#define EVENT_TRK_SERVICE_VOLUME_CREATE 0x400030D9L
MessageId: EVENT_TRK_SERVICE_VOLUME_CREATE MessageText: A new volume ID has been assigned for %1:%n%2%n%n This ID is used by Distributed Link Tracking to automatically repair file links, such as Shell Shortcuts and OLE links, when for some reason those links become broken. If there previously were links to files on this volume that are broken, they might not be automatically repairable.
Lanman Server Events (2000 - 2999)
    2000-2499 are generated by the server driver (kernel mode)
    2500-2999 are generated by the server service (user mode)
Server driver events, issued from kernel mode. 
 Values are 32 bit values laid out as follows:
  3 3 2 2 2 2 2 2 2 2 2 2 1 1 1 1 1 1 1 1 1 1
  1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0
 +---+-+-+-----------------------+-------------------------------+
 |Sev|C|R|     Facility          |               Code            |
 +---+-+-+-----------------------+-------------------------------+
 where
     Sev - is the severity code
         00 - Success
         01 - Informational
         10 - Warning
         11 - Error
     C - is the Customer code flag
     R - is a reserved bit
     Facility - is the facility code
     Code - is the facility's status code