | LogLsaSessions | Thread 6 | ========== LSA ==========
2013/06/20 14:08:54.369 | Trace | LogAllSessions | Thread 6 | Event session id: 1381303103. All available sessions:
2013/06/20 14:08:54.399 | Trace | LogAllSessions | Thread 6 | SessionId: 0
2013/06/20 14:08:54.399 | Trace | LogAllSessions | Thread 6 | SessionId: 65536
2013/06/20 14:08:54.399 | Trace | LogAllSessions | Thread 6 | SessionId: 1
2013/06/20 14:08:54.449 | Warn | EventHandler | Thread 6 | System.ComponentModel.Win32Exception (0x80004005): The specified session cannot be found
at Cassia.Impl.NativeMethodsHelper.GetWinStationInformation(ITerminalServerHandle server, Int32 sessionId)
at Cassia.Impl.TerminalServicesSession.LoadWinStationInformationProperties()
at Cassia.Impl.GroupLazyLoadedProperty`1.get_Value()
at Cassia.Impl.TerminalServicesSession.get_UserName()
...
2013/06/20 14:08:54.649 | Debug | OnSessionChange | Thread 6 | Session has been changed. Reason: SessionLogon
2013/06/20 14:08:54.649 | Debug | EventHandler | Thread 6 | Session event was received. Type: Logon
2013/06/20 14:08:54.649 | Debug | GetSessionData | Thread 6 | Try to get session info. SessionId: 1
2013/06/20 14:08:54.659 | Trace | LogLsaSessions | Thread 6 | Number of LSA sessions: 6
2013/06/20 14:08:54.659 | Trace | LogLsaSessions | Thread 6 | SessionId: 1, Username: user, LogonType: Interactive, LogonTime: 6/20/2013 7:08:53 AM
2013/06/20 14:08:54.659 | Trace | LogLsaSessions | Thread 6 | SessionId: 0, Username: manager, LogonType: Interactive, LogonTime: 6/20/2013 7:05:21 AM
2013/06/20 14:08:54.659 | Trace | LogLsaSessions | Thread 6 | SessionId: 0, Username: ANONYMOUS LOGON, LogonType: Network, LogonTime: 6/20/2013 7:03:10 AM
2013/06/20 14:08:54.659 | Trace | LogLsaSessions | Thread 6 | SessionId: 0, Username: LOCAL SERVICE, LogonType: Service, LogonTime: 6/20/2013 7:02:59 AM
2013/06/20 14:08:54.659 | Trace | LogLsaSessions | Thread 6 | SessionId: 0, Username: NETWORK SERVICE, LogonType: Service, LogonTime: 6/20/2013 7:02:59 AM
2013/06/20 14:08:54.669 | Trace | LogLsaSessions | Thread 6 | SessionId: 0, Username: XPEN$, LogonType: 0, LogonTime: 6/20/2013 7:02:58 AM
2013/06/20 14:08:54.669 | Trace | LogLsaSessions | Thread 6 | ========== LSA ==========
2013/06/20 14:08:54.669 | Trace | LogAllSessions | Thread 6 | Event session id: 1. All available sessions:
2013/06/20 14:08:54.669 | Trace | LogAllSessions | Thread 6 | SessionId: 0
2013/06/20 14:08:54.669 | Trace | LogAllSessions | Thread 6 | SessionId: 65536
2013/06/20 14:08:54.669 | Trace | LogAllSessions | Thread 6 | SessionId: 1
2013/06/20 14:08:54.669 | Debug | AddToCache | Thread 6 | SessionId: 1, Username: user, Domain: XPEN
2013/06/20 14:08:54.669 | Debug | AddToCache | Thread 6 | Session added to cache: 1
...
