A user who is logged on tried to create another logon session with a different user's credentials. Typically, this occurs when the user runs the RUNAS command and specifies a different set of credentials.
- The Logged on user fields specify the user's original credentials.
- The Target User fields specify the credentials that the user supplied for the new logon session.
- The Caller Process ID field specifies the process that made the logon request with the new credentials.
- The Source Network Address and Source Port fields specify the source IP address and source port number for the remote computer that sent the logon request, if applicable.