Description

The Windows Biometric Service could not verify Username (SID) using sensor: BiometricSensor.

Message #

The Windows Biometric Service could not verify %13 (%12) using sensor: %1.

The operation failed with error: %14.

Fields #

Description

The Windows Biometric Service successfully verified Username (SID) using sensor: BiometricSensor.

Message #

The Windows Biometric Service successfully verified %13 (%12) using sensor: %1.

Fields #

Description

The Windows Biometric Service could not match Username (SID) with the sample from sensor: BiometricSensor.

Message #

The Windows Biometric Service could not match %13 (%12) with the sample from sensor: %1.

Fields #

Description

The Windows Biometric Service could not complete an identification operation using sensor: BiometricSensor.

Message #

The Windows Biometric Service could not complete an identification operation using sensor: %1.

The operation failed with error: %12

Fields #

Description

The Windows Biometric Service successfully identified Username (SID) using sensor: BiometricSensor.

Message #

The Windows Biometric Service successfully identified %13 (%12) using sensor: %1.

Fields #

Description

The Windows Biometric Service could not determine the identity of the sample from sensor: BiometricSensor.

Message #

The Windows Biometric Service could not determine the identity of the sample from sensor: %1.

Fields #

Description

The Windows Biometric Service started an enrollment operation using sensor: BiometricSensor.

Message #

The Windows Biometric Service started an enrollment operation using sensor: %1

Fields #

Description

The Windows Biometric Service encountered an error while processing and updating an enrollment request using sensor: BiometricSensor.

Message #

The Windows Biometric Service encountered an error while processing and updating an enrollment request using sensor: %1.

The operation failed with error: %12

Fields #

Description

The Windows Biometric Service is processing an enrollment operation and updating an enrollment using sensor: BiometricSensor.

Message #

The Windows Biometric Service is processing an enrollment operation and updating an enrollment using sensor: %1.

Fields #

Description

The Windows Biometric Service failed to enroll Username (SID) using sensor: BiometricSensor.

Message #

The Windows Biometric Service failed to enroll %13 (%12) using sensor: %1.

The operation failed with error: %14.

Fields #

Description

The Windows Biometric Service successfully enrolled Username (SID) using sensor: BiometricSensor.

Message #

The Windows Biometric Service successfully enrolled %13 (%12) using sensor: %1.

Fields #

Description

The Windows Biometric Service failed to begin a capture operation using sensor: BiometricSensor.

Message #

The Windows Biometric Service failed to begin a capture operation using sensor: %1.

The operation failed with error: %12

Fields #

Description

The Windows Biometric Service failed to complete a capture operation using sensor: BiometricSensor.

Message #

The Windows Biometric Service failed to complete a capture operation using sensor: %1.

The operation failed with error: %12, reject detail: %13

Fields #

Description

The Windows Biometric Service failed to export data from sensor: BiometricSensor.

Message #

The Windows Biometric Service failed to export data from sensor: %1.

The operation failed with error: %12

Fields #

Description

The Windows Biometric Service failed to delete a database record for Username (SID) on sensor: BiometricSensor.

Message #

The Windows Biometric Service failed to delete a database record for %13 (%12) on sensor: %1.

The operation failed with error: %14.

Fields #

Description

The Windows Biometric Service successfully deleted a database record for Username (SID) on sensor: BiometricSensor.

Message #

The Windows Biometric Service successfully deleted a database record for %13 (%12) on sensor: %1.

Fields #

Description

The Windows Biometric Service failed to complete a vendor-specific operation for sensor: BiometricSensor.

Message #

The Windows Biometric Service failed to complete a vendor-specific operation for sensor: %1.

The command was directed to the biometric unit's "%12" component.

The operation failed with error: %15

Fields #

Description

The Windows Biometric Service completed a vendor-specific operation for sensor: BiometricSensor.

Message #

The Windows Biometric Service completed a vendor-specific operation for sensor: %1.

