detection.wiki

Microsoft-Windows-AppReadiness

174 events across 3 channels

Event IDTitleChannel
10The Appx operation 'Operation' on 'PackageId' failed for user 'User' - Error.Admin
11A exception was caught: Error.Operational
12The Appx preview tile generation failed for user 'User': Error.Admin
100App Readiness service has started.Admin
101App Readiness service has stopped.Admin
102Debug
103Operational
104App Readiness status changed to 'Status' (ExitCode: ExitCode).Debug
105Checking for service idle.Operational
106'Data' has logged on.Operational
107'Data' has logged off.Operational
108Operational
109App Readiness service has been notified of new apps.Admin
110App Readiness service has leaked ReferencesLeaked references.Operational
111App Readiness service failed to DisconnectAll COM Disconnectable Objects.Admin
200Started processing tasks for 'User'.Debug
201Finished processing tasks for 'User'.Debug
205Loaded queue for 'User' with NumPackages items.Debug
206'TaskId' started for User.Debug
207'TaskId' finished for User.Debug
209For 'User' has changed mode from 'From' to 'To'.Admin
210App Readiness service has found new tasks for Data.Admin
211App Readiness service has completed tasks for Data.Admin
212NumPackages pre-installed apps found for SID.Debug
213'Package' Operation succeeded for Username.Admin
214'Package' Operation failed for User.Admin
215'Task' failed for Username.Admin
216Activity for 'User' has been suspended and will resume at ResumeAt.Admin
217Activity for 'Data' has resumed.Operational
218'Package' Operation failed for User and will be attempted after AttemptAfter.Admin
219NumPackages pre-installed apps found for SID.Operational
220'Task' succeeded for Username.Admin
221Task 'Task' created for Username.Operational
222'TaskId' was removed (Canceled: TaskCanceled) for 'User' due to new opposing …Operational
223Shutdown for 'User' has started.Debug
224Shutdown for 'User' has completed.Debug
225Canceling 'Task' for 'Username' due to shutdown.Admin
226During shutdown 'User' is waiting for tasks to complete.Operational
227'TaskId' was selected as the next task for User.Debug
228'Task' succeeded.Debug
229'TaskId' was selected as the next task.Debug
230App Readiness service has completed all tasks for user.Debug
231FWOpenPolicyStore starts.Debug
232FWOpenPolicyStore returns Data.Admin
233FWClosePolicyStore starts.Debug
234FWClosePolicyStore returns Data.Admin
235OnDemandRegisterAsync starts.Debug
236OnDemandRegisterAsync returns Data.Admin
237OnDemandRegisterWaitForCompletion starts.Debug
238OnDemandRegisterWaitForCompletion returns Data.Admin
239OnDemandRegister returns error ExitCode.Admin
240Task 'TaskId' is added for User, tasks: TaskCount.Admin
241Task 'TaskId' is removed for User, tasks: TaskCount.Admin
300Started 'TaskId' for 'User'.Debug
301Finished 'TaskId' for 'User' lasted Duration seconds.Debug
302Started group 'GroupId' for 'User'.Debug
303Finished group 'GroupId' for 'User' lasted Duration seconds.Debug
304During execution of 'GroupId' for 'User' task 'TaskId' failed.Debug
305Package 'PackageFamilyName' was removed from 'User' first login group.Debug
306For 'User' task 'TaskId' was canceled.Operational
307Finished activation of 'PackageFamilyName' for 'User'.Operational
308Preview tile creation failed 'User' for Error.Admin
309Starting registry flush for 'Data'.Operational
310Finished registry flush for 'Data'.Operational
311Failed to flush registry key 'Key' for 'User'.Admin
312Successfully created NumPackages preview tiles for User.Operational
313'Group' is canceling 'Task' for 'User' as a result of cancel.Operational
314'Group' has selected 'Task' for 'User' for the next task.Debug
315'PackageFamilyName' was removed from 'User' first login group.Operational
316Installing 'PackageFamilyName' for 'User' has hit the in-activity timeout.Admin
317Starting pre-registration of 'PackageId'.Debug
318Completed pre-registration of 'PackageId'.Debug
319Pre-registration for 'PackageId' failed.Admin
320Failed to flush registry key 'Key'.Admin
321OnDemandRegisterAsync starts.Debug
322OnDemandRegisterAsync returns ExitCode.Admin
323OnDemandRegisterWaitForCompletion starts.Debug
324OnDemandRegisterWaitForCompletion returns ExitCode.Admin
325OnDemandRegister returns error ExitCode.Admin
326OnDemandRegisterAsync starts.Debug
327OnDemandRegisterAsync returns ExitCode.Admin
328OnDemandRegisterWaitForCompletion starts.Debug
329OnDemandRegisterWaitForCompletion returns ExitCode.Admin
330OnDemandRegister returns error ExitCode.Admin
331Importing package status for user userSid completed with hr=Result.Admin
332Task 'TaskType' is performed from ARS for OneTimeRegistration on package …Admin
1001API Enter for 'User' (Process: ProcessId).Operational
1002API Exit for 'Result' (Process: User Result: ProcessId).Operational
1003API Enter for 'User' (Process: ProcessId).Operational
1004API Exit for 'Result' (Process: User Result: ProcessId).Operational
1005API Enter for 'User' (Process: ProcessId).Operational
1006API Exit for 'Result' (Process: User Result: ProcessId).Operational
1009API Enter for 'User' (Process: ProcessId).Operational
1010API Exit for 'Result' (Process: User Result: ProcessId).Operational
1013API Enter for 'User' (Process: ProcessId).Operational
1014API Exit for 'Result' (Process: User Result: ProcessId).Operational
1015API Enter for 'User' (Process: ProcessId).Operational
1016API Exit for 'Result' (Process: User Result: ProcessId).Operational
1017API Enter for 'User' (Process: ProcessId).Operational
1018API Exit for 'Result' (Process: User Result: ProcessId).Operational
1019API Enter for 'User' (Process: ProcessId).Operational
1020API Exit for 'Result' (Process: User Result: ProcessId).Operational
1021DisableInAuditMode registry value set to block API calls while in audit mode …Admin
2000Debug
2001Debug
2002Debug
2003Debug
2005Debug
2006Debug
2007Debug
2008Debug
2009Debug
2010Debug
2500Debug
2501Debug
2502Debug
2503Debug
2504Operational
3000Debug
3001Debug
4000Operational
4001Operational
5000Debug
5001Debug
5002Debug
5003Debug
5004Debug
5005Debug
5006Debug
5007Debug
5008Debug
5009Debug
5010Debug
5011Debug
5012Debug
5013Debug
5014Debug
5015Debug
5016Debug
5017Debug
5018Debug
5019Debug
5020Debug
5021Debug
5022Debug
5023Debug
5024Debug
5025Debug
5026Debug
5027Debug
5028Debug
5029Debug
5030Debug
5031Debug
5032Debug
5033Debug
5034Debug
5035Debug
5036Debug
5037Debug
5038Debug
5039Debug
5040Debug
5041Debug
5042Debug
5043Debug
5044User : failed determine if tiles are missing.Admin
5045User : failed to repair missing tiles.Admin
5046User : missing tiles detected.Admin
5047User : missing tiles repaired.Admin
5048Debug
5049Debug
5050Debug
5051Debug

Event ID 10 — The Appx operation 'Operation' on 'PackageId' failed for user 'User' - Error.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Level
Error
Task
AppReadiness_Error

Description

The Appx operation 'Operation' on 'PackageId' failed for user 'User' - Error. (Error: Result).

