Microsoft-Client-Licensing-Platform
61 events across 2 channels
Event ID 1 — [Service] Inititialize started
Message
Event ID 2 — [Service] Initialize complete
Message
Event ID 3 — [Service] Shutdown started
Message
Event ID 4 — [Service] Shutdown complete
Message
Event ID 7 — [ServiceCall] IFS
Message
Event ID 8 — [ServiceCall] IFD
Message
Event ID 9 — [ServiceCall] IFS
Message
Event ID 10 — [ServiceCall] IFD
Message
Event ID 11 — [ServiceCall] IFS
Message
Event ID 12 — [ServiceCall] IFD
Message
Event ID 13 — [ServiceCall] IFS
Message
Event ID 14 — [ServiceCall] IFD
Message
Event ID 15 — [ServiceCall] IFS
Message
Event ID 16 — [ServiceCall] IFD
Message
Event ID 17 — [ServiceCall] IFS
Message
Event ID 18 — [ServiceCall] IFD
Message
Event ID 19 — [ServiceCall] Execute start for id.
Message
Fields
| Name | Description |
|---|---|
ID | — |
Event ID 20 — [ServiceCall] Execute done for id.
Message
Fields
| Name | Description |
|---|---|
ID | — |
Event ID 100 — ClipSVC service is starting.
Message
Fields
| Name | Description |
|---|---|
Data | ClipSVC service is starting. Caller. |
Example Event
system:
provider: Microsoft-Client-Licensing-Platform
guid: B6CC0D55-9ECC-49A8-B929-2B9022426F2A
event_source_name: ''
event_id: 100
version: 0
level: 4
task: 0
opcode: 0
keywords: 2305843009213693953
time_created: '2023-11-06T06:22:33.819234+00:00'
event_record_id: 261
correlation: {}
execution:
process_id: 1844
thread_id: 1864
channel: Microsoft-Client-Licensing-Platform/Admin
computer: WinDev2310Eval
security:
user_id: S-1-5-18
event_data:
Data:
Name: Data
Value: <none>
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 101 — ClipSVC service is running.
Message
Fields
| Name | Description |
|---|---|
Data | — |
Example Event
system:
provider: Microsoft-Client-Licensing-Platform
guid: B6CC0D55-9ECC-49A8-B929-2B9022426F2A
event_source_name: ''
event_id: 101
version: 0
level: 4
task: 0
opcode: 0
keywords: 2305843009213693953
time_created: '2023-11-06T06:22:33.825032+00:00'
event_record_id: 262
correlation: {}
execution:
process_id: 1844
thread_id: 1868
channel: Microsoft-Client-Licensing-Platform/Admin
computer: WinDev2310Eval
security:
user_id: S-1-5-18
event_data:
Data:
Name: Data
Value: 10.0.22621.1635
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 102 — ClipSVC service has shutdown.
Message
Example Event
system:
provider: Microsoft-Client-Licensing-Platform
guid: B6CC0D55-9ECC-49A8-B929-2B9022426F2A
event_source_name: ''
event_id: 102
version: 0
level: 4
task: 0
opcode: 0
keywords: 2305843009213693953
time_created: '2023-10-26T04:20:51.389352+00:00'
event_record_id: 71
correlation: {}
execution:
process_id: 1572
thread_id: 1852
channel: Microsoft-Client-Licensing-Platform/Admin
computer: WIN-OQ6R0RVA4NF
security:
user_id: S-1-5-18
event_data: {}
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 103 — ClipSVC service initialization failed - result code.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 104 — ClipSVC was restarted while there is a pending rearm reboot required.
