Microsoft-Windows-BitLocker-DrivePreparationTool

16 events across 2 channels

Event ID	Title	Channel
1	A problem occurred while running the BitLocker Drive Preparation Tool.	Admin
2	A problem occurred while running the BitLocker Drive Preparation Tool.	Admin
3	A problem occurred while running the BitLocker Drive Preparation Tool.	Admin
4	A problem occurred while running the BitLocker Drive Preparation Tool.	Admin
5	A problem occurred while running the BitLocker Drive Preparation Tool.	Admin
256	Warning Code: Warning_Code.	Admin
512	The BitLocker Drive Configuration Tool successfully completed.	Admin
4096	Found a candidate volume for shrink or merge.	Operational
4097	Found an unallocated extent large enough for the requested size.	Operational
4098	Disk extent located on the hard disk containing the System Drive.	Operational
4099	Command-line parameters for the BitLocker Drive Preparation Tool.	Operational
4100	Drive will shrink and new active drive PartitionNumber will be created.	Operational
4101	New drive ExtentOffset will be created from unallocated space.	Operational
4102	Drive will be set as the new system drive Volume Name.	Operational
4103	Detected Windows Recovery Environment volume Volume Path.	Operational
4104	A volume failed to meet the requirements for a target volume.	Operational

Event ID 1 — A problem occurred while running the BitLocker Drive Preparation Tool.

Provider: Microsoft-Windows-BitLocker-DrivePreparationTool
Channel: Admin
Opcode: Initialization

Description

A problem occurred while running the BitLocker Drive Preparation Tool.

Message #

A problem occurred while running the BitLocker Drive Preparation Tool.
Error Code: %1
Error Text: %2

Fields #

Name	Description
`Error_Code` HexInt32	—
`Error_Text` UnicodeString	—
`MessageCode` HexInt32	—
`MessageText` UnicodeString	—

Event ID 2 — A problem occurred while running the BitLocker Drive Preparation Tool.

Provider: Microsoft-Windows-BitLocker-DrivePreparationTool
Channel: Admin
Opcode: Shrink

Description

A problem occurred while running the BitLocker Drive Preparation Tool.

Message #

A problem occurred while running the BitLocker Drive Preparation Tool.
Error Code: %1
Error Text: %2

Fields #

Name	Description
`Error_Code` HexInt32	—
`Error_Text` UnicodeString	—
`MessageCode` HexInt32	—
`MessageText` UnicodeString	—

Event ID 3 — A problem occurred while running the BitLocker Drive Preparation Tool.

Provider: Microsoft-Windows-BitLocker-DrivePreparationTool
Channel: Admin
Opcode: Create

Description

A problem occurred while running the BitLocker Drive Preparation Tool.

Message #

A problem occurred while running the BitLocker Drive Preparation Tool.
Error Code: %1
Error Text: %2

Fields #

Name	Description
`Error_Code` HexInt32	—
`Error_Text` UnicodeString	—
`MessageCode` HexInt32	—
`MessageText` UnicodeString	—

Event ID 4 — A problem occurred while running the BitLocker Drive Preparation Tool.

Provider: Microsoft-Windows-BitLocker-DrivePreparationTool
Channel: Admin
Opcode: Prepare

Description

A problem occurred while running the BitLocker Drive Preparation Tool.

Message #

A problem occurred while running the BitLocker Drive Preparation Tool.
Error Code: %1
Error Text: %2

Fields #

Name	Description
`Error_Code` HexInt32	—
`Error_Text` UnicodeString	—
`MessageCode` HexInt32	—
`MessageText` UnicodeString	—

Event ID 5 — A problem occurred while running the BitLocker Drive Preparation Tool.

Provider: Microsoft-Windows-BitLocker-DrivePreparationTool
Channel: Admin

Description

A problem occurred while running the BitLocker Drive Preparation Tool.

Message #

A problem occurred while running the BitLocker Drive Preparation Tool.
Error Code: %1
Error Text: %2

Fields #

Name	Description
`Error_Code` HexInt32	—
`Error_Text` UnicodeString	—
`MessageCode` HexInt32	—
`MessageText` UnicodeString	—

Event ID 256 — Warning Code: Warning_Code.

