Microsoft-Client-Licensing-Platform
61 events across 2 channels
Event ID 1 — [Service] Inititialize started
Description
[Service] Inititialize started.
Message #
Event ID 2 — [Service] Initialize complete
Description
[Service] Initialize complete.
Message #
Event ID 3 — [Service] Shutdown started
Description
[Service] Shutdown started.
Message #
Event ID 4 — [Service] Shutdown complete
Description
[Service] Shutdown complete.
Message #
Event ID 7 — [ServiceCall] IFS
Description
[ServiceCall] IFS.
Message #
Event ID 8 — [ServiceCall] IFD
Description
[ServiceCall] IFD.
Message #
Event ID 9 — [ServiceCall] IFS
Description
[ServiceCall] IFS.
Message #
Event ID 10 — [ServiceCall] IFD
Description
[ServiceCall] IFD.
Message #
Event ID 11 — [ServiceCall] IFS
Description
[ServiceCall] IFS.
Message #
Event ID 12 — [ServiceCall] IFD
Description
[ServiceCall] IFD.
Message #
Event ID 13 — [ServiceCall] IFS
Description
[ServiceCall] IFS.
Message #
Event ID 14 — [ServiceCall] IFD
Description
[ServiceCall] IFD.
Message #
Event ID 15 — [ServiceCall] IFS
Description
[ServiceCall] IFS.
Message #
Event ID 16 — [ServiceCall] IFD
Description
[ServiceCall] IFD.
Message #
Event ID 17 — [ServiceCall] IFS
Description
[ServiceCall] IFS.
Message #
Event ID 18 — [ServiceCall] IFD
Description
[ServiceCall] IFD.
Message #
Event ID 19 — [ServiceCall] Execute start for id: ID.
Event ID 20 — [ServiceCall] Execute done for id: ID.
Event ID 100 — ClipSVC service is starting.
#Description
ClipSVC service is starting. Caller: Data.
Message #
Fields #
| Name | Description |
|---|---|
Data UnicodeString | ClipSVC service is starting. Caller. |
Example Event #
{
"system": {
"provider": "Microsoft-Client-Licensing-Platform",
"guid": "B6CC0D55-9ECC-49A8-B929-2B9022426F2A",
"event_source_name": "",
"event_id": 100,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 2305843009213693953,
"time_created": "2023-11-06T06:22:33.819234+00:00",
"event_record_id": 261,
"correlation": {},
"execution": {
"process_id": 1844,
"thread_id": 1864
},
"channel": "Microsoft-Client-Licensing-Platform/Admin",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Data": {
"Name": "Data",
"Value": "<none>"
}
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 101 — ClipSVC service is running.
#Description
ClipSVC service is running. Version Data.
Message #
Fields #
| Name | Description |
|---|---|
Data UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Client-Licensing-Platform",
"guid": "B6CC0D55-9ECC-49A8-B929-2B9022426F2A",
"event_source_name": "",
"event_id": 101,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 2305843009213693953,
"time_created": "2023-11-06T06:22:33.825032+00:00",
"event_record_id": 262,
"correlation": {},
"execution": {
"process_id": 1844,
"thread_id": 1868
},
"channel": "Microsoft-Client-Licensing-Platform/Admin",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Data": {
"Name": "Data",
"Value": "10.0.22621.1635"
}
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 102 — ClipSVC service has shutdown.
#Description
ClipSVC service has shutdown.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Client-Licensing-Platform",
"guid": "B6CC0D55-9ECC-49A8-B929-2B9022426F2A",
"event_source_name": "",
"event_id": 102,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 2305843009213693953,
"time_created": "2023-10-26T04:20:51.389352+00:00",
"event_record_id": 71,
"correlation": {},
"execution": {
"process_id": 1572,
"thread_id": 1852
},
"channel": "Microsoft-Client-Licensing-Platform/Admin",
"computer": "WIN-OQ6R0RVA4NF",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 103 — ClipSVC service initialization failed - result code: HRESULT.
Event ID 104 — ClipSVC was restarted while there is a pending rearm reboot required.