Message
Fields
| Name | Description |
|---|---|
Data | ClipSVC was restarted while there is a pending rearm reboot required. Caller. |
Example Event
system:
provider: Microsoft-Client-Licensing-Platform
guid: B6CC0D55-9ECC-49A8-B929-2B9022426F2A
event_source_name: ''
event_id: 104
version: 0
level: 3
task: 0
opcode: 0
keywords: 2305843009213693953
time_created: '2023-10-25T22:55:37.954464+00:00'
event_record_id: 258
correlation: {}
execution:
process_id: 2244
thread_id: 2312
channel: Microsoft-Client-Licensing-Platform/Admin
computer: WinDevEval
security:
user_id: S-1-5-18
event_data:
Data:
Name: Data
Value: TriggerStarted
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 106 — License successfully uninstalled for package %1 (user %2), license Id %3, file Id %4.
Message
Fields
| Name | Description |
|---|---|
PackageName | — |
UserId | — |
LicenseId | — |
AssociateId | — |
Event ID 107 — License successfully uninstalled for file Id %1.
Message
Fields
| Name | Description |
|---|---|
Data | — |
Event ID 110 — License install failed for license type: %1 Result code: %2.
Message
Fields
| Name | Description |
|---|---|
Type | License install failed for license type. |
HRESULT | Result code. |
Example Event
system:
provider: Microsoft-Client-Licensing-Platform
guid: B6CC0D55-9ECC-49A8-B929-2B9022426F2A
event_source_name: ''
event_id: 110
version: 0
level: 2
task: 0
opcode: 0
keywords: 2305843009213693953
time_created: '2023-11-06T06:22:34.172221+00:00'
event_record_id: 338
correlation: {}
execution:
process_id: 1844
thread_id: 1868
channel: Microsoft-Client-Licensing-Platform/Admin
computer: WinDev2310Eval
security:
user_id: S-1-5-18
event_data:
Type: "\x01"
HRESULT: 3225380353
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 111 — License install failed for license Id %1 Type: %2 Package (if available): %3 User Id (if available): %4 Result code: %5.
Message
Fields
| Name | Description |
|---|---|
Type | — |
Package_if_available | — |
User_Id_if_available | Package (if available). |
Result_code | User Id (if available). |
LicenseId | — |
PackageName | — |
UserId | — |
HRESULT | — |
Event ID 112 — License install storage failed for license Id %1 Type: %2 Package (if available): %3 User Id(if available): %4 Result code: %5.
Message
Fields
| Name | Description |
|---|---|
Type | — |
Package_if_available | — |
User_Idif_available | Package (if available). |
Result_code | User Id(if available). |
LicenseId | — |
PackageName | — |
UserId | — |
HRESULT | — |
Event ID 113 — License refresh failed for license Id %1 Type: %2 Package (if available): %3 User Id (if available): %4 Result code: %5.
Message
Fields
| Name | Description |
|---|---|
Type | — |
Package_if_available | — |
User_Id_if_available | Package (if available). |
Result_code | User Id (if available). |
LicenseId | — |
PackageName | — |
UserId | — |
HRESULT | — |
Event ID 114 — Unable to remove matching ClipSp data for license Id %1 Type: %2 Package (if available): %3 User Id (if available): %4 Result code: %5.
Message
Fields
| Name | Description |
|---|---|
Type | — |
Package_if_available | — |
User_Id_if_available | Package (if available). |
Result_code | User Id (if available). |
LicenseId | — |
PackageName | — |
UserId | — |
HRESULT | — |
Event ID 115 — License successfully installed for package %1.
Message
Fields
| Name | Description |
|---|---|
PackageName | — |
UserId | User Id (if available). |
Type | — |
LicenseId | — |
AssociateId | — |
Example Event
system:
provider: Microsoft-Client-Licensing-Platform
guid: B6CC0D55-9ECC-49A8-B929-2B9022426F2A
event_source_name: ''
event_id: 115
version: 0
level: 4
task: 0
opcode: 0
keywords: 2305843009213693953
time_created: '2023-11-06T06:22:33.878784+00:00'
event_record_id: 264
correlation: {}
execution:
process_id: 1844
thread_id: 1868
channel: Microsoft-Client-Licensing-Platform/Admin
computer: WinDev2310Eval
security:
user_id: S-1-5-18
event_data:
PackageName: ''
UserId: ''
Type: "\x05"
LicenseId: 61afd6a2-d7c3-8d25-36c2-0c2c47e3aca8
AssociateId: 61afd6a2-d7c3-8d25-36c2-0c2c47e3aca8
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 116 — Application license successfully installed.