The command was directed to the biometric unit's "%12" component.

Fields #

Description

The Windows Biometric Service failed to complete a privileged vendor-specific operation for sensor: BiometricSensor.

Message #

The Windows Biometric Service failed to complete a privileged vendor-specific operation for sensor: %1.

The command was directed to the biometric unit's "%12" component.

The operation failed with error: %15

Fields #

Description

The Windows Biometric Service completed a privileged vendor-specific operation for sensor: BiometricSensor.

Message #

The Windows Biometric Service completed a privileged vendor-specific operation for sensor: %1.

The command was directed to the biometric unit's "%12" component.

Fields #

Description

The Windows Biometric Service cannot complete a request because biometric operations are disabled by current system policy.

Message #

The Windows Biometric Service cannot complete a request because biometric operations are disabled by current system policy.

Description

The Windows Biometric Service cannot complete a request because Terminal Server client sessions are not allowed to access the System sensor pool.

Message #

The Windows Biometric Service cannot complete a request because Terminal Server client sessions are not allowed to access the System sensor pool.

Description

The Windows Biometric Service failed to load an adapter binary: ModulePath.

Message #

The Windows Biometric Service failed to load an adapter binary: %1.

The operation failed with error: %2.

Fields #

Description

The Windows Biometric Service failed to load an adapter binary: ModulePath.

Message #

The Windows Biometric Service failed to load an adapter binary: %1.

The module's "Force Integrity" flag was not set.

Fields #

Description

The Windows Biometric Service failed to load an adapter binary: ModulePath.

Message #

The Windows Biometric Service failed to load an adapter binary: %1.

The module's "%2" interface is not valid.

Fields #

Description

The Windows Biometric Service failed to open sensor: BiometricSensor.

Message #

The Windows Biometric Service failed to open sensor: %1.

The operation failed with error: %2

Fields #

Description

The Windows Biometric Service failed to set the mode of sensor: BiometricSensor.

Message #

The Windows Biometric Service failed to set the mode of sensor: %1.

The operation failed with error: %12

See the "Details" pane for information about the failing configuration.

Fields #

Description

The Windows Biometric Service failed to initialize an adapter binary: BiometricSensor.

Message #

The Windows Biometric Service failed to initialize an adapter binary: %1.

The module's "%12" initialization routine failed with error: %13

See the "Details" pane for information about the failing configuration.

Fields #

Description

The Windows Biometric Service detected a missing or invalid biometric database configuration for sensor: BiometricSensor.

Message #

The Windows Biometric Service detected a missing or invalid biometric database configuration for sensor: %1.

The operation failed with error: %12

See the "Details" pane for information about the failing configuration.

Fields #

Description

The Windows Biometric Service encountered an error while opening the database associated with sensor: BiometricSensor.

Message #

The Windows Biometric Service encountered an error while opening the database associated with sensor: %1.

The operation failed with error: %12

See the "Details" pane for information about the failing configuration.

Fields #

Description

The Windows Biometric Service successfully created a Biometric Unit for sensor: BiometricSensor.

Message #

The Windows Biometric Service successfully created a Biometric Unit for sensor: %1

The sensor's mode is "%6," its pool-type is "%7," and it's isolated in a "%8" process.

See the "Details" pane for additional information about the sensor's new configuration.

