The TS_PROCESS_INFORMATION_NT4 structure is returned by RpcWinStationEnumerateProcesses.

 typedef struct _TS_PROCESS_INFORMATION_NT4 {
   ULONG MagicNumber;
   ULONG LogonId;
   PVOID ProcessSid;
   ULONG Pad;

MagicNumber: MUST be set to TS_PROCESS_INFO_MAGIC_NT4 (0x23495452).

LogonId: The session ID of the process.

ProcessSid: The security identifier (SID), as specified in [MS-DTYP] section 2.4.2, of the owner of the process.

Pad: MUST be set to 0.