Message
Fields
| Name | Description |
|---|---|
PackageName | Package. |
UserId | User Id (if available). |
LicenseId | — |
AssociateId | — |
Example Event
system:
provider: Microsoft-Client-Licensing-Platform
guid: B6CC0D55-9ECC-49A8-B929-2B9022426F2A
event_source_name: ''
event_id: 116
version: 0
level: 4
task: 0
opcode: 0
keywords: 2305843009213693953
time_created: '2023-11-06T06:22:34.164301+00:00'
event_record_id: 335
correlation: {}
execution:
process_id: 1844
thread_id: 1868
channel: Microsoft-Client-Licensing-Platform/Admin
computer: WinDev2310Eval
security:
user_id: S-1-5-18
event_data:
PackageName: clipchamp.clipchamp_yxz26nhyzhsrt
UserId: 'NULL'
LicenseId: ad2bdefa-5e7a-790f-d172-edfe3fd8a9e4
AssociateId: ad2bdefa-5e7a-790f-d172-edfe3fd8a9e4
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 117 — Lease successfully installed.
Message
Fields
| Name | Description |
|---|---|
PackageName | Package (if available). |
UserId | UserId (if available). |
LicenseId | — |
AssociateId | — |
Example Event
system:
provider: Microsoft-Client-Licensing-Platform
guid: B6CC0D55-9ECC-49A8-B929-2B9022426F2A
event_source_name: ''
event_id: 117
version: 0
level: 4
task: 0
opcode: 0
keywords: 2305843009213693953
time_created: '2023-11-06T06:22:34.170998+00:00'
event_record_id: 337
correlation: {}
execution:
process_id: 1844
thread_id: 1868
channel: Microsoft-Client-Licensing-Platform/Admin
computer: WinDev2310Eval
security:
user_id: S-1-5-18
event_data:
PackageName: Microsoft.GamingApp_8wekyb3d8bbwe
UserId: 'NULL'
LicenseId: b0d13c54-788d-a8a1-6380-3468517deff1
AssociateId: b0d13c54-788d-a8a1-6380-3468517deff1
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 118 — Device license successfully installed.
Message
Fields
| Name | Description |
|---|---|
LicenseId | — |
AssociateId | — |
DeviceId | — |
Example Event
system:
provider: Microsoft-Client-Licensing-Platform
guid: B6CC0D55-9ECC-49A8-B929-2B9022426F2A
event_source_name: ''
event_id: 118
version: 0
level: 4
task: 0
opcode: 0
keywords: 2305843009213693953
time_created: '2023-10-25T22:02:00.371331+00:00'
event_record_id: 239
correlation: {}
execution:
process_id: 6564
thread_id: 6612
channel: Microsoft-Client-Licensing-Platform/Admin
computer: WinDevEval
security:
user_id: S-1-5-18
event_data:
LicenseId: 3252b20c-d425-4711-8cc5-b2f53c830b76
AssociateId: 3252b20c-d425-4711-8cc5-b2f53c830b76
DeviceId: 76629F140D001800
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 119 — UnlockToken install succeeded for license Id %1 Type: %2.
Message
Fields
| Name | Description |
|---|---|
Type | — |
LicenseId | — |
Event ID 120 — UnlockToken install failed for license Id %1 Type: %2 Package (if available): %3 User Id (if available): %4 Result code: %5.
Message
Fields
| Name | Description |
|---|---|
Type | — |
Package_if_available | — |
User_Id_if_available | Package (if available). |
Result_code | User Id (if available). |
LicenseId | — |
PackageName | — |
UserId | — |
HRESULT | — |
Event ID 121 — Operation %1 failed invoked from %2 failed because a reboot is required post rearm.
Message
Fields
| Name | Description |
|---|---|
opId | — |
Caller | — |
Event ID 150 — Clip service has been rearmed.
Message
Fields
| Name | Description |
|---|---|
Data | Clip service has been rearmed. Result code. |
Example Event
system:
provider: Microsoft-Client-Licensing-Platform
guid: B6CC0D55-9ECC-49A8-B929-2B9022426F2A
event_source_name: ''
event_id: 150
version: 0
level: 4
task: 0
opcode: 0
keywords: 2305843009213693953
time_created: '2023-10-25T22:55:37.878222+00:00'
event_record_id: 255
correlation: {}
execution:
process_id: 2684
thread_id: 1968
channel: Microsoft-Client-Licensing-Platform/Admin
computer: WinDevEval
security:
user_id: S-1-5-18
event_data:
Data:
Name: HRESULT
Value: 0
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 151 — Failed to launch app %1 since no applicable licenses were found.
Message
Fields
| Name | Description |
|---|---|
Data | — |
Event ID 152 — The hardware ID in the device license is out of tolerance with the device ID
Message
Event ID 153 — The hardware ID in the device license changed but still with in tolerance with the device hardware ID
Message
Event ID 154 — The device license was updated with a different device ID
Message
Example Event
system:
provider: Microsoft-Client-Licensing-Platform
guid: B6CC0D55-9ECC-49A8-B929-2B9022426F2A
event_source_name: ''
event_id: 154
version: 0
level: 4
task: 0
opcode: 0
keywords: 2305843009213693953
time_created: '2023-10-25T22:02:00.368186+00:00'
event_record_id: 238
correlation: {}
execution:
process_id: 6564
thread_id: 6608
channel: Microsoft-Client-Licensing-Platform/Admin
computer: WinDevEval
security:
user_id: S-1-5-18
event_data: {}
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 155 — The device license was removed
Message
Event ID 156 — The required device license could not not be found
Message
Event ID 157 — The license with Id %2 has been archived successfully.
Message
Fields
| Name | Description |
|---|---|
PackageName | 2 has been archived successfully. PFM if available. |
LicenseId | — |
Example Event
system:
provider: Microsoft-Client-Licensing-Platform
guid: B6CC0D55-9ECC-49A8-B929-2B9022426F2A
event_source_name: ''
event_id: 157
version: 0
level: 4
task: 0
opcode: 0
keywords: 2305843009213693953
time_created: '2023-10-26T04:17:18.373826+00:00'
event_record_id: 69
correlation: {}
execution:
process_id: 1572
thread_id: 1708
channel: Microsoft-Client-Licensing-Platform/Admin
computer: WIN-OQ6R0RVA4NF
security:
user_id: S-1-5-18
event_data:
PackageName: microsoftwindows.client.webexperience_cw5n1h2txyewy
LicenseId: be0b63a6-5394-dcb0-7bc2-5187af85ce67
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 158 — The license with Id %2 was not able to be archived successfully.
Message
Fields
| Name | Description |
|---|---|
PFM_if_available | — |
Error_code | — |
PackageName | — |
LicenseId | — |
HRESULT | — |
Event ID 159 — The lease with Id %2 has been archived successfully.
Message
Fields
| Name | Description |
|---|---|
PackageName | 2 has been archived successfully. PFM if available. |
LicenseId | — |
Example Event
system:
provider: Microsoft-Client-Licensing-Platform
guid: B6CC0D55-9ECC-49A8-B929-2B9022426F2A
event_source_name: ''
event_id: 159
version: 0
level: 4
task: 0
opcode: 0
keywords: 2305843009213693953
time_created: '2023-10-25T21:55:25.745666+00:00'
event_record_id: 230
correlation: {}
execution:
process_id: 1260
thread_id: 1044
channel: Microsoft-Client-Licensing-Platform/Admin
computer: WinDevEval
security:
user_id: S-1-5-18
event_data:
PackageName: CanonicalGroupLimited.UbuntuonWindows_79rhkp1fndgsc
LicenseId: ff4afb58-6577-9ca4-df1c-6f066e1cf960
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 160 — The license with Id %2 of type %3 has been archived successfully.
Message
Fields
| Name | Description |
|---|---|
PackageName | 3 has been archived successfully. PFM if available. |
LicenseId | — |
Type | — |
Example Event
system:
provider: Microsoft-Client-Licensing-Platform
guid: B6CC0D55-9ECC-49A8-B929-2B9022426F2A
event_source_name: ''
event_id: 160
version: 0
level: 4
task: 0
opcode: 0
keywords: 2305843009213693953
time_created: '2023-10-25T21:22:59.176197+00:00'
event_record_id: 74
correlation: {}
execution:
process_id: 1852
thread_id: 2020
channel: Microsoft-Client-Licensing-Platform/Admin
computer: WinDevEval
security:
user_id: S-1-5-18
event_data:
PackageName: ''
LicenseId: 61afd6a2-d7c3-8d25-36c2-0c2c47e3aca8
Type: "\x05"
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 161 — Edition ID %1 with product key %2 attempt to activate return code %3.
Message
Fields
| Name | Description |
|---|---|
Edition | — |
PKey | — |
HRESULT | — |
Event ID 170 — A license was loaded from EFI and installed.
Message
Fields
| Name | Description |
|---|---|
Associate_Id | — |
Namespace | — |
VariableName | — |
AssociateId | — |
Event ID 171 — A license was loaded from EFI but failed to install.
Message
Fields
| Name | Description |
|---|---|
Error_code | — |
Namespace | — |
VariableName | — |
HRESULT | — |
Event ID 172 — ClipUp run from Clip service with arguments '.
Message
Fields
| Name | Description |
|---|---|
Arguments | — |
HRESULT | 1'. Result. |
Example Event
system:
provider: Microsoft-Client-Licensing-Platform
guid: B6CC0D55-9ECC-49A8-B929-2B9022426F2A
event_source_name: ''
event_id: 172
version: 0
level: 4
task: 0
opcode: 0
keywords: 2305843009213693953
time_created: '2023-10-25T21:40:47.121035+00:00'
event_record_id: 223
correlation: {}
execution:
process_id: 5600
thread_id: 5656
channel: Microsoft-Client-Licensing-Platform/Admin
computer: WinDevEval
security:
user_id: S-1-5-18
event_data:
Arguments: -p -pfm CanonicalGroupLimited.UbuntuonWindows_79rhkp1fndgsc
HRESULT: 0
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 173 — Product key from MSDM table redeemed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 174 — Product key from MSDM table installed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 175 — Internal Troubleshooting started.
Message
Fields
| Name | Description |
|---|---|
Data | — |
Event ID 176 — Internal Troubleshooting ended.
Message
Fields
| Name | Description |
|---|---|
SystemTime | — |
Kind | — |
HRESULT | — |
Stage | — |
Event ID 177 — Internal WCOS Troubleshooting started.
Message
Fields
| Name | Description |
|---|---|
Data | — |
Event ID 178 — Internal WCOS Troubleshooting ended.
Message
Fields
| Name | Description |
|---|---|
SystemTime | — |
HRESULT | — |
Stage | — |
Event ID 179 — FCLiP Task Operation has been done.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Stage | — |
Event ID 180 — Windows Subscription: State: %1 Msg: %2.
Message
Fields
| Name | Description |
|---|---|
State | — |
Msg | — |
Event ID 181 — Windows Subscription: State: %1, Result: %2 Msg: %3.
Message
Fields
| Name | Description |
|---|---|
State | — |
HRESULT | — |
Msg | — |