detection.wiki

Microsoft-Windows-AppXDeployment-Server › Event 698

Event ID 698 — Deployment DeploymentOperation operation with target volume MountPoint on Package PackageFullName from: Path failed with error ErrorCode.

Provider
Microsoft-Windows-AppXDeployment-Server
Channel
Restricted
Level
Error
Task
AppXDeployment.Task.Server.Deployment

Description

Deployment DeploymentOperation operation with target volume MountPoint on Package PackageFullName from: Path failed with error ErrorCode. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.

Message #

Deployment %1 operation with target volume %5 on Package %2 from: %3 failed with error %4. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.

Fields #

NameDescription
DeploymentOperation UInt32—
PackageFullName UnicodeString—
Path UnicodeString2 from.
ErrorCode HexInt32—
MountPoint UnicodeString—
TargetPlatform HexInt32—
SystemVolume Boolean—
StorageId UnicodeString—
IsCentennial Boolean—
PackageType HexInt32—
IsPackageEncrypted Boolean—
DeploymentOptions HexInt64—
IsStreamingPackage Boolean—
IsInRelatedSet Boolean—
IsPackageUsingBDC Boolean—
MainPackageFamilyName UnicodeString—
CallingProcess UnicodeString—
IsInPlaceUpdate HexInt32—
ErrorFileInfo UnicodeString—
DetailedMessageInfo UnicodeString—
RollbackErrorFileInfo UnicodeString—
RollbackDetailedMessageInfo UnicodeString—
IsOptional UInt32—
PackageFlags HexInt32—
PackageFlags2 HexInt32—
HasWin32alacarte Boolean—
HasFullTrust Boolean—
ExternalLocation UnicodeString—
PackageSourceUri UnicodeString—
PackageDisplayName UnicodeString—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppXDeployment-Server",
    "guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
    "event_source_name": "",
    "event_id": 698,
    "version": 0,
    "level": 2,
    "task": 3,
    "opcode": 0,
    "keywords": 1152991873351024641,
    "time_created": "2023-11-06T06:22:44.338098+00:00",
    "event_record_id": 8,
    "correlation": {
      "ActivityID": "626F7C94-1079-0000-A09A-6F627910DA01"
    },
    "execution": {
      "process_id": 1532,
      "thread_id": 1636
    },
    "channel": "Microsoft-Windows-AppXDeploymentServer/Restricted",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "DeploymentOperation": 12,
    "PackageFullName": "Microsoft.MicrosoftEdge.Stable_118.0.2088.61_neutral__8wekyb3d8bbwe",
    "Path": " ",
    "ErrorCode": "0x80070032",
    "MountPoint": "C:",
    "TargetPlatform": "0xffffffff",
    "SystemVolume": true,
    "StorageId": "\\\\?\\Volume{7597d2a3-4404-4f99-b979-6233378a81bf}",
    "IsCentennial": false,
    "PackageType": "0x0",
    "IsPackageEncrypted": false,
    "DeploymentOptions": "0x10000020",
    "IsStreamingPackage": false,
    "IsInRelatedSet": false,
    "IsPackageUsingBDC": false,
    "MainPackageFamilyName": "NULL",
    "CallingProcess": "",
    "IsInPlaceUpdate": "0x0",
    "ErrorFileInfo": "indexingstatehandler.cpp,3328,80070032;appxlog.cpp,862,800706BA;indexingstatehandler.cpp,3329,80070032;indexingstatehandler.cpp,4036,80070032;indexingstatehandler.cpp,6315,80070032;deploymentmanager.cpp,276,80070032;deploymentrequest.cpp,2318,80070032;deploymentrequest.cpp,2568,80070032;errorhelpers.cpp,58,8007029C;errorhelpers.cpp,58,8007029C;deploymentrequest.cpp,3339,80073CF9;",
    "DetailedMessageInfo": "[{GetErrorInfo reports there is no error object to return}];[{Deployment's currentstate (4) did progress far enough to pause. Staged state is (17)}];",
    "RollbackErrorFileInfo": "NULL",
    "RollbackDetailedMessageInfo": "NULL",
    "IsOptional": 0,
    "PackageFlags": "0x0",
    "PackageFlags2": "0x0",
    "HasWin32alacarte": false,
    "HasFullTrust": false,
    "ExternalLocation": "",
    "PackageSourceUri": "",
    "PackageDisplayName": ""
  },
  "message": ""
}

References #