Message #

The Appx operation '%2' on '%3' failed for user '%1' - %5. (Error: %4)

Fields #

NameDescription
User UnicodeString—
Operation UnicodeString—
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
PackageId UnicodeString—
Result Int325. (Error.
Error UnicodeString—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 10,
    "version": 0,
    "level": 2,
    "task": 6,
    "opcode": 0,
    "keywords": 9223372036854775936,
    "time_created": "2023-11-05T22:29:17.204020+00:00",
    "event_record_id": 445,
    "correlation": {
      "ActivityID": "59A0D65F-1037-0001-E4F0-A0593710DA01"
    },
    "execution": {
      "process_id": 5660,
      "thread_id": 5712
    },
    "channel": "Microsoft-Windows-AppReadiness/Admin",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "User": "S-1-5-21-1992711665-1655669231-58201500-1000",
    "Operation": "RegisterPackageAsync",
    "PackageId": "Microsoft.VCLibs.140.00_14.0.30704.0_x64__8wekyb3d8bbwe",
    "Result": -2147009274,
    "Error": "Windows cannot install package Microsoft.VCLibs.140.00_14.0.30704.0_x64__8wekyb3d8bbwe because it has version 14.0.30704.0. A higher version 14.0.32530.0 of this package is already installed."
  },
  "message": ""
}

References #

Event ID 11 — A exception was caught: Error.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Level
Warning
Task
AppReadiness_Error

Description

A exception was caught: Error.

Message #

A exception was caught: %1.

Fields #

NameDescription
Error Int32A exception was caught.
Expression AnsiString—
Function AnsiString—
File AnsiString—
Line Int32—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 11,
    "version": 0,
    "level": 3,
    "task": 6,
    "opcode": 0,
    "keywords": 4611686018427388032,
    "time_created": "2023-11-05T22:33:30.809965+00:00",
    "event_record_id": 23,
    "correlation": {
      "ActivityID": "E4DB489E-1037-0002-3975-DBE43710DA01"
    },
    "execution": {
      "process_id": 4952,
      "thread_id": 7936
    },
    "channel": "Microsoft-Windows-AppReadiness/Operational",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Error": "2\u0000\u0007�",
    "Expression": "result",
    "Function": "AppReadiness::Tasks::RegisterPackage::OnExecute",
    "File": "onecoreuap\\shell\\appreadiness\\src\\tasks\\registerpackage.cpp",
    "Line": "\u001a\u0001"
  },
  "message": ""
}

References #

Event ID 12 — The Appx preview tile generation failed for user 'User': Error.

Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Task
AppReadiness_Error

Description

The Appx preview tile generation failed for user 'User': Error. (Result: Result).

Message #

The Appx preview tile generation failed for user '%1': %2. (Result: %3)

Fields #

NameDescription
User UnicodeString—
Error UnicodeString—
Result Int32—

Event ID 100 — App Readiness service has started.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Level
Informational
Task
AppReadiness_Service_Lifetime
Opcode
Start

Description

App Readiness service has started.

Message #

App Readiness service has started.

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 100,
    "version": 0,
    "level": 4,
    "task": 13,
    "opcode": 1,
    "keywords": 9223372036854775809,
    "time_created": "2023-10-26T04:21:52.496522+00:00",
    "event_record_id": 10,
    "correlation": {},
    "execution": {
      "process_id": 1844,
      "thread_id": 1960
    },
    "channel": "Microsoft-Windows-AppReadiness/Admin",
    "computer": "WinDevEval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {},
  "message": ""
}

References #

Event ID 101 — App Readiness service has stopped.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Level
Informational
Task
AppReadiness_Service_Lifetime
Opcode
Stop

Description

App Readiness service has stopped.

Message #

App Readiness service has stopped.

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 101,
    "version": 0,
    "level": 4,
    "task": 13,
    "opcode": 2,
    "keywords": 9223372036854775809,
    "time_created": "2023-10-26T04:20:51.148587+00:00",
    "event_record_id": 9,
    "correlation": {},
    "execution": {
      "process_id": 2956,
      "thread_id": 788
    },
    "channel": "Microsoft-Windows-AppReadiness/Admin",
    "computer": "WIN-OQ6R0RVA4NF",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {},
  "message": ""
}

References #

Event ID 102 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Service_Thread
Opcode
Start

Event ID 103 —

#
Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Level
Informational
Task
AppReadiness_Service_Thread
Opcode
Stop

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 103,
    "version": 0,
    "level": 4,
    "task": 14,
    "opcode": 2,
    "keywords": 4611686018427387905,
    "time_created": "2023-11-05T23:51:40.799865+00:00",
    "event_record_id": 31,
    "correlation": {},
    "execution": {
      "process_id": 10560,
      "thread_id": 3968
    },
    "channel": "Microsoft-Windows-AppReadiness/Operational",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {},
  "message": ""
}

References #

Event ID 104 — App Readiness status changed to 'Status' (ExitCode: ExitCode).

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Service

Description

App Readiness status changed to 'Status' (ExitCode: ExitCode).

Message #

App Readiness status changed to '%1' (ExitCode: %2)

Fields #

NameDescription
Status UInt32— NTSTATUS reference
ExitCode HexInt32—

Event ID 105 — Checking for service idle.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Level
Informational
Task
AppReadiness_Service

Description

Checking for service idle. (Result=IsIdle, Reason=Reason).

Message #

Checking for service idle. (Result=%1, Reason=%2)

Fields #

NameDescription
IsIdle Boolean—
Reason UnicodeString—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 105,
    "version": 0,
    "level": 4,
    "task": 7,
    "opcode": 0,
    "keywords": 4611686018427387905,
    "time_created": "2023-11-05T23:51:40.726163+00:00",
    "event_record_id": 30,
    "correlation": {},
    "execution": {
      "process_id": 10560,
      "thread_id": 3968
    },
    "channel": "Microsoft-Windows-AppReadiness/Operational",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "IsIdle": true,
    "Reason": "None"
  },
  "message": ""
}

References #

Event ID 106 — 'Data' has logged on.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Level
Informational
Task
AppReadiness_Service

Description

'Data' has logged on.

Message #

'%1' has logged on.

Fields #

NameDescription
Data—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 106,
    "version": 0,
    "level": 4,
    "task": 7,
    "opcode": 0,
    "keywords": 4611686018427387905,
    "time_created": "2023-10-25T21:23:46.541840+00:00",
    "event_record_id": 3,
    "correlation": {},
    "execution": {
      "process_id": 1844,
      "thread_id": 1848
    },
    "channel": "Microsoft-Windows-AppReadiness/Operational",
    "computer": "WinDevEval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Data": {
      "Name": "User",
      "Value": "S-1-5-21-2533829718-189860685-2477588761-500"
    }
  },
  "message": ""
}

References #

Event ID 107 — 'Data' has logged off.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Level
Informational
Task
AppReadiness_Service

Description

'Data' has logged off.

Message #

'%1' has logged off.

Fields #

NameDescription
Data—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 107,
    "version": 0,
    "level": 4,
    "task": 7,
    "opcode": 0,
    "keywords": 4611686018427387905,
    "time_created": "2023-11-05T22:31:33.744555+00:00",
    "event_record_id": 20,
    "correlation": {},
    "execution": {
      "process_id": 5660,
      "thread_id": 5664
    },
    "channel": "Microsoft-Windows-AppReadiness/Operational",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Data": {
      "Name": "User",
      "Value": "S-1-5-21-1992711665-1655669231-58201500-1000"
    }
  },
  "message": ""
}

References #

Event ID 108 —

#
Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Level
Informational
Task
AppReadiness_PackageChange
Opcode
Start

Fields #

NameDescription
Data—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 108,
    "version": 0,
    "level": 4,
    "task": 17,
    "opcode": 1,
    "keywords": 4611686018427387905,
    "time_created": "2023-11-05T23:49:11.255658+00:00",
    "event_record_id": 29,
    "correlation": {},
    "execution": {
      "process_id": 10560,
      "thread_id": 5420
    },
    "channel": "Microsoft-Windows-AppReadiness/Operational",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Data": {
      "Name": "Source",
      "Value": 2
    }
  },
  "message": ""
}

References #

Event ID 109 — App Readiness service has been notified of new apps.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Level
Informational
Task
AppReadiness_PackageChange
Opcode
Stop

Description

App Readiness service has been notified of new apps. (Source: Source, Error: Result).

Message #

App Readiness service has been notified of new apps. (Source: %1, Error: %2)

Fields #

NameDescription
Source UInt32App Readiness service has been notified of new apps. (Source.
Result Int32—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 109,
    "version": 0,
    "level": 4,
    "task": 17,
    "opcode": 2,
    "keywords": 9223372036854775809,
    "time_created": "2023-10-26T04:18:47.728320+00:00",
    "event_record_id": 4,
    "correlation": {},
    "execution": {
      "process_id": 2956,
      "thread_id": 1308
    },
    "channel": "Microsoft-Windows-AppReadiness/Admin",
    "computer": "WIN-OQ6R0RVA4NF",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Source": 2,
    "Result": ""
  },
  "message": ""
}

References #

Event ID 110 — App Readiness service has leaked ReferencesLeaked references.

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_Service

Description

App Readiness service has leaked ReferencesLeaked references. This could delay the system shutdown by ShutdownDelayMsec milliseconds.

Message #

App Readiness service has leaked %1 references. This could delay the system shutdown by %2 milliseconds.

Fields #

NameDescription
ReferencesLeaked UInt32—
ShutdownDelayMsec UInt32—

Event ID 111 — App Readiness service failed to DisconnectAll COM Disconnectable Objects.

Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Task
AppReadiness_Service_Lifetime

Description

App Readiness service failed to DisconnectAll COM Disconnectable Objects. (Result: Result).

Message #

App Readiness service failed to DisconnectAll COM Disconnectable Objects. (Result: %1)

Fields #

NameDescription
Result Int32—

Event ID 200 — Started processing tasks for 'User'.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_User_ProcessTasks
Opcode
Start

Description

Started processing tasks for 'User'.

Message #

Started processing tasks for '%1'.

Fields #

NameDescription
User UnicodeString—

Event ID 201 — Finished processing tasks for 'User'.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_User_ProcessTasks
Opcode
Stop

Description

Finished processing tasks for 'User'.

Message #

Finished processing tasks for '%1'.

Fields #

NameDescription
User UnicodeString—

Event ID 205 — Loaded queue for 'User' with NumPackages items.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_User_ProcessTasks

Description

Loaded queue for 'User' with NumPackages items.

Message #

Loaded queue for '%1' with %2 items.

Fields #

NameDescription
User UnicodeString—
NumPackages UInt32—
PackageInfo UnicodeString—

Event ID 206 — 'TaskId' started for User.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_User_ProcessTasks
Opcode
Start

Description

'TaskId' started for User. (Priority: Priority).

Message #

'%2' started for %1. (Priority: %3)

Fields #

NameDescription
User UnicodeString—
TaskId UnicodeString—
Priority UInt32—

Event ID 207 — 'TaskId' finished for User.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_User_ProcessTasks
Opcode
Stop

Description

'TaskId' finished for User. (Result: Result).

Message #

'%2' finished for %1. (Result: %3)

Fields #

NameDescription
User UnicodeString—
TaskId UnicodeString—
Result Int32—

Event ID 209 — For 'User' has changed mode from 'From' to 'To'.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Level
Informational
Task
AppReadiness_User_ProcessTasks

Description

For 'User' has changed mode from 'From' to 'To'.

Message #

For '%1' has changed mode from '%2' to '%3'

Fields #

NameDescription
User UnicodeString—
From UInt32—
To UInt32—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 209,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 0,
    "keywords": 9223372036854775810,
    "time_created": "2023-10-26T04:20:51.133929+00:00",
    "event_record_id": 8,
    "correlation": {},
    "execution": {
      "process_id": 2956,
      "thread_id": 788
    },
    "channel": "Microsoft-Windows-AppReadiness/Admin",
    "computer": "WIN-OQ6R0RVA4NF",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "User": "S-1-5-18",
    "From": 2,
    "To": 3
  },
  "message": ""
}

References #

Event ID 210 — App Readiness service has found new tasks for Data.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Level
Informational
Task
AppReadiness_User_ProcessTasks

Description

App Readiness service has found new tasks for Data.

Message #

App Readiness service has found new tasks for %1.

Fields #

NameDescription
Data—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 210,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 0,
    "keywords": 9223372036854775810,
    "time_created": "2023-10-25T21:40:47.762141+00:00",
    "event_record_id": 325,
    "correlation": {},
    "execution": {
      "process_id": 5240,
      "thread_id": 5296
    },
    "channel": "Microsoft-Windows-AppReadiness/Admin",
    "computer": "WinDevEval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Data": {
      "Name": "User",
      "Value": "S-1-5-21-2533829718-189860685-2477588761-500"
    }
  },
  "message": ""
}

References #

Event ID 211 — App Readiness service has completed tasks for Data.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Level
Informational
Task
AppReadiness_User_ProcessTasks

Description

App Readiness service has completed tasks for Data.

Message #

App Readiness service has completed tasks for %1.

Fields #

NameDescription
Data—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 211,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 0,
    "keywords": 9223372036854775810,
    "time_created": "2023-10-26T04:18:47.728560+00:00",
    "event_record_id": 7,
    "correlation": {},
    "execution": {
      "process_id": 2956,
      "thread_id": 700
    },
    "channel": "Microsoft-Windows-AppReadiness/Admin",
    "computer": "WIN-OQ6R0RVA4NF",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Data": {
      "Name": "User",
      "Value": "S-1-5-18"
    }
  },
  "message": ""
}

References #

Event ID 212 — NumPackages pre-installed apps found for SID.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_User_ProcessTasks

Description

NumPackages pre-installed apps found for SID.

Message #

%2 pre-installed apps found for %1

Fields #

NameDescription
SID UnicodeString—
NumPackages UInt32—
PackageFamilyName UnicodeString—

Event ID 213 — 'Package' Operation succeeded for Username.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Level
Informational
Task
AppReadiness_User_ProcessTasks

Description

'Package' Operation succeeded for Username. (Elapsed seconds).

Message #

'%2' %3 succeeded for %1. (%4 seconds)

Fields #

NameDescription
Username UnicodeString—
Package UnicodeString—
Operation UInt32—
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
Elapsed Double—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 213,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 0,
    "keywords": 9223372036854775810,
    "time_created": "2023-10-25T21:40:47.742338+00:00",
    "event_record_id": 323,
    "correlation": {},
    "execution": {
      "process_id": 5240,
      "thread_id": 5296
    },
    "channel": "Microsoft-Windows-AppReadiness/Admin",
    "computer": "WinDevEval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Username": "S-1-5-21-2533829718-189860685-2477588761-500",
    "Package": "CanonicalGroupLimited.UbuntuonWindows_79rhkp1fndgsc",
    "Operation": 1,
    "Elapsed": "f���f��?"
  },
  "message": ""
}

References #

Event ID 214 — 'Package' Operation failed for User.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Level
Error
Task
AppReadiness_User_ProcessTasks

Description

'Package' Operation failed for User. Error: 'Error' (Elapsed seconds).

Message #

'%2' %3 failed for %1. Error: '%4' (%5 seconds)

Fields #

NameDescription
User UnicodeString—
Package UnicodeString—
Operation UInt32—
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
Error Int32—
Elapsed Double—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 214,
    "version": 0,
    "level": 2,
    "task": 1,
    "opcode": 0,
    "keywords": 9223372036854775810,
    "time_created": "2023-11-05T22:33:30.819207+00:00",
    "event_record_id": 604,
    "correlation": {},
    "execution": {
      "process_id": 4952,
      "thread_id": 2436
    },
    "channel": "Microsoft-Windows-AppReadiness/Admin",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "User": "S-1-5-21-1992711665-1655669231-58201500-1000",
    "Package": "Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe",
    "Operation": 1,
    "Error": -2147024846,
    "Elapsed": "0.2400311"
  },
  "message": ""
}

References #

Event ID 215 — 'Task' failed for Username.

Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Task
AppReadiness_User_ProcessTasks

Description

'Task' failed for Username. Error: 'Error' (Elapsed seconds).

Message #

'%2' failed for %1. Error: '%3' (%4 seconds)

Fields #

NameDescription
Username UnicodeString—
Task UnicodeString—
Error Int32—
Elapsed Double—

Event ID 216 — Activity for 'User' has been suspended and will resume at ResumeAt.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Level
Informational
Task
AppReadiness_User_ProcessTasks

Description

Activity for 'User' has been suspended and will resume at ResumeAt.

Message #

Activity for '%1' has been suspended and will resume at %2.

Fields #

NameDescription
User UnicodeString—
ResumeAt FILETIME—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 216,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 0,
    "keywords": 9223372036854775810,
    "time_created": "2023-10-25T21:39:08.142987+00:00",
    "event_record_id": 207,
    "correlation": {},
    "execution": {
      "process_id": 5240,
      "thread_id": 5308
    },
    "channel": "Microsoft-Windows-AppReadiness/Admin",
    "computer": "WinDevEval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "User": "S-1-5-21-2533829718-189860685-2477588761-500",
    "ResumeAt": 1698244778.141
  },
  "message": ""
}

References #

Event ID 217 — Activity for 'Data' has resumed.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Level
Informational
Task
AppReadiness_User_ProcessTasks

Description

Activity for 'Data' has resumed.

Message #

Activity for '%1' has resumed.

Fields #

NameDescription
Data—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 217,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 0,
    "keywords": 4611686018427387906,
    "time_created": "2023-11-05T22:33:01.409803+00:00",
    "event_record_id": 22,
    "correlation": {},
    "execution": {
      "process_id": 4952,
      "thread_id": 5104
    },
    "channel": "Microsoft-Windows-AppReadiness/Operational",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Data": {
      "Name": "User",
      "Value": "S-1-5-21-1992711665-1655669231-58201500-1000"
    }
  },
  "message": ""
}

References #

Event ID 218 — 'Package' Operation failed for User and will be attempted after AttemptAfter.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Level
Informational
Task
AppReadiness_User_ProcessTasks

Description

'Package' Operation failed for User and will be attempted after AttemptAfter.

Message #

'%2' %3 failed for %1 and will be attempted after %5.

Fields #

NameDescription
User UnicodeString—
Package UnicodeString—
Operation UInt32—
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
Error Int32—
AttemptAfter FILETIME—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 218,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 0,
    "keywords": 9223372036854775810,
    "time_created": "2023-11-05T22:33:30.819200+00:00",
    "event_record_id": 602,
    "correlation": {},
    "execution": {
      "process_id": 4952,
      "thread_id": 2436
    },
    "channel": "Microsoft-Windows-AppReadiness/Admin",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "User": "S-1-5-21-1992711665-1655669231-58201500-1000",
    "Package": "Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe",
    "Operation": 1,
    "Error": -2147024846,
    "AttemptAfter": "2023-11-05T22:38:30.805815Z"
  },
  "message": ""
}

References #

Event ID 219 — NumPackages pre-installed apps found for SID.

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_User_ProcessTasks

Description

NumPackages pre-installed apps found for SID.

Message #

%2 pre-installed apps found for %1

Fields #

NameDescription
SID UnicodeString—
NumPackages UInt32—
PackageFamilyName UnicodeString—

Event ID 220 — 'Task' succeeded for Username.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Level
Informational
Task
AppReadiness_User_ProcessTasks

Description

'Task' succeeded for Username. (Elapsed seconds).

Message #

'%2' succeeded for %1. (%3 seconds)

Fields #

NameDescription
Username UnicodeString—
Task UnicodeString—
Elapsed Double—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 220,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 0,
    "keywords": 9223372036854775810,
    "time_created": "2023-10-26T04:22:06.119006+00:00",
    "event_record_id": 13,
    "correlation": {},
    "execution": {
      "process_id": 1844,
      "thread_id": 2164
    },
    "channel": "Microsoft-Windows-AppReadiness/Admin",
    "computer": "WinDevEval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Username": "S-1-5-18",
    "Task": "ART:AppxPreRegistration",
    "Elapsed": "�/E^{\u0013\u0014@"
  },
  "message": ""
}

References #

Event ID 221 — Task 'Task' created for Username.

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_User_ProcessTasks

Description

Task 'Task' created for Username.

Message #

Task '%2' created for %1.

Fields #

NameDescription
Username UnicodeString—
Task UnicodeString—

Event ID 222 — 'TaskId' was removed (Canceled: TaskCanceled) for 'User' due to new opposing task of type OpposingOperation.

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_User_ProcessTasks

Description

'TaskId' was removed (Canceled: TaskCanceled) for 'User' due to new opposing task of type OpposingOperation.

Message #

'%2' was removed (Canceled: %4) for '%1' due to new opposing task of type %3.

Fields #

NameDescription
User UnicodeString—
TaskId UnicodeString—
OpposingOperation UInt32—
TaskCanceled Boolean—

Event ID 223 — Shutdown for 'User' has started.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_User_Shutdown
Opcode
Start

Description

Shutdown for 'User' has started.

Message #

Shutdown for '%1' has started.

Fields #

NameDescription
User UnicodeString—

Event ID 224 — Shutdown for 'User' has completed.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_User_Shutdown
Opcode
Stop

Description

Shutdown for 'User' has completed.

Message #

Shutdown for '%1' has completed.

Fields #

NameDescription
User UnicodeString—

Event ID 225 — Canceling 'Task' for 'Username' due to shutdown.

Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Task
AppReadiness_User_Shutdown

Description

Canceling 'Task' for 'Username' due to shutdown.

Message #

Canceling '%2' for '%1' due to shutdown.

Fields #

NameDescription
Username UnicodeString—
Task UnicodeString—

Event ID 226 — During shutdown 'User' is waiting for tasks to complete.

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_User_Shutdown

Description

During shutdown 'User' is waiting for tasks to complete.

Message #

During shutdown '%1' is waiting for tasks to complete.

Fields #

NameDescription
User UnicodeString—

Event ID 227 — 'TaskId' was selected as the next task for User.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_User_ProcessTasks

Description

'TaskId' was selected as the next task for User. (Priority=Priority).

Message #

'%2' was selected as the next task for %1. (Priority=%3)

Fields #

NameDescription
User UnicodeString—
TaskId UnicodeString—
Priority UInt32—

Event ID 228 — 'Task' succeeded.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_User_ProcessTasks

Description

'Task' succeeded. (Elapsed seconds).

Message #

'%1' succeeded. (%2 seconds)

Fields #

NameDescription
Task UnicodeString—
Elapsed Double—

Event ID 229 — 'TaskId' was selected as the next task.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_User_ProcessTasks

Description

'TaskId' was selected as the next task. (Priority=Priority).

Message #

'%1' was selected as the next task. (Priority=%2)

Fields #

NameDescription
TaskId UnicodeString—
Priority UInt32—

Event ID 230 — App Readiness service has completed all tasks for user.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_User_ProcessTasks

Description

App Readiness service has completed all tasks for user.

Message #

App Readiness service has completed all tasks for user.

Event ID 231 — FWOpenPolicyStore starts.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_User_ProcessTasks
Opcode
Start

Description

FWOpenPolicyStore starts.

Message #

FWOpenPolicyStore starts.

Event ID 232 — FWOpenPolicyStore returns Data.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Level
Informational
Task
AppReadiness_User_ProcessTasks
Opcode
Stop

Description

FWOpenPolicyStore returns Data.

Message #

FWOpenPolicyStore returns %1.

Fields #

NameDescription
Data—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 232,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 2,
    "keywords": 9223372036854775810,
    "time_created": "2023-10-25T21:39:04.309206+00:00",
    "event_record_id": 148,
    "correlation": {},
    "execution": {
      "process_id": 5240,
      "thread_id": 5308
    },
    "channel": "Microsoft-Windows-AppReadiness/Admin",
    "computer": "WinDevEval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Data": {
      "Name": "ExitCode",
      "Value": 0
    }
  },
  "message": ""
}

References #

Event ID 233 — FWClosePolicyStore starts.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_User_ProcessTasks
Opcode
Start

Description

FWClosePolicyStore starts.

Message #

FWClosePolicyStore starts.

Event ID 234 — FWClosePolicyStore returns Data.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Level
Informational
Task
AppReadiness_User_ProcessTasks
Opcode
Stop

Description

FWClosePolicyStore returns Data.

Message #

FWClosePolicyStore returns %1.

Fields #

NameDescription
Data—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 234,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 2,
    "keywords": 9223372036854775810,
    "time_created": "2023-10-25T21:39:15.324728+00:00",
    "event_record_id": 213,
    "correlation": {},
    "execution": {
      "process_id": 5240,
      "thread_id": 5308
    },
    "channel": "Microsoft-Windows-AppReadiness/Admin",
    "computer": "WinDevEval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Data": {
      "Name": "ExitCode",
      "Value": 0
    }
  },
  "message": ""
}

References #

Event ID 235 — OnDemandRegisterAsync starts.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_User_ProcessTasks
Opcode
Start

Description

OnDemandRegisterAsync starts.

Message #

OnDemandRegisterAsync starts.

Event ID 236 — OnDemandRegisterAsync returns Data.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Level
Informational
Task
AppReadiness_User_ProcessTasks
Opcode
Stop

Description

OnDemandRegisterAsync returns Data.

Message #

OnDemandRegisterAsync returns %1.

Fields #

NameDescription
Data—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 236,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 2,
    "keywords": 9223372036854775812,
    "time_created": "2023-10-25T21:39:06.662792+00:00",
    "event_record_id": 149,
    "correlation": {
      "ActivityID": "8865F308-078B-0002-72FE-65888B07DA01"
    },
    "execution": {
      "process_id": 5240,
      "thread_id": 5296
    },
    "channel": "Microsoft-Windows-AppReadiness/Admin",
    "computer": "WinDevEval",
    "security": {
      "user_id": "S-1-5-21-2533829718-189860685-2477588761-500"
    }
  },
  "event_data": {
    "Data": {
      "Name": "ExitCode",
      "Value": 0
    }
  },
  "message": ""
}

References #

Event ID 237 — OnDemandRegisterWaitForCompletion starts.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_User_ProcessTasks
Opcode
Start

Description

OnDemandRegisterWaitForCompletion starts.

Message #

OnDemandRegisterWaitForCompletion starts.

Event ID 238 — OnDemandRegisterWaitForCompletion returns Data.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Level
Informational
Task
AppReadiness_User_ProcessTasks
Opcode
Stop

Description

OnDemandRegisterWaitForCompletion returns Data.

Message #

OnDemandRegisterWaitForCompletion returns %1.

Fields #

NameDescription
Data—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 238,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 2,
    "keywords": 9223372036854775812,
    "time_created": "2023-10-25T21:39:08.044160+00:00",
    "event_record_id": 150,
    "correlation": {
      "ActivityID": "8865F308-078B-0002-72FE-65888B07DA01"
    },
    "execution": {
      "process_id": 5240,
      "thread_id": 5296
    },
    "channel": "Microsoft-Windows-AppReadiness/Admin",
    "computer": "WinDevEval",
    "security": {
      "user_id": "S-1-5-21-2533829718-189860685-2477588761-500"
    }
  },
  "event_data": {
    "Data": {
      "Name": "ExitCode",
      "Value": 0
    }
  },
  "message": ""
}

References #

Event ID 239 — OnDemandRegister returns error ExitCode.

Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Task
AppReadiness_User_ProcessTasks
Opcode
Stop

Description

OnDemandRegister returns error ExitCode.

Message #

OnDemandRegister returns error %1.

Fields #

NameDescription
ExitCode HexInt32—

Event ID 240 — Task 'TaskId' is added for User, tasks: TaskCount.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Level
Informational
Task
AppReadiness_User_ProcessTasks

Description

Task 'TaskId' is added for User, tasks: TaskCount.

Message #

Task '%2' is added for %1, tasks: %3

Fields #

NameDescription
User UnicodeString—
TaskId UnicodeString—
TaskCount UInt321, tasks.

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 240,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 0,
    "keywords": 9223372036854775812,
    "time_created": "2023-10-26T04:21:59.768043+00:00",
    "event_record_id": 11,
    "correlation": {},
    "execution": {
      "process_id": 1844,
      "thread_id": 2072
    },
    "channel": "Microsoft-Windows-AppReadiness/Admin",
    "computer": "WinDevEval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "User": "S-1-5-18",
    "TaskId": "ART:AppxPreRegistration",
    "TaskCount": 1
  },
  "message": ""
}

References #

Event ID 241 — Task 'TaskId' is removed for User, tasks: TaskCount.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Level
Informational
Task
AppReadiness_User_ProcessTasks

Description

Task 'TaskId' is removed for User, tasks: TaskCount.

Message #

Task '%2' is removed for %1, tasks: %3

Fields #

NameDescription
User UnicodeString—
TaskId UnicodeString—
TaskCount UInt321, tasks.

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 241,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 0,
    "keywords": 9223372036854775812,
    "time_created": "2023-10-26T04:22:06.119005+00:00",
    "event_record_id": 12,
    "correlation": {},
    "execution": {
      "process_id": 1844,
      "thread_id": 2164
    },
    "channel": "Microsoft-Windows-AppReadiness/Admin",
    "computer": "WinDevEval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "User": "S-1-5-18",
    "TaskId": "ART:AppxPreRegistration",
    "TaskCount": 0
  },
  "message": ""
}

References #

Event ID 300 — Started 'TaskId' for 'User'.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_ExecuteTask
Opcode
Start

Description

Started 'TaskId' for 'User'.

Message #

Started '%2' for '%1'

Fields #

NameDescription
User UnicodeString—
TaskId UnicodeString—

Event ID 301 — Finished 'TaskId' for 'User' lasted Duration seconds.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_ExecuteTask
Opcode
Stop

Description

Finished 'TaskId' for 'User' lasted Duration seconds. (Result).

Message #

Finished '%2' for '%1' lasted %4 seconds. (%3)

Fields #

NameDescription
User UnicodeString—
TaskId UnicodeString—
Result Int32—
Duration Double—

Event ID 302 — Started group 'GroupId' for 'User'.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_ExecuteTask
Opcode
Start

Description

Started group 'GroupId' for 'User'.

Message #

Started group '%2' for '%1'

Fields #

NameDescription
User UnicodeString—
GroupId UnicodeString—

Event ID 303 — Finished group 'GroupId' for 'User' lasted Duration seconds.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_ExecuteTask
Opcode
Stop

Description

Finished group 'GroupId' for 'User' lasted Duration seconds. (Result).

Message #

Finished group '%2' for '%1' lasted %4 seconds. (%3)

Fields #

NameDescription
User UnicodeString—
GroupId UnicodeString—
Result Int32—
Duration Double—

Event ID 304 — During execution of 'GroupId' for 'User' task 'TaskId' failed.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_ExecuteTask

Description

During execution of 'GroupId' for 'User' task 'TaskId' failed. (Error: Result).

Message #

During execution of '%2' for '%1' task '%3' failed. (Error: %4)

Fields #

NameDescription
User UnicodeString—
GroupId UnicodeString—
TaskId UnicodeString—
Result Int32—

Event ID 305 — Package 'PackageFamilyName' was removed from 'User' first login group.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_ExecuteTask

Description

Package 'PackageFamilyName' was removed from 'User' first login group. (Reason: Reason).

Message #

Package '%2' was removed from '%1' first login group. (Reason: %3)

Fields #

NameDescription
User UnicodeString—
PackageFamilyName UnicodeString—
Reason UnicodeString—

Event ID 306 — For 'User' task 'TaskId' was canceled.

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_ExecuteTask

Description

For 'User' task 'TaskId' was canceled.

Message #

For '%1' task '%2' was canceled.

Fields #

NameDescription
User UnicodeString—
TaskId UnicodeString—

Event ID 307 — Finished activation of 'PackageFamilyName' for 'User'.

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_ExecuteTask

Description

Finished activation of 'PackageFamilyName' for 'User'. (Result: Reason).

Message #

Finished activation of '%2' for '%1'. (Result: %3)

Fields #

NameDescription
User UnicodeString—
PackageFamilyName UnicodeString—
Reason UnicodeString—

Event ID 308 — Preview tile creation failed 'User' for Error.

Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Task
AppReadiness_ExecuteTask

Description

Preview tile creation failed 'User' for Error. (Source: PackageFamilyName, Error: Source).

Message #

Preview tile creation failed '%2' for %1. (Source: %3, Error: %4)

Fields #

NameDescription
Error—
User UnicodeString—
PackageFamilyName UnicodeString—
Source UInt32—
Result Int32—

Event ID 309 — Starting registry flush for 'Data'.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Level
Informational
Task
AppReadiness_ExecuteTask
Opcode
Start

Description

Starting registry flush for 'Data'.

Message #

Starting registry flush for '%1'.

Fields #

NameDescription
Data—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 309,
    "version": 0,
    "level": 4,
    "task": 2,
    "opcode": 1,
    "keywords": 4611686018427387908,
    "time_created": "2023-11-05T22:29:25.993515+00:00",
    "event_record_id": 17,
    "correlation": {},
    "execution": {
      "process_id": 5660,
      "thread_id": 5744
    },
    "channel": "Microsoft-Windows-AppReadiness/Operational",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Data": {
      "Name": "User",
      "Value": "S-1-5-21-1992711665-1655669231-58201500-1000"
    }
  },
  "message": ""
}

References #

Event ID 310 — Finished registry flush for 'Data'.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Level
Informational
Task
AppReadiness_ExecuteTask
Opcode
Stop

Description

Finished registry flush for 'Data'.

Message #

Finished registry flush for '%1'.

Fields #

NameDescription
Data—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 310,
    "version": 0,
    "level": 4,
    "task": 2,
    "opcode": 2,
    "keywords": 4611686018427387908,
    "time_created": "2023-11-05T22:29:26.031718+00:00",
    "event_record_id": 18,
    "correlation": {},
    "execution": {
      "process_id": 5660,
      "thread_id": 5744
    },
    "channel": "Microsoft-Windows-AppReadiness/Operational",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Data": {
      "Name": "User",
      "Value": "S-1-5-21-1992711665-1655669231-58201500-1000"
    }
  },
  "message": ""
}

References #

Event ID 311 — Failed to flush registry key 'Key' for 'User'.

Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Task
AppReadiness_ExecuteTask

Description

Failed to flush registry key 'Key' for 'User'. (Error: Result).

Message #

Failed to flush registry key '%2' for '%1'. (Error: %3)

Fields #

NameDescription
User UnicodeString—
Key UnicodeString—
Result UInt32—

Event ID 312 — Successfully created NumPackages preview tiles for User.

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_ExecuteTask

Description

Successfully created NumPackages preview tiles for User. (Source: Source).

Message #

Successfully created %3 preview tiles for %1. (Source: %2)

Fields #

NameDescription
User UnicodeString—
Source UInt32—
NumPackages UInt32—
PackageFamilyName UnicodeString—

Event ID 313 — 'Group' is canceling 'Task' for 'User' as a result of cancel.

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_ExecuteTask

Description

'Group' is canceling 'Task' for 'User' as a result of cancel.

Message #

'%2' is canceling '%3' for '%1' as a result of cancel.

Fields #

NameDescription
User UnicodeString—
Group UnicodeString—
Task UnicodeString—

Event ID 314 — 'Group' has selected 'Task' for 'User' for the next task.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_ExecuteTask

Description

'Group' has selected 'Task' for 'User' for the next task.

Message #

'%2' has selected '%3' for '%1' for the next task.

Fields #

NameDescription
User UnicodeString—
Group UnicodeString—
Task UnicodeString—

Event ID 315 — 'PackageFamilyName' was removed from 'User' first login group.

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_ExecuteTask

Description

'PackageFamilyName' was removed from 'User' first login group. (Reason: Reason).

Message #

'%2' was removed from '%1' first login group. (Reason: %3)

Fields #

NameDescription
User UnicodeString—
PackageFamilyName UnicodeString—
Reason UnicodeString—

Event ID 316 — Installing 'PackageFamilyName' for 'User' has hit the in-activity timeout.

Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Task
AppReadiness_ExecuteTask

Description

Installing 'PackageFamilyName' for 'User' has hit the in-activity timeout.

Message #

Installing '%2' for '%1' has hit the in-activity timeout

Fields #

NameDescription
User UnicodeString—
PackageFamilyName UnicodeString—

Event ID 317 — Starting pre-registration of 'PackageId'.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_PreRegister_Package
Opcode
Start

Description

Starting pre-registration of 'PackageId'.

Message #

Starting pre-registration of '%1'

Fields #

NameDescription
PackageId UnicodeString—

Event ID 318 — Completed pre-registration of 'PackageId'.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_PreRegister_Package
Opcode
Stop

Description

Completed pre-registration of 'PackageId'.

Message #

Completed pre-registration of '%1'

Fields #

NameDescription
PackageId UnicodeString—

Event ID 319 — Pre-registration for 'PackageId' failed.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Level
Error
Task
AppReadiness_PreRegister_Package

Description

Pre-registration for 'PackageId' failed. (Error: Result).

Message #

Pre-registration for '%1' failed. (Error: %2)

Fields #

NameDescription
PackageId UnicodeString—
Result Int321' failed. (Error.

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 319,
    "version": 0,
    "level": 2,
    "task": 23,
    "opcode": 0,
    "keywords": 9223372036854775812,
    "time_created": "2023-11-05T22:33:30.809891+00:00",
    "event_record_id": 601,
    "correlation": {
      "ActivityID": "E4DB489E-1037-0002-3975-DBE43710DA01"
    },
    "execution": {
      "process_id": 4952,
      "thread_id": 7936
    },
    "channel": "Microsoft-Windows-AppReadiness/Admin",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "PackageId": "Microsoft.MicrosoftEdge.Stable_118.0.2088.61_neutral__8wekyb3d8bbwe",
    "Result": -2147024846
  },
  "message": ""
}

References #

Event ID 320 — Failed to flush registry key 'Key'.

Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Task
AppReadiness_ExecuteTask

Description

Failed to flush registry key 'Key'. (Error: Result).

Message #

Failed to flush registry key '%1'. (Error: %2)

Fields #

NameDescription
Key UnicodeString—
Result UInt32—

Event ID 321 — OnDemandRegisterAsync starts.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_ExecuteTask
Opcode
Start

Description

OnDemandRegisterAsync starts.

Message #

OnDemandRegisterAsync starts.

Event ID 322 — OnDemandRegisterAsync returns ExitCode.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Level
Informational
Task
AppReadiness_ExecuteTask
Opcode
Stop

Description

OnDemandRegisterAsync returns ExitCode.

Message #

OnDemandRegisterAsync returns %1.

Fields #

NameDescription
ExitCode HexInt32—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 322,
    "version": 0,
    "level": 4,
    "task": 2,
    "opcode": 2,
    "keywords": 9223372036854775812,
    "time_created": "2022-04-07T16:48:31.584808+00:00",
    "event_record_id": 69,
    "correlation": {
      "ActivityID": "DD7B0B6A-4A9E-0000-8126-7BDD9E4AD801"
    },
    "execution": {
      "process_id": 2304,
      "thread_id": 4244
    },
    "channel": "Microsoft-Windows-AppReadiness/Admin",
    "computer": "WIN-FPV0DSIC9O6",
    "security": {
      "user_id": "S-1-5-21-2121334350-1110938707-2888912545-500"
    }
  },
  "event_data": {
    "ExitCode": "0x0"
  },
  "message": ""
}

References #

Event ID 323 — OnDemandRegisterWaitForCompletion starts.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_ExecuteTask
Opcode
Start

Description

OnDemandRegisterWaitForCompletion starts.

Message #

OnDemandRegisterWaitForCompletion starts.

Event ID 324 — OnDemandRegisterWaitForCompletion returns ExitCode.

#
Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Level
Informational
Task
AppReadiness_ExecuteTask
Opcode
Stop

Description

OnDemandRegisterWaitForCompletion returns ExitCode.

Message #

OnDemandRegisterWaitForCompletion returns %1.

Fields #

NameDescription
ExitCode HexInt32—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppReadiness",
    "guid": "F0BE35F8-237B-4814-86B5-ADE51192E503",
    "event_source_name": "",
    "event_id": 324,
    "version": 0,
    "level": 4,
    "task": 2,
    "opcode": 2,
    "keywords": 9223372036854775812,
    "time_created": "2022-04-07T16:48:31.708898+00:00",
    "event_record_id": 70,
    "correlation": {
      "ActivityID": "DD7B0B6A-4A9E-0000-8126-7BDD9E4AD801"
    },
    "execution": {
      "process_id": 2304,
      "thread_id": 4244
    },
    "channel": "Microsoft-Windows-AppReadiness/Admin",
    "computer": "WIN-FPV0DSIC9O6",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "ExitCode": "0x0"
  },
  "message": ""
}

References #

Event ID 325 — OnDemandRegister returns error ExitCode.

Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Task
AppReadiness_ExecuteTask
Opcode
Stop

Description

OnDemandRegister returns error ExitCode.

Message #

OnDemandRegister returns error %1.

Fields #

NameDescription
ExitCode HexInt32—

Event ID 326 — OnDemandRegisterAsync starts.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_ExecuteTask
Opcode
Start

Description

OnDemandRegisterAsync starts.

Message #

OnDemandRegisterAsync starts.

Event ID 327 — OnDemandRegisterAsync returns ExitCode.

Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Task
AppReadiness_ExecuteTask
Opcode
Stop

Description

OnDemandRegisterAsync returns ExitCode.

Message #

OnDemandRegisterAsync returns %1.

Fields #

NameDescription
ExitCode HexInt32—

Event ID 328 — OnDemandRegisterWaitForCompletion starts.

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_ExecuteTask
Opcode
Start

Description

OnDemandRegisterWaitForCompletion starts.

Message #

OnDemandRegisterWaitForCompletion starts.

Event ID 329 — OnDemandRegisterWaitForCompletion returns ExitCode.

Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Task
AppReadiness_ExecuteTask
Opcode
Stop

Description

OnDemandRegisterWaitForCompletion returns ExitCode.

Message #

OnDemandRegisterWaitForCompletion returns %1.

Fields #

NameDescription
ExitCode HexInt32—

Event ID 330 — OnDemandRegister returns error ExitCode.

Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Task
AppReadiness_ExecuteTask
Opcode
Stop

Description

OnDemandRegister returns error ExitCode.

Message #

OnDemandRegister returns error %1.

Fields #

NameDescription
ExitCode HexInt32—

Event ID 331 — Importing package status for user userSid completed with hr=Result.

Provider
Microsoft-Windows-AppReadiness
Channel
Admin

Description

Importing package status for user userSid completed with hr=Result. numImported values were imported. numFailed values failed to be imported.

Message #

Importing package status for user %1 completed with hr=%2. %3 values were imported. %4 values failed to be imported.

Fields #

NameDescription
userSid UnicodeString—
Result Int32—
numImported UInt32—
numFailed UInt32—

Event ID 332 — Task 'TaskType' is performed from ARS for OneTimeRegistration on package PackageFullName.

Provider
Microsoft-Windows-AppReadiness
Channel
Admin

Description

Task 'TaskType' is performed from ARS for OneTimeRegistration on package PackageFullName.

Message #

Task '%2' is performed from ARS for OneTimeRegistration on package %1

Fields #

NameDescription
PackageFullName UnicodeString—
TaskType UnicodeString—

Event ID 1001 — API Enter for 'User' (Process: ProcessId).

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_Api_Install
Opcode
Start

Description

API Enter for 'User' (Process: ProcessId).

Message #

API Enter for '%1' (Process: %2)

Fields #

NameDescription
User UnicodeString—
ProcessId UInt32—

Event ID 1002 — API Exit for 'Result' (Process: User Result: ProcessId).

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_Api_Install
Opcode
Stop

Description

API Exit for 'Result' (Process: User Result: ProcessId).

Message #

API Exit for '%1' (Process: %2 Result: %3)

Fields #

NameDescription
Result Int321' (Process.
User UnicodeString—
ProcessId UInt32—

Event ID 1003 — API Enter for 'User' (Process: ProcessId).

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_Api_Remove
Opcode
Start

Description

API Enter for 'User' (Process: ProcessId).

Message #

API Enter for '%1' (Process: %2)

Fields #

NameDescription
User UnicodeString—
ProcessId UInt32—

Event ID 1004 — API Exit for 'Result' (Process: User Result: ProcessId).

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_Api_Remove
Opcode
Stop

Description

API Exit for 'Result' (Process: User Result: ProcessId).

Message #

API Exit for '%1' (Process: %2 Result: %3)

Fields #

NameDescription
Result Int321' (Process.
User UnicodeString—
ProcessId UInt32—

Event ID 1005 — API Enter for 'User' (Process: ProcessId).

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_Api_GetTask
Opcode
Start

Description

API Enter for 'User' (Process: ProcessId).

Message #

API Enter for '%1' (Process: %2)

Fields #

NameDescription
User UnicodeString—
ProcessId UInt32—

Event ID 1006 — API Exit for 'Result' (Process: User Result: ProcessId).

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_Api_GetTask
Opcode
Stop

Description

API Exit for 'Result' (Process: User Result: ProcessId).

Message #

API Exit for '%1' (Process: %2 Result: %3)

Fields #

NameDescription
Result Int321' (Process.
User UnicodeString—
ProcessId UInt32—

Event ID 1009 — API Enter for 'User' (Process: ProcessId).

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_Api_ProcessTasks
Opcode
Start

Description

API Enter for 'User' (Process: ProcessId).

Message #

API Enter for '%1' (Process: %2)

Fields #

NameDescription
User UnicodeString—
ProcessId UInt32—

Event ID 1010 — API Exit for 'Result' (Process: User Result: ProcessId).

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_Api_ProcessTasks
Opcode
Stop

Description

API Exit for 'Result' (Process: User Result: ProcessId).

Message #

API Exit for '%1' (Process: %2 Result: %3)

Fields #

NameDescription
Result Int321' (Process.
User UnicodeString—
ProcessId UInt32—

Event ID 1013 — API Enter for 'User' (Process: ProcessId).

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_Api_HandlePackageChange
Opcode
Start

Description

API Enter for 'User' (Process: ProcessId).

Message #

API Enter for '%1' (Process: %2)

Fields #

NameDescription
User UnicodeString—
ProcessId UInt32—

Event ID 1014 — API Exit for 'Result' (Process: User Result: ProcessId).

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_Api_HandlePackageChange
Opcode
Stop

Description

API Exit for 'Result' (Process: User Result: ProcessId).

Message #

API Exit for '%1' (Process: %2 Result: %3)

Fields #

NameDescription
Result Int321' (Process.
User UnicodeString—
ProcessId UInt32—

Event ID 1015 — API Enter for 'User' (Process: ProcessId).

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_Api_CreateTask
Opcode
Start

Description

API Enter for 'User' (Process: ProcessId).

Message #

API Enter for '%1' (Process: %2)

Fields #

NameDescription
User UnicodeString—
ProcessId UInt32—

Event ID 1016 — API Exit for 'Result' (Process: User Result: ProcessId).

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_Api_CreateTask
Opcode
Stop

Description

API Exit for 'Result' (Process: User Result: ProcessId).

Message #

API Exit for '%1' (Process: %2 Result: %3)

Fields #

NameDescription
Result Int321' (Process.
User UnicodeString—
ProcessId UInt32—

Event ID 1017 — API Enter for 'User' (Process: ProcessId).

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_Api_EnterLogonPhase
Opcode
Start

Description

API Enter for 'User' (Process: ProcessId).

Message #

API Enter for '%1' (Process: %2)

Fields #

NameDescription
User UnicodeString—
ProcessId UInt32—

Event ID 1018 — API Exit for 'Result' (Process: User Result: ProcessId).

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_Api_EnterLogonPhase
Opcode
Stop

Description

API Exit for 'Result' (Process: User Result: ProcessId).

Message #

API Exit for '%1' (Process: %2 Result: %3)

Fields #

NameDescription
Result Int321' (Process.
User UnicodeString—
ProcessId UInt32—

Event ID 1019 — API Enter for 'User' (Process: ProcessId).

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_Api_ResolveStoreCategories
Opcode
Start

Description

API Enter for 'User' (Process: ProcessId).

Message #

API Enter for '%1' (Process: %2)

Fields #

NameDescription
User UnicodeString—
ProcessId UInt32—

Event ID 1020 — API Exit for 'Result' (Process: User Result: ProcessId).

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_Api_ResolveStoreCategories
Opcode
Stop

Description

API Exit for 'Result' (Process: User Result: ProcessId).

Message #

API Exit for '%1' (Process: %2 Result: %3)

Fields #

NameDescription
Result Int321' (Process.
User UnicodeString—
ProcessId UInt32—

Event ID 1021 — DisableInAuditMode registry value set to block API calls while in audit mode (audit mode: IsAuditMode).

Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Task
AppReadiness_Api_DisableInAuditMode

Description

DisableInAuditMode registry value set to block API calls while in audit mode (audit mode: IsAuditMode).

Message #

DisableInAuditMode registry value set to block API calls while in audit mode (audit mode: %1).

Fields #

NameDescription
IsAuditMode Boolean—

Event ID 2000 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_ScorePackage
Opcode
Start

Fields #

NameDescription
User UnicodeString—
PackageFamilyName UnicodeString—

Event ID 2001 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_ScorePackage
Opcode
Stop

Fields #

NameDescription
User UnicodeString—
PackageFamilyName UnicodeString—
Score UInt32—

Event ID 2002 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_ScorePackage

Fields #

NameDescription
User UnicodeString—
PackageFamilyName UnicodeString—
Score UInt32—

Event ID 2003 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_ScorePackage

Fields #

NameDescription
User UnicodeString—
PackageFamilyName UnicodeString—
Score UInt32—

Event ID 2005 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_ScorePackage

Fields #

NameDescription
User UnicodeString—
PackageFamilyName UnicodeString—
Score UInt32—

Event ID 2006 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_ScorePackage

Fields #

NameDescription
User UnicodeString—
PackageFamilyName UnicodeString—
Score UInt32—

Event ID 2007 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_ScorePackage

Fields #

NameDescription
User UnicodeString—
PackageFamilyName UnicodeString—
Score UInt32—

Event ID 2008 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_ScorePackage

Fields #

NameDescription
User UnicodeString—
PackageFamilyName UnicodeString—
Score UInt32—

Event ID 2009 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_ScorePackage

Fields #

NameDescription
User UnicodeString—
PackageFamilyName UnicodeString—
Score UInt32—

Event ID 2010 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_ScorePackage

Fields #

NameDescription
User UnicodeString—
PackageFamilyName UnicodeString—
Score UInt32—

Event ID 2500 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_BrokerSession
Opcode
Start

Fields #

NameDescription
User UnicodeString—

Event ID 2501 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_BrokerSession
Opcode
Stop

Fields #

NameDescription
User UnicodeString—
Result UInt32—

Event ID 2502 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_BrokerSession

Fields #

NameDescription
User UnicodeString—
Package UnicodeString—
Result UInt32—

Event ID 2503 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_BrokerSession

Fields #

NameDescription
User UnicodeString—
Package UnicodeString—
Result UInt32—

Event ID 2504 —

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_BrokerSession

Fields #

NameDescription
User UnicodeString—
Result UInt32—

Event ID 3000 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_PerfTrack
Opcode
Start

Fields #

NameDescription
TaskId UnicodeString—

Event ID 3001 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_PerfTrack
Opcode
Stop

Fields #

NameDescription
TaskId UnicodeString—

Event ID 4000 —

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_TriggerTask_Run

Fields #

NameDescription
User UnicodeString—
Result Int32—

Event ID 4001 —

Provider
Microsoft-Windows-AppReadiness
Channel
Operational
Task
AppReadiness_MaintenanceTask_Run

Fields #

NameDescription
User UnicodeString—
Result Int32—

Event ID 5000 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Start

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5001 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Stop

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5002 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Start

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5003 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Stop

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5004 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Start

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5005 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Stop

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5006 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Start

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5007 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Stop

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5008 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Start

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5009 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Stop

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5010 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Start

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5011 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Stop

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5012 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Start

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5013 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Stop

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5014 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Start

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5015 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Stop

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5016 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Start

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5017 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Stop

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5018 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Start

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5019 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Stop

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5020 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Start

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5021 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Stop

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5022 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Start

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5023 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Stop

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5024 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Start

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5025 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Stop

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5026 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Start

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5027 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Stop

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5028 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Start

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5029 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Stop

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5030 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Start

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5031 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Stop

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5032 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Start

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5033 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Stop

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5034 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Start

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5035 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Stop

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5036 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Start

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5037 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Stop

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5038 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Start

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5039 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Stop

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5040 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Start

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5041 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Stop

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5042 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Start

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5043 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Stop

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5044 — User : failed determine if tiles are missing.

Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Task
AppReadiness_ExecuteTask

Description

User : failed determine if tiles are missing. error=Result.

Message #

%1 : failed determine if tiles are missing. error=%2

Fields #

NameDescription
User UnicodeString—
Result Int32—

Event ID 5045 — User : failed to repair missing tiles.

Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Task
AppReadiness_ExecuteTask

Description

User : failed to repair missing tiles. error=Result.

Message #

%1 : failed to repair missing tiles. error=%2

Fields #

NameDescription
User UnicodeString—
Result Int32—

Event ID 5046 — User : missing tiles detected.

Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Task
AppReadiness_ExecuteTask

Description

User : missing tiles detected.

Message #

%1 : missing tiles detected.

Fields #

NameDescription
User UnicodeString—

Event ID 5047 — User : missing tiles repaired.

Provider
Microsoft-Windows-AppReadiness
Channel
Admin
Task
AppReadiness_ExecuteTask

Description

User : missing tiles repaired.

Message #

%1 : missing tiles repaired.

Fields #

NameDescription
User UnicodeString—

Event ID 5048 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Start

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5049 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Stop

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5050 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Start

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—

Event ID 5051 —

Provider
Microsoft-Windows-AppReadiness
Channel
Debug
Task
AppReadiness_Timeline
Opcode
Stop

Fields #

NameDescription
UserId UnicodeString—
PackageFamilyName UnicodeString—
ActivityId UnicodeString—