Logins are associated to users by the securityidentifier (SID).
登录通过安全识别符 (SID) 与用户关联。
2
This call includes the source securityidentifier (sid), the security class (constructed from the details of the requested operation), the particular socket call, and optional auxiliary audit data.