#Description
ClipSVC was restarted while there is a pending rearm reboot required. Caller: Data.
Message #
Fields #
| Name | Description |
|---|---|
Data UnicodeString | ClipSVC was restarted while there is a pending rearm reboot required. Caller. |
Example Event #
{
"system": {
"provider": "Microsoft-Client-Licensing-Platform",
"guid": "B6CC0D55-9ECC-49A8-B929-2B9022426F2A",
"event_source_name": "",
"event_id": 104,
"version": 0,
"level": 3,
"task": 0,
"opcode": 0,
"keywords": 2305843009213693953,
"time_created": "2023-10-25T22:55:37.954464+00:00",
"event_record_id": 258,
"correlation": {},
"execution": {
"process_id": 2244,
"thread_id": 2312
},
"channel": "Microsoft-Client-Licensing-Platform/Admin",
"computer": "WinDevEval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Data": {
"Name": "Data",
"Value": "TriggerStarted"
}
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 106 — License successfully uninstalled for package PackageName (user UserId), license Id LicenseId, file Id AssociateId.
Event ID 107 — License successfully uninstalled for file Id Data.
Event ID 110 — License install failed for license type: Type.
#Description
License install failed for license type: Type.
Message #
Fields #
| Name | Description |
|---|---|
Type Int32 | License install failed for license type. |
HRESULT UInt32 | Result code. |
Example Event #
{
"system": {
"provider": "Microsoft-Client-Licensing-Platform",
"guid": "B6CC0D55-9ECC-49A8-B929-2B9022426F2A",
"event_source_name": "",
"event_id": 110,
"version": 0,
"level": 2,
"task": 0,
"opcode": 0,
"keywords": 2305843009213693953,
"time_created": "2023-11-06T06:22:34.172221+00:00",
"event_record_id": 338,
"correlation": {},
"execution": {
"process_id": 1844,
"thread_id": 1868
},
"channel": "Microsoft-Client-Licensing-Platform/Admin",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Type": "\u0001",
"HRESULT": 3225380353
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 111 — License install failed for license Id Type.
Event ID 112 — License install storage failed for license Id Type.
Event ID 113 — License refresh failed for license Id Type.
Event ID 114 — Unable to remove matching ClipSp data for license Id Type.
Event ID 115 — License successfully installed for package PackageName.
#Description
License successfully installed for package PackageName.
Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | — |
UserId UnicodeString | User Id (if available). |
Type Int32 | — |
LicenseId UnicodeString | — |
AssociateId UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Client-Licensing-Platform",
"guid": "B6CC0D55-9ECC-49A8-B929-2B9022426F2A",
"event_source_name": "",
"event_id": 115,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 2305843009213693953,
"time_created": "2023-11-06T06:22:33.878784+00:00",
"event_record_id": 264,
"correlation": {},
"execution": {
"process_id": 1844,
"thread_id": 1868
},
"channel": "Microsoft-Client-Licensing-Platform/Admin",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageName": "",
"UserId": "",
"Type": "\u0005",
"LicenseId": "61afd6a2-d7c3-8d25-36c2-0c2c47e3aca8",
"AssociateId": "61afd6a2-d7c3-8d25-36c2-0c2c47e3aca8"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 116 — Application license successfully installed.
#Description
Application license successfully installed.
Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | Package. |
UserId UnicodeString | User Id (if available). |
LicenseId UnicodeString | — |
AssociateId UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Client-Licensing-Platform",
"guid": "B6CC0D55-9ECC-49A8-B929-2B9022426F2A",
"event_source_name": "",
"event_id": 116,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 2305843009213693953,
"time_created": "2023-11-06T06:22:34.164301+00:00",
"event_record_id": 335,
"correlation": {},
"execution": {
"process_id": 1844,
"thread_id": 1868
},
"channel": "Microsoft-Client-Licensing-Platform/Admin",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageName": "clipchamp.clipchamp_yxz26nhyzhsrt",
"UserId": "NULL",
"LicenseId": "ad2bdefa-5e7a-790f-d172-edfe3fd8a9e4",
"AssociateId": "ad2bdefa-5e7a-790f-d172-edfe3fd8a9e4"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 117 — Lease successfully installed.