Fields #

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-Biometrics",
    "guid": "A0E3D8EA-C34F-4419-A1DB-90435B8B21D0",
    "event_source_name": "",
    "event_id": 1108,
    "version": 0,
    "level": 5,
    "task": 1,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2023-11-05T22:28:47.876143+00:00",
    "event_record_id": 6,
    "correlation": {},
    "execution": {
      "process_id": 3128,
      "thread_id": 2152
    },
    "channel": "Microsoft-Windows-Biometrics/Operational",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "BiometricSensor": "Analog NUI Voice Virtual Sensor (\\Voice\\Virtual Sensors\\{F25AB4A2-593A-4A89-B9FF-8144BEA81E15})",
    "SensorAdapter": "NUIVoiceWBSAdapters.dll",
    "EngineAdapter": "NUIVoiceWBSAdapters.dll",
    "StorageAdapter": "WinBioStorageAdapter.dll",
    "DatabaseID": "51F39552-1075-4199-B513-0C10EA185DB0",
    "SensorMode": 1,
    "SensorPool": 1,
    "IsolationLevel": 0,
    "IsolationSensorAdapter": "-",
    "IsolationEngineAdapter": "-",
    "IsolationStorageAdapter": "-"
  },
  "message": ""
}

References #

• Example event sourced from https://github.com/NextronSystems/evtx-baseline

Description

The Windows Biometric Service failed to configure a Biometric Unit for sensor: BiometricSensor.

Message #

The Windows Biometric Service failed to configure a Biometric Unit for sensor: %1.

The operation failed with error: %12

See the "Details" pane for information about the failing configuration.

Fields #

Description

The Windows Biometric Service failed to create a Biometric Unit for sensor: BiometricSensor.

Message #

The Windows Biometric Service failed to create a Biometric Unit for sensor: %1.

The driver installation package has missing or incorrect configuration values. Contact your PC support personnel for assistance.

The operation failed with error: %2

Fields #

Description

The Windows Biometric Service failed to create a Biometric Unit for sensor: BiometricSensor.

Message #

The Windows Biometric Service failed to create a Biometric Unit for sensor: %1.

The operation failed with error: %2

Fields #

Description

The Windows Biometric Service failed to complete the calibration setup protocol: BiometricSensor.

Message #

The Windows Biometric Service failed to complete the calibration setup protocol: %1.

The "%12" failed with error: %13

See the "Details" pane for information about the failing configuration.

Fields #

Description

The Windows Biometric Service failed to load an adapter binary: ModulePath.

Message #

The Windows Biometric Service failed to load an adapter binary: %1.

The module was not properly signed.

Fields #

Description

The Windows Biometric Service failed to transfer private sensor type information to the matching engine: BiometricSensor.

Message #

The Windows Biometric Service failed to transfer private sensor type information to the matching engine: %1.

The "%12" failed with error: %13

See the "Details" pane for information about the failing configuration.

Fields #

Description

The Windows Biometric Service's Source policy configuration.

Message #

The Windows Biometric Service's %1 policy configuration:
Value: %3
Source: %2

Fields #

Description

The Windows Biometric Service's ESS state configuration.

Message #

The Windows Biometric Service's ESS state configuration:
Requires TPM: %1
VBS capable: %2
Non VBS Windows Hello: %3
VBS Windows Hello: %4
Requires VBS Runnig: %5
Requires VBS Encryption keys: %6
Requires enablement: %7
Managed by policy: %8
Non VBS Bio Enrollments: %9
VBS Bio enrollments: %10
ESS face sensor: %11
ESS fpr sensor: %12
Requires isolated process: %13
Blocked non ESS fpr: %14
Blocked non ESS camera: %15
Is device ESS state default: %16

Fields #

Description

The Windows Fingerprint Credential Provider could not log Username on because the stored credential was invalid.

Message #

The Windows Fingerprint Credential Provider could not log %1 on because the stored credential was invalid.

Fields #

Description

The Windows Fingerprint Credential Provider failed to enumerate its tile.

Message #

The Windows Fingerprint Credential Provider failed to enumerate its tile.

The operation failed with error: %1.

Fields #

Description

The Windows Fingerprint Credential Provider could not log Username on because the user does not have a credential stored for biometric logon.

Message #

The Windows Fingerprint Credential Provider could not log %1 on because the user does not have a credential stored for biometric logon.

Fields #

Description

The Windows Fingerprint Credential Provider has disabled biometric authentication.

Message #

The Windows Fingerprint Credential Provider has disabled biometric authentication.