2013/06/20 14:10:45.529 | Debug | OnSessionChange | Thread 4 | Session has been changed. Reason: SessionLock
2013/06/20 14:10:45.529 | Debug | EventHandler | Thread 4 | Session event was received. Type: Lock
2013/06/20 14:10:45.529 | Debug | GetSessionData | Thread 4 | Try to get session info. SessionId: 1
2013/06/20 14:10:45.539 | Trace | LogLsaSessions | Thread 4 | Number of LSA sessions: 6
2013/06/20 14:10:45.539 | Trace | LogLsaSessions | Thread 4 | SessionId: 1, Username: user, LogonType: Interactive, LogonTime: 6/20/2013 7:08:53 AM
2013/06/20 14:10:45.539 | Trace | LogLsaSessions | Thread 4 | SessionId: 0, Username: manager, LogonType: Interactive, LogonTime: 6/20/2013 7:05:21 AM
2013/06/20 14:10:45.539 | Trace | LogLsaSessions | Thread 4 | SessionId: 0, Username: ANONYMOUS LOGON, LogonType: Network, LogonTime: 6/20/2013 7:03:10 AM
2013/06/20 14:10:45.539 | Trace | LogLsaSessions | Thread 4 | SessionId: 0, Username: LOCAL SERVICE, LogonType: Service, LogonTime: 6/20/2013 7:02:59 AM
2013/06/20 14:10:45.549 | Trace | LogLsaSessions | Thread 4 | SessionId: 0, Username: NETWORK SERVICE, LogonType: Service, LogonTime: 6/20/2013 7:02:59 AM
2013/06/20 14:10:45.549 | Trace | LogLsaSessions | Thread 4 | SessionId: 0, Username: XPEN$, LogonType: 0, LogonTime: 6/20/2013 7:02:58 AM
2013/06/20 14:10:45.549 | Trace | LogLsaSessions | Thread 4 | ========== LSA ==========
2013/06/20 14:10:45.549 | Debug | GetSessionData | Thread 4 | Return session from cache. SessionId: 1, User: user
...
2013/06/20 14:10:49.905 | Debug | OnSessionChange | Thread 4 | Session has been changed. Reason: ConsoleDisconnect
2013/06/20 14:10:49.905 | Debug | EventHandler | Thread 4 | Session event was received. Type: Disconnect
2013/06/20 14:10:49.905 | Debug | GetSessionData | Thread 4 | Try to get session info. SessionId: 1
2013/06/20 14:10:50.025 | Trace | LogLsaSessions | Thread 4 | Number of LSA sessions: 7
2013/06/20 14:10:50.025 | Trace | LogLsaSessions | Thread 4 | SessionId: 1, Username: manager, LogonType: Interactive, LogonTime: 6/20/2013 7:10:49 AM
2013/06/20 14:10:50.025 | Trace | LogLsaSessions | Thread 4 | SessionId: 1, Username: user, LogonType: Interactive, LogonTime: 6/20/2013 7:08:53 AM
2013/06/20 14:10:50.025 | Trace | LogLsaSessions | Thread 4 | SessionId: 0, Username: manager, LogonType: Interactive, LogonTime: 6/20/2013 7:05:21 AM
2013/06/20 14:10:50.025 | Trace | LogLsaSessions | Thread 4 | SessionId: 0, Username: ANONYMOUS LOGON, LogonType: Network, LogonTime: 6/20/2013 7:03:10 AM
2013/06/20 14:10:50.025 | Trace | LogLsaSessions | Thread 4 | SessionId: 0, Username: LOCAL SERVICE, LogonType: Service, LogonTime: 6/20/2013 7:02:59 AM
2013/06/20 14:10:50.025 | Trace | LogLsaSessions | Thread 4 | SessionId: 0, Username: NETWORK SERVICE, LogonType: Service, LogonTime: 6/20/2013 7:02:59 AM
2013/06/20 14:10:50.025 | Trace | LogLsaSessions | Thread 4 | SessionId: 0, Username: XPEN$, LogonType: 0, LogonTime: 6/20/2013 7:02:58 AM
2013/06/20 14:10:50.025 | Trace | LogLsaSessions | Thread 4 | ========== LSA ==========
2013/06/20 14:10:50.035 | Debug | GetSessionData | Thread 4 | Return session from cache. SessionId: 1, User: user
2013/06/20 14:10:50.035 | Debug | RemoveSessionFromCac | Thread 4 | Remove session from cache. SessionId: 1
...
2013/06/20 14:10:51.167 | Debug | OnSessionChange | Thread 4 | Session has been changed. Reason: ConsoleConnect
2013/06/20 14:10:51.167 | Debug | EventHandler | Thread 4 | Session event was received. Type: Connect
2013/06/20 14:10:51.167 | Debug | GetSessionData | Thread 4 | Try to get session info. SessionId: 1381303103
2013/06/20 14:10:51.177 | Trace | LogLsaSessions | Thread 4 | Number of LSA sessions: 6
2013/06/20 14:10:51.177 | Trace | LogLsaSessions | Thread 4 | SessionId: 1, Username: user, LogonType: Interactive, LogonTime: 6/20/2013 7:08:53 AM
2013/06/20 14:10:51.177 | Trace | LogLsaSessions | Thread 4 | SessionId: 0, Username: manager, LogonType: Interactive, LogonTime: 6/20/2013 7:05:21 AM
2013/06/20 14:10:51.177 | Trace | LogLsaSessions | Thread 4 | SessionId: 0, Username: ANONYMOUS LOGON, LogonType: Network, LogonTime: 6/20/2013 7:03:10 AM
2013/06/20 14:10:51.177 | Trace | LogLsaSessions | Thread 4 | SessionId: 0, Username: LOCAL SERVICE, LogonType: Service, LogonTime: 6/20/2013 7:02:59 AM
2013/06/20 14:10:51.177 | Trace | LogLsaSessions | Thread 4 | SessionId: 0, Username: NETWORK SERVICE, LogonType: Service, LogonTime: 6/20/2013 7:02:59 AM
2013/06/20 14:10:51.177 | Trace | LogLsaSessions | Thread 4 | SessionId: 0, Username: XPEN$, LogonType: 0, LogonTime: 6/20/2013 7:02:58 AM
2013/06/20 14:10:51.177 | Trace | LogLsaSessions | Thread 4 | ========== LSA ==========
2013/06/20 14:10:51.177 | Trace | LogAllSessions | Thread 4 | Event session id: 1381303103. All available sessions:
2013/06/20 14:10:51.177 | Trace | LogAllSessions | Thread 4 | SessionId: 0
2013/06/20 14:10:51.177 | Trace | LogAllSessions | Thread 4 | SessionId: 65536
2013/06/20 14:10:51.177 | Trace | LogAllSessions | Thread 4 | SessionId: 1
2013/06/20 14:10:51.187 | Warn | EventHandler | Thread 4 | System.ComponentModel.Win32Exception (0x80004005): The specified session cannot be found
at Cassia.Impl.NativeMethodsHelper.GetWinStationInformation(ITerminalServerHandle server, Int32 sessionId)
at Cassia.Impl.TerminalServicesSession.LoadWinStationInformationProperties()
at Cassia.Impl.GroupLazyLoadedProperty`1.get_Value()
at Cassia.Impl.TerminalServicesSession.get_UserName()
...
2013/06/20 14:10:51.197 | Debug | OnSessionChange | Thread 4 | Session has been changed. Reason: SessionUnlock
2013/06/20 14:10:51.207 | Debug | GetSessionData | Thread 4 | Try to get session info. SessionId: 1381303103
2013/06/20 14:10:51.207 | Trace | LogLsaSessions | Thread 4 | Number of LSA sessions: 6
2013/06/20 14:10:51.207 | Trace | LogLsaSessions | Thread 4 | SessionId: 1, Username: user, LogonType: Interactive, LogonTime: 6/20/2013 7:08:53 AM
2013/06/20 14:10:51.207 | Trace | LogLsaSessions | Thread 4 | SessionId: 0, Username: manager, LogonType: Interactive, LogonTime: 6/20/2013 7:05:21 AM
2013/06/20 14:10:51.207 | Trace | LogLsaSessions | Thread 4 | SessionId: 0, Username: ANONYMOUS LOGON, LogonType: Network, LogonTime: 6/20/2013 7:03:10 AM
2013/06/20 14:10:51.207 | Trace | LogLsaSessions | Thread 4 | SessionId: 0, Username: LOCAL SERVICE, LogonType: Service, LogonTime: 6/20/2013 7:02:59 AM
2013/06/20 14:10:51.207 | Trace | LogLsaSessions | Thread 4 | SessionId: 0, Username: NETWORK SERVICE, LogonType: Service, LogonTime: 6/20/2013 7:02:59 AM
2013/06/20 14:10:51.207 | Trace | LogLsaSessions | Thread 4 | SessionId: 0, Username: XPEN$, LogonType: 0, LogonTime: 6/20/2013 7:02:58 AM
2013/06/20 14:10:51.207 | Trace | LogLsaSessions | Thread 4 | ========== LSA ==========
2013/06/20 14:10:51.207 | Trace | LogAllSessions | Thread 4 | Event session id: 1381303103. All available sessions:
2013/06/20 14:10:51.207 | Trace | LogAllSessions | Thread 4 | SessionId: 0
2013/06/20 14:10:51.207 | Trace | LogAllSessions | Thread 4 | SessionId: 65536
2013/06/20 14:10:51.207 | Trace | LogAllSessions | Thread 4 | SessionId: 1
2013/06/20 14:10:51.207 | Warn | EventHandler | Thread 4 | System.ComponentModel.Win32Exception (0x80004005): The specified session cannot be found
at Cassia.Impl.NativeMethodsHelper.GetWinStationInformation(ITerminalServerHandle server, Int32 sessionId)
at Cassia.Impl.TerminalServicesSession.LoadWinStationInformationProperties()
at Cassia.Impl.GroupLazyLoadedProperty`1.get_Value()
at Cassia.Impl.TerminalServicesSession.get_UserName()