librpc/idl: Add authentication policy event IDs

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/librpc/idl/windows_event_ids.idl b/librpc/idl/windows_event_ids.idl
index 240ad9e56ff7a86ff8d684029211a87cf1a251b6..f482800d8972662c21a7a10f12a4d2a71e51cb21 100644 (file)
--- a/librpc/idl/windows_event_ids.idl
+++ b/librpc/idl/windows_event_ids.idl
@@ -28,6 +28,16 @@ interface windows_events
                EVT_ID_USER_REMOVED_FROM_UNIVERSAL_GROUP                = 4762
        } event_id_type;
 
+       /* See https://learn.microsoft.com/en-us/windows-server/security/credentials-protection-and-management/authentication-policies-and-authentication-policy-silos#BKMK_ErrorandEvents */
+       typedef [v1_enum,public] enum {
+               AUTH_EVT_ID_NONE                                        =    0,
+               AUTH_EVT_ID_NTLM_DEVICE_RESTRICTION                     =  101,
+               AUTH_EVT_ID_KERBEROS_DEVICE_RESTRICTION                 =  105,
+               AUTH_EVT_ID_KERBEROS_DEVICE_RESTRICTION_AUDIT           =  305,
+               AUTH_EVT_ID_KERBEROS_SERVER_RESTRICTION                 =  106,
+               AUTH_EVT_ID_KERBEROS_SERVER_RESTRICTION_AUDIT           =  306
+       } auth_event_id_type;
+
        typedef [v1_enum,public] enum {
                EVT_LOGON_INTERACTIVE           =  2,
                EVT_LOGON_NETWORK               =  3,