Provider: Microsoft-Windows-BitLocker-DrivePreparationTool
Channel: Admin

Description

Warning Code: Warning_Code.

Message #

Warning Code: %1
Warning Text: %2

Fields #

Name	Description
`Warning_Code` HexInt32	—
`Warning_Text` UnicodeString	—
`MessageCode` HexInt32	—
`MessageText` UnicodeString	—

Event ID 512 — The BitLocker Drive Configuration Tool successfully completed.

Provider: Microsoft-Windows-BitLocker-DrivePreparationTool
Channel: Admin

Description

The BitLocker Drive Configuration Tool successfully completed. The target hard disk is ready for BitLocker.

Message #

The BitLocker Drive Configuration Tool successfully completed. The target hard disk is ready for BitLocker.

Event ID 4096 — Found a candidate volume for shrink or merge.

Provider: Microsoft-Windows-BitLocker-DrivePreparationTool
Channel: Operational
Opcode: Initialization

Description

Found a candidate volume for shrink or merge.

Message #

Found a candidate volume for shrink or merge.
Shrinkable: %1
Candidate Volume Name: %3

Fields #

Name	Description
`Shrinkable` Boolean	—
`Candidate_Volume_Name`	—
`ContainsWinRE` Boolean	—
`VolumeName` UnicodeString	—
`VolumeSize` UInt64	—
`VolumeFreeSpace` UInt64	—
`VolumeMaxShrinkSize` UInt64	—
`VolumeFlags` HexInt32	—
`DriveLetter` UnicodeString	—
`DiskNumber` UInt32	—
`PartitionNumber` UInt32	—

Event ID 4097 — Found an unallocated extent large enough for the requested size.

Provider: Microsoft-Windows-BitLocker-DrivePreparationTool
Channel: Operational
Opcode: Initialization

Description

Found an unallocated extent large enough for the requested size.

Message #

Found an unallocated extent large enough for the requested size.
Offset: %3
Size: %4

Fields #

Name	Description
`Offset` UInt64	—
`Size` UInt64	—
`DiskId` GUID	—
`Type` HexInt32	—
`VolumeId` GUID	—

Event ID 4098 — Disk extent located on the hard disk containing the System Drive.

Provider: Microsoft-Windows-BitLocker-DrivePreparationTool
Channel: Operational
Opcode: Initialization

Description

Disk extent located on the hard disk containing the System Drive.

Message #

Disk extent located on the hard disk containing the System Drive.
Offset: %3
Size: %4

Fields #

Name	Description
`Offset` UInt64	—
`Size` UInt64	—
`DiskId` GUID	—
`Type` HexInt32	—
`VolumeId` GUID	—

Event ID 4099 — Command-line parameters for the BitLocker Drive Preparation Tool.

Provider: Microsoft-Windows-BitLocker-DrivePreparationTool
Channel: Operational
Opcode: Initialization

Description

Command-line parameters for the BitLocker Drive Preparation Tool.

Message #

Command-line parameters for the BitLocker Drive Preparation Tool:
   %1

Fields #

Name	Description
`RawCommandLine` UnicodeString	—
`ShowUsage` Boolean	—
`DisplayDriveInfo` Boolean	—
`TargetDriveLetter` UnicodeString	—
`TargetAction` UInt32	—
`NewSystemDriveLetter` UnicodeString	—
`ShrinkSize` Int64	—
`QuietMode` Boolean	—
`AutoRestart` Boolean	—

Event ID 4100 — Drive will shrink and new active drive PartitionNumber will be created.

Provider: Microsoft-Windows-BitLocker-DrivePreparationTool
Channel: Operational
Opcode: Initialization

Description

Drive will shrink and new active drive PartitionNumber will be created.

Message #

Drive will shrink and new active drive %6 will be created. 
Volume Name: %1
Shrink Size: %5 Bytes

Fields #

Name	Description
`Volume_Name`	—
`Shrink_Size`	—
`VolumeName` UnicodeString	—
`DriveLetter` UnicodeString	—
`DiskNumber` UInt32	—
`PartitionNumber` UInt32	—
`ShrinkSize` UInt64	—
`NewDriveLetter` UnicodeString	—

Event ