## TermDD

Seen on:
* Windows 2003
* Windows XP 64-bit

<table border="1" class="docutils">
  <tbody>
    <tr>
      <td><b>Log type(s):</b></td>
      <td>System</td>
    </tr>
    <tr>
      <td><b>Log source(s):</b></td>
      <td>TermDD</td>
    </tr>
    <tr>
      <td><b>Event message file(s):</b></td>
      <td>%SystemRoot%\System32\ntdll.dll</td>
    </tr>
    <tr>
      <td>&nbsp;</td>
      <td>%SystemRoot%\System32\ws03res.dll</td>
    </tr>
  </tbody>
</table>

&nbsp;

Seen on:
* Windows XP 32-bit
* Windows Vista
* Windows 2008
* Windows 7

<table border="1" class="docutils">
  <tbody>
    <tr>
      <td><b>Log type(s):</b></td>
      <td>System</td>
    </tr>
    <tr>
      <td><b>Log source(s):</b></td>
      <td>TermDD</td>
    </tr>
    <tr>
      <td><b>Event message file(s):</b></td>
      <td>%SystemRoot%\system32\ntdll.dll</td>
    </tr>
  </tbody>
</table>

&nbsp;