The operation failed with error: %1.

Fields #

Description

The Windows Biometric Credential Manager successfully stored a credential for Username (SID).

Message #

The Windows Biometric Credential Manager successfully stored a credential for %2 (%1).

Fields #

Description

The Windows Biometric Credential Manager failed to store a credential for Username (SID) due to the caller having insufficient privileges.

Message #

The Windows Biometric Credential Manager failed to store a credential for %2 (%1) due to the caller having insufficient privileges.

The operation failed with error: %3.

Fields #

Description

The Windows Biometric Credential Manager failed to store a credential because the Windows Fingerprint Credential Provider is disabled.

Message #

The Windows Biometric Credential Manager failed to store a credential because the Windows Fingerprint Credential Provider is disabled.

Description

The Windows Biometric Credential Manager failed to store a credential.

Message #

The Windows Biometric Credential Manager failed to store a credential.

The operation failed with error: %1.

Fields #

Description

The Windows Biometric Credential Manager successfully removed a credential for Username (SID).

Message #

The Windows Biometric Credential Manager successfully removed a credential for %2 (%1).

Fields #

Description

The Windows Biometric Credential Manager failed to remove a credential for Username (SID) due to the caller having insufficient privileges.

Message #

The Windows Biometric Credential Manager failed to remove a credential for %2 (%1) due to the caller having insufficient privileges.

The operation failed with error: %3.

Fields #

Description

The Windows Biometric Credential Manager failed to remove a credential because the Windows Fingerprint Credential Provider is disabled.

Message #

The Windows Biometric Credential Manager failed to remove a credential because the Windows Fingerprint Credential Provider is disabled.

Description

The Windows Biometric Credential Manager failed to remove a credential.

Message #

The Windows Biometric Credential Manager failed to remove a credential.

The operation failed with error: %1.

Fields #

Description

The Windows Biometric Credential Manager successfully retrieved the credential state for Username (SID).

Message #

The Windows Biometric Credential Manager successfully retrieved the credential state for %2 (%1).

Fields #

Description

The Windows Biometric Credential Manager failed to retrieve the credential state for Username (SID) due to the caller having insufficient privileges.

Message #

The Windows Biometric Credential Manager failed to retrieve the credential state for %2 (%1) due to the caller having insufficient privileges.

The operation failed with error: %3.

Fields #

Description

The Windows Biometric Credential Manager failed to retrieve the credential state because the Windows Fingerprint Credential Provider is disabled.

Message #

The Windows Biometric Credential Manager failed to retrieve the credential state because the Windows Fingerprint Credential Provider is disabled.

Description

The Windows Biometric Credential Manager failed to retrieve the state of a credential.

Message #

The Windows Biometric Credential Manager failed to retrieve the state of a credential.

The operation failed with error: %1.

Fields #

Description

The Windows Biometric Credential Manager successfully switched to user Username (SID).

Message #

The Windows Biometric Credential Manager successfully switched to user %2 (%1).

Fields #

Description

The Windows Biometric Credential Manager failed to switch to user Username (SID) due to the caller having insufficient privileges.

Message #

The Windows Biometric Credential Manager failed to switch to user %2 (%1) due to the caller having insufficient privileges.

The operation failed with error: %3.

Fields #

Description

The Windows Biometric Credential Manager failed to switch to the specified user because the Windows Fingerprint Credential Provider is disabled.

Message #

The Windows Biometric Credential Manager failed to switch to the specified user because the Windows Fingerprint Credential Provider is disabled.

Description

The Windows Biometric Credential Manager failed to switch to user Username (SID) because they are already the interactive user.

Message #

The Windows Biometric Credential Manager failed to switch to user %2 (%1) because they are already the interactive user.

Fields #

Description

The Windows Biometric Credential Manager failed to switch to the specified user.

Message #

The Windows Biometric Credential Manager failed to switch to the specified user.

The operation failed with error: %1.

Fields #

Description

The Windows Biometric Service failed to start its secure component.

Message #

The Windows Biometric Service failed to start its secure component.

Reason for unavailability: %1.

The operation failed with error: %2.

Fields #

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-Biometrics",
    "guid": "A0E3D8EA-C34F-4419-A1DB-90435B8B21D0",
    "event_source_name": "",
    "event_id": 1600,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2023-11-05T22:28:47.621214+00:00",
    "event_record_id": 4,
    "correlation": {},
    "execution": {
      "process_id": 3128,
      "thread_id": 2152
    },
    "channel": "Microsoft-Windows-Biometrics/Operational",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "AvailabilityInfo": 0,
    "ErrorCode": "0x80070032"
  },
  "message": ""
}

References #

• Example event sourced from https://github.com/NextronSystems/evtx-baseline

Description

The Windows Biometric Service successfully started its secure component.

Message #

The Windows Biometric Service successfully started its secure component.

Description

The Windows Biometric Service failed to migrate templates into Virtual Secure Mode.The operation failed with error: {ErrorCode}.

Message #

The Windows Biometric Service failed to migrate templates into Virtual Secure Mode.The operation failed with error: {ErrorCode}.

Fields #

Description

The Windows Biometric Service successfully migrated templates into Virtual Secure Mode.

Message #

The Windows Biometric Service successfully migrated templates into Virtual Secure Mode.

Description

The Windows Biometric Service secure component was compromised.The validation failed with error: {ErrorCode}.

Message #

The Windows Biometric Service secure component was compromised.The validation failed with error: {ErrorCode}.

Fields #

Description

The Windows Biometric Service secure component successfully authorized user Username (SID).

Message #

The Windows Biometric Service secure component successfully authorized user %2 (%1).

Fields #

Description

The Windows Biometric Service secure component successfully redeemed an authorization for user Username (SID).

Message #

The Windows Biometric Service secure component successfully redeemed an authorization for user %2 (%1).

Fields #

Description

The Windows Biometric Service secure componets successfully established a secure connection with sensor: BiometricSensor.

Message #

The Windows Biometric Service secure componets successfully established a secure connection with sensor: %1.

Fields #

Description

The Windows Biometric Service secure componets successfully reestablished a secure connection with sensor: BiometricSensor.

Message #

The Windows Biometric Service secure componets successfully reestablished a secure connection with sensor: %1.

Fields #

Description

The Windows Biometric Service secure component failed to establish a secure connection with sensor: BiometricSensor.

Message #

The Windows Biometric Service secure component failed to establish a secure connection with sensor: %1.

Fields #

Description

The Windows Biometric Service secure component failed to delete an authorized enrollment for Username (SID) on sensor: BiometricSensor.

Message #

The Windows Biometric Service secure component failed to delete an authorized enrollment for %3 (%2) on sensor: %1.

The operation failed with error: %4.

Fields #

Description

The Windows Biometric Service secure component successfully deleted an authorized enrollment for Username (SID) on sensor: BiometricSensor.

Message #

The Windows Biometric Service secure component successfully deleted an authorized enrollment for %3 (%2) on sensor: %1.

Fields #

Description

The Windows Biometric Service successfully protected data for user SID (Type).

Message #

The Windows Biometric Service successfully protected data for user %2 (%1).

Type: %3.

Fields #

Description

The Windows Biometric Service failed to protect data for user Username (SID).

Message #

The Windows Biometric Service failed to protect data for user %2 (%1).

Type: %3

The operation failed with error: %4.

Fields #

Description

The Windows Biometric Service successfully unprotected data for user SID (Type).

Message #

The Windows Biometric Service successfully unprotected data for user %2 (%1).

Type: %3.

Fields #

Description

The Windows Biometric Service failed to unprotect data for user Username (SID).

Message #

The Windows Biometric Service failed to unprotect data for user %2 (%1).

Type: %3

The operation failed with error: %4.

Fields #