There are two separate events logged, always 1025 after 1024:
***
Log Name: Application
Source: Microsoft-Windows-Security-Licensing-SLC
Date: 3/4/2008 4:13:01 PM
Event ID: 1024
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: officevista
Description:
The hardware has changed.
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Security-Licensing-SLC"
Guid="{1FD7C1D2-D037-4620-8D29-B2C7E5FCC13A}" EventSourceName="Software
Licensing Service" />
<EventID Qualifiers="32768">1024</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2008-03-04T21:13:01.000Z" />
<EventRecordID>6874</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>officevista</Computer>
<Security />
</System>
<EventData>
<Binary>
66000000190038000000020004000100020001000100000002000100010024943ADD4A18
9A9BD43E3AC348E4AA7610D3EC5A1CC6F2F484C04E8DAC56E6F90D000100010300020A00
0301000402000500000602000700000802000903000A01000B00000C0A00380000000200
040001000200010001000000020001000100E8613ADD4A189A9BD43E3AC348E4AA76BAC9
A2097639F2F484C04E8DAC56E6F9</Binary>
</EventData>
</Event
***
And:
***
Log Name: Application
Source: Microsoft-Windows-Security-Licensing-SLC
Date: 3/4/2008 4:13:01 PM
Event ID: 1025
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: officevista
Description:
Grace period has been started. Grace days=3 Grace type=4.
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Security-Licensing-SLC"
Guid="{1FD7C1D2-D037-4620-8D29-B2C7E5FCC13A}" EventSourceName="Software
Licensing Service" />
<EventID Qualifiers="16384">1025</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2008-03-04T21:13:01.000Z" />
<EventRecordID>6875</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>officevista</Computer>
<Security />
</System>
<EventData>
<Data>3</Data>
<Data>4</Data>
</EventData>
</Event>
***
--
Giftzwerg
***
"The country might decide that it prefers, yes, a Republican - say, 9/11
veteran Rudy Giuliani - to a freshman senator who does not instinctively
understand why an American president does not share the honor of his
office with a malevolent clown like Hugo Chavez."
- Charles Krauthammer