#Description
Lease successfully installed.
Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | Package (if available). |
UserId UnicodeString | UserId (if available). |
LicenseId UnicodeString | — |
AssociateId UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Client-Licensing-Platform",
"guid": "B6CC0D55-9ECC-49A8-B929-2B9022426F2A",
"event_source_name": "",
"event_id": 117,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 2305843009213693953,
"time_created": "2023-11-06T06:22:34.170998+00:00",
"event_record_id": 337,
"correlation": {},
"execution": {
"process_id": 1844,
"thread_id": 1868
},
"channel": "Microsoft-Client-Licensing-Platform/Admin",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageName": "Microsoft.GamingApp_8wekyb3d8bbwe",
"UserId": "NULL",
"LicenseId": "b0d13c54-788d-a8a1-6380-3468517deff1",
"AssociateId": "b0d13c54-788d-a8a1-6380-3468517deff1"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 118 — Device license successfully installed.
#Description
Device license successfully installed.
Message #
Fields #
| Name | Description |
|---|---|
LicenseId UnicodeString | — |
AssociateId UnicodeString | — |
DeviceId UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Client-Licensing-Platform",
"guid": "B6CC0D55-9ECC-49A8-B929-2B9022426F2A",
"event_source_name": "",
"event_id": 118,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 2305843009213693953,
"time_created": "2023-10-25T22:02:00.371331+00:00",
"event_record_id": 239,
"correlation": {},
"execution": {
"process_id": 6564,
"thread_id": 6612
},
"channel": "Microsoft-Client-Licensing-Platform/Admin",
"computer": "WinDevEval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"LicenseId": "3252b20c-d425-4711-8cc5-b2f53c830b76",
"AssociateId": "3252b20c-d425-4711-8cc5-b2f53c830b76",
"DeviceId": "76629F140D001800"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 119 — UnlockToken install succeeded for license Id Type.
Event ID 120 — UnlockToken install failed for license Id Type.
Event ID 121 — Operation opId failed invoked from Caller failed because a reboot is required post rearm.
Event ID 150 — Clip service has been rearmed.
#Description
Clip service has been rearmed. Result code: Data.
Message #
Fields #
| Name | Description |
|---|---|
Data | Clip service has been rearmed. Result code. |
Example Event #
{
"system": {
"provider": "Microsoft-Client-Licensing-Platform",
"guid": "B6CC0D55-9ECC-49A8-B929-2B9022426F2A",
"event_source_name": "",
"event_id": 150,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 2305843009213693953,
"time_created": "2023-10-25T22:55:37.878222+00:00",
"event_record_id": 255,
"correlation": {},
"execution": {
"process_id": 2684,
"thread_id": 1968
},
"channel": "Microsoft-Client-Licensing-Platform/Admin",
"computer": "WinDevEval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Data": {
"Name": "HRESULT",
"Value": 0
}
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 151 — Failed to launch app Data since no applicable licenses were found.
Event ID 152 — The hardware ID in the device license is out of tolerance with the device ID
Description
The hardware ID in the device license is out of tolerance with the device ID.
Message #
Event ID 153 — The hardware ID in the device license changed but still with in tolerance with the device hardware ID
Description
The hardware ID in the device license changed but still with in tolerance with the device hardware ID.
Message #
Event ID 154 — The device license was updated with a different device ID
#Description
The device license was updated with a different device ID.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Client-Licensing-Platform",
"guid": "B6CC0D55-9ECC-49A8-B929-2B9022426F2A",
"event_source_name": "",
"event_id": 154,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 2305843009213693953,
"time_created": "2023-10-25T22:02:00.368186+00:00",
"event_record_id": 238,
"correlation": {},
"execution": {
"process_id": 6564,
"thread_id": 6608
},
"channel": "Microsoft-Client-Licensing-Platform/Admin",
"computer": "WinDevEval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 155 — The device license was removed
Description
The device license was removed.
Message #
Event ID 156 — The required device license could not not be found
Description
The required device license could not not be found.
Message #
Event ID 157 — The license with Id LicenseId has been archived successfully.
#Description
The license with Id LicenseId has been archived successfully. PFM if available: PackageName.
Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | 2 has been archived successfully. PFM if available. |
LicenseId UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Client-Licensing-Platform",
"guid": "B6CC0D55-9ECC-49A8-B929-2B9022426F2A",
"event_source_name": "",
"event_id": 157,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 2305843009213693953,
"time_created": "2023-10-26T04:17:18.373826+00:00",
"event_record_id": 69,
"correlation": {},
"execution": {
"process_id": 1572,
"thread_id": 1708
},
"channel": "Microsoft-Client-Licensing-Platform/Admin",
"computer": "WIN-OQ6R0RVA4NF",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageName": "microsoftwindows.client.webexperience_cw5n1h2txyewy",
"LicenseId": "be0b63a6-5394-dcb0-7bc2-5187af85ce67"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 158 — The license with Id Error_code was not able to be archived successfully.
Event ID 159 — The lease with Id LicenseId has been archived successfully.
#Description
The lease with Id LicenseId has been archived successfully. PFM if available: PackageName.
Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | 2 has been archived successfully. PFM if available. |
LicenseId UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Client-Licensing-Platform",
"guid": "B6CC0D55-9ECC-49A8-B929-2B9022426F2A",
"event_source_name": "",
"event_id": 159,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 2305843009213693953,
"time_created": "2023-10-25T21:55:25.745666+00:00",
"event_record_id": 230,
"correlation": {},
"execution": {
"process_id": 1260,
"thread_id": 1044
},
"channel": "Microsoft-Client-Licensing-Platform/Admin",
"computer": "WinDevEval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageName": "CanonicalGroupLimited.UbuntuonWindows_79rhkp1fndgsc",
"LicenseId": "ff4afb58-6577-9ca4-df1c-6f066e1cf960"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 160 — The license with Id LicenseId of type Type has been archived successfully.
#Description
The license with Id LicenseId of type Type has been archived successfully. PFM if available: PackageName.
Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | 3 has been archived successfully. PFM if available. |
LicenseId UnicodeString | — |
Type Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Client-Licensing-Platform",
"guid": "B6CC0D55-9ECC-49A8-B929-2B9022426F2A",
"event_source_name": "",
"event_id": 160,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 2305843009213693953,
"time_created": "2023-10-25T21:22:59.176197+00:00",
"event_record_id": 74,
"correlation": {},
"execution": {
"process_id": 1852,
"thread_id": 2020
},
"channel": "Microsoft-Client-Licensing-Platform/Admin",
"computer": "WinDevEval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageName": "",
"LicenseId": "61afd6a2-d7c3-8d25-36c2-0c2c47e3aca8",
"Type": "\u0005"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 161 — Edition ID Edition with product key PKey attempt to activate return code HRESULT.
Event ID 170 — A license was loaded from EFI and installed.
Event ID 171 — A license was loaded from EFI but failed to install.
Event ID 172 — ClipUp run from Clip service with arguments 'Arguments'.
#Description
ClipUp run from Clip service with arguments 'Arguments'. Result: HRESULT.
Message #
Fields #
| Name | Description |
|---|---|
Arguments UnicodeString | — |
HRESULT UInt32 | 1'. Result. |
Example Event #
{
"system": {
"provider": "Microsoft-Client-Licensing-Platform",
"guid": "B6CC0D55-9ECC-49A8-B929-2B9022426F2A",
"event_source_name": "",
"event_id": 172,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 2305843009213693953,
"time_created": "2023-10-25T21:40:47.121035+00:00",
"event_record_id": 223,
"correlation": {},
"execution": {
"process_id": 5600,
"thread_id": 5656
},
"channel": "Microsoft-Client-Licensing-Platform/Admin",
"computer": "WinDevEval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Arguments": "-p -pfm CanonicalGroupLimited.UbuntuonWindows_79rhkp1fndgsc",
"HRESULT": 0
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline