Message

The Windows Biometric Service could not verify %13 (%12) using sensor: %1.

The operation failed with error: %14.

Fields

Message

The Windows Biometric Service successfully verified %13 (%12) using sensor: %1.

Fields

Message

The Windows Biometric Service could not match %13 (%12) with the sample from sensor: %1.

Fields

Message

The Windows Biometric Service could not complete an identification operation using sensor: %1.

The operation failed with error: %12

Fields

Message

The Windows Biometric Service successfully identified %13 (%12) using sensor: %1.

Fields

Message

The Windows Biometric Service could not determine the identity of the sample from sensor: %1.

Fields

Message

The Windows Biometric Service started an enrollment operation using sensor: %1

Fields

Message

The Windows Biometric Service encountered an error while processing and updating an enrollment request using sensor: %1.

The operation failed with error: %12

Fields

Message

The Windows Biometric Service is processing an enrollment operation and updating an enrollment using sensor: %1.

Fields

Message

The Windows Biometric Service failed to enroll %13 (%12) using sensor: %1.

The operation failed with error: %14.

Fields

Message

The Windows Biometric Service successfully enrolled %13 (%12) using sensor: %1.

Fields

Message

The Windows Biometric Service failed to begin a capture operation using sensor: %1.

The operation failed with error: %12

Fields

Message

The Windows Biometric Service failed to complete a capture operation using sensor: %1.

The operation failed with error: %12, reject detail: %13

Fields

Message

The Windows Biometric Service failed to export data from sensor: %1.

The operation failed with error: %12

Fields

Message

The Windows Biometric Service failed to delete a database record for %13 (%12) on sensor: %1.

The operation failed with error: %14.

Fields

Message

The Windows Biometric Service successfully deleted a database record for %13 (%12) on sensor: %1.

Fields

Message

The Windows Biometric Service failed to complete a vendor-specific operation for sensor: %1.

The command was directed to the biometric unit's "%12" component.

The operation failed with error: %15

Fields

Message

The Windows Biometric Service completed a vendor-specific operation for sensor: %1.

The command was directed to the biometric unit's "%12" component.

Fields

Message

The Windows Biometric Service failed to complete a privileged vendor-specific operation for sensor: %1.

The command was directed to the biometric unit's "%12" component.

The operation failed with error: %15

Fields

Message

The Windows Biometric Service completed a privileged vendor-specific operation for sensor: %1.

The command was directed to the biometric unit's "%12" component.

Fields

Message

The Windows Biometric Service cannot complete a request because biometric operations are disabled by current system policy.

Message

The Windows Biometric Service cannot complete a request because Terminal Server client sessions are not allowed to access the System sensor pool.

Message

The Windows Biometric Service failed to load an adapter binary: %1.

The operation failed with error: %2.

Fields

Message

The Windows Biometric Service failed to load an adapter binary: %1.

The module's "Force Integrity" flag was not set.

Fields

Message

The Windows Biometric Service failed to load an adapter binary: %1.

The module's "%2" interface is not valid.

Fields

Message

The Windows Biometric Service failed to open sensor: %1.

The operation failed with error: %2

Fields

Message

The Windows Biometric Service failed to set the mode of sensor: %1.

The operation failed with error: %12

See the "Details" pane for information about the failing configuration.

Fields

Message

The Windows Biometric Service failed to initialize an adapter binary: %1.

The module's "%12" initialization routine failed with error: %13

See the "Details" pane for information about the failing configuration.

Fields

Message

The Windows Biometric Service detected a missing or invalid biometric database configuration for sensor: %1.

The operation failed with error: %12

See the "Details" pane for information about the failing configuration.

Fields

Message

The Windows Biometric Service encountered an error while opening the database associated with sensor: %1.

The operation failed with error: %12

See the "Details" pane for information about the failing configuration.

Fields

Message

The Windows Biometric Service successfully created a Biometric Unit for sensor: %1

The sensor's mode is "%6," its pool-type is "%7," and it's isolated in a "%8" process.

See the "Details" pane for additional information about the sensor's new configuration.

Fields

Example Event

system:
  provider: Microsoft-Windows-Biometrics
  guid: A0E3D8EA-C34F-4419-A1DB-90435B8B21D0
  event_source_name: ''
  event_id: 1108
  version: 0
  level: 5
  task: 1
  opcode: 0
  keywords: 9223372036854775808
  time_created: '2023-11-05T22:28:47.876143+00:00'
  event_record_id: 6
  correlation: {}
  execution:
    process_id: 3128
    thread_id: 2152
  channel: Microsoft-Windows-Biometrics/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-18
event_data:
  BiometricSensor: Analog NUI Voice Virtual Sensor (\Voice\Virtual Sensors\{F25AB4A2-593A-4A89-B9FF-8144BEA81E15})
  SensorAdapter: NUIVoiceWBSAdapters.dll
  EngineAdapter: NUIVoiceWBSAdapters.dll
  StorageAdapter: WinBioStorageAdapter.dll
  DatabaseID: 51F39552-1075-4199-B513-0C10EA185DB0
  SensorMode: 1
  SensorPool: 1
  IsolationLevel: 0
  IsolationSensorAdapter: '-'
  IsolationEngineAdapter: '-'
  IsolationStorageAdapter: '-'
message: ''

References

• Example event sourced from https://github.com/NextronSystems/evtx-baseline

Message

The Windows Biometric Service failed to configure a Biometric Unit for sensor: %1.

The operation failed with error: %12

See the "Details" pane for information about the failing configuration.

Fields

Message

The Windows Biometric Service failed to create a Biometric Unit for sensor: %1.

The driver installation package has missing or incorrect configuration values. Contact your PC support personnel for assistance.

The operation failed with error: %2

Fields

Message

The Windows Biometric Service failed to create a Biometric Unit for sensor: %1.

The operation failed with error: %2

Fields

Message

The Windows Biometric Service failed to complete the calibration setup protocol: %1.

The "%12" failed with error: %13

See the "Details" pane for information about the failing configuration.

Fields

Message

The Windows Biometric Service failed to load an adapter binary: %1.

The module was not properly signed.

Fields

Message

The Windows Biometric Service failed to transfer private sensor type information to the matching engine: %1.

The "%12" failed with error: %13

See the "Details" pane for information about the failing configuration.

Fields

Message

The Windows Biometric Service's %1 policy configuration:
Value: %3
Source: %2

Fields

Message

The Windows Biometric Service's ESS state configuration:
Requires TPM: %1
VBS capable: %2
Non VBS Windows Hello: %3
VBS Windows Hello: %4
Requires VBS Runnig: %5
Requires VBS Encryption keys: %6
Requires enablement: %7
Managed by policy: %8
Non VBS Bio Enrollments: %9
VBS Bio enrollments: %10
ESS face sensor: %11
ESS fpr sensor: %12
Requires isolated process: %13
Blocked non ESS fpr: %14
Blocked non ESS camera: %15
Is device ESS state default: %16

Fields

Message

The Windows Fingerprint Credential Provider could not log %1 on because the stored credential was invalid.

Fields

Message

The Windows Fingerprint Credential Provider failed to enumerate its tile.

The operation failed with error: %1.

Fields

Message

The Windows Fingerprint Credential Provider could not log %1 on because the user does not have a credential stored for biometric logon.

Fields

Message

The Windows Fingerprint Credential Provider has disabled biometric authentication.

The operation failed with error: %1.

Fields

Message

The Windows Biometric Credential Manager successfully stored a credential for %2 (%1).

Fields

Message

The Windows Biometric Credential Manager failed to store a credential for %2 (%1) due to the caller having insufficient privileges.

The operation failed with error: %3.

Fields

Message

The Windows Biometric Credential Manager failed to store a credential because the Windows Fingerprint Credential Provider is disabled.

Message

The Windows Biometric Credential Manager failed to store a credential.

The operation failed with error: %1.

Fields

Message

The Windows Biometric Credential Manager successfully removed a credential for %2 (%1).

Fields

Message

The Windows Biometric Credential Manager failed to remove a credential for %2 (%1) due to the caller having insufficient privileges.

The operation failed with error: %3.

Fields

Message

The Windows Biometric Credential Manager failed to remove a credential because the Windows Fingerprint Credential Provider is disabled.

Message

The Windows Biometric Credential Manager failed to remove a credential.

The operation failed with error: %1.

Fields

Message

The Windows Biometric Credential Manager successfully retrieved the credential state for %2 (%1).

Fields

Message

The Windows Biometric Credential Manager failed to retrieve the credential state for %2 (%1) due to the caller having insufficient privileges.

The operation failed with error: %3.

Fields

Message

The Windows Biometric Credential Manager failed to retrieve the credential state because the Windows Fingerprint Credential Provider is disabled.

Message

The Windows Biometric Credential Manager failed to retrieve the state of a credential.

The operation failed with error: %1.

Fields

Message

The Windows Biometric Credential Manager successfully switched to user %2 (%1).

Fields

Message

The Windows Biometric Credential Manager failed to switch to user %2 (%1) due to the caller having insufficient privileges.

The operation failed with error: %3.

Fields

Message

The Windows Biometric Credential Manager failed to switch to the specified user because the Windows Fingerprint Credential Provider is disabled.

Message

The Windows Biometric Credential Manager failed to switch to user %2 (%1) because they are already the interactive user.

Fields

Message

The Windows Biometric Credential Manager failed to switch to the specified user.

The operation failed with error: %1.

Fields

Message

The Windows Biometric Service failed to start its secure component.

Reason for unavailability: %1.

The operation failed with error: %2.

Fields

Example Event

system:
  provider: Microsoft-Windows-Biometrics
  guid: A0E3D8EA-C34F-4419-A1DB-90435B8B21D0
  event_source_name: ''
  event_id: 1600
  version: 0
  level: 4
  task: 1
  opcode: 0
  keywords: 9223372036854775808
  time_created: '2023-11-05T22:28:47.621214+00:00'
  event_record_id: 4
  correlation: {}
  execution:
    process_id: 3128
    thread_id: 2152
  channel: Microsoft-Windows-Biometrics/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-18
event_data:
  AvailabilityInfo: 0
  ErrorCode: '0x80070032'
message: ''

References

• Example event sourced from https://github.com/NextronSystems/evtx-baseline

Message

The Windows Biometric Service successfully started its secure component.

Message

The Windows Biometric Service failed to migrate templates into Virtual Secure Mode.The operation failed with error: {ErrorCode}.

Fields

Message

The Windows Biometric Service successfully migrated templates into Virtual Secure Mode.

Message

The Windows Biometric Service secure component was compromised.The validation failed with error: {ErrorCode}.

Fields

Message

The Windows Biometric Service secure component successfully authorized user %2 (%1).

Fields

Message

The Windows Biometric Service secure component successfully redeemed an authorization for user %2 (%1).

Fields

Message

The Windows Biometric Service secure componets successfully established a secure connection with sensor: %1.

Fields

Message

The Windows Biometric Service secure componets successfully reestablished a secure connection with sensor: %1.

Fields

Message

The Windows Biometric Service secure component failed to establish a secure connection with sensor: %1.

Fields

Message

The Windows Biometric Service secure component failed to delete an authorized enrollment for %3 (%2) on sensor: %1.

The operation failed with error: %4.

Fields

Message

The Windows Biometric Service secure component successfully deleted an authorized enrollment for %3 (%2) on sensor: %1.

Fields

Message

The Windows Biometric Service successfully protected data for user %2 (%1).

Type: %3.

Fields

Message

The Windows Biometric Service failed to protect data for user %2 (%1).

Type: %3

The operation failed with error: %4.

Fields

Message

The Windows Biometric Service successfully unprotected data for user %2 (%1).

Type: %3.

Fields

Message

The Windows Biometric Service failed to unprotect data for user %2 (%1).

Type: %3

The operation failed with error: %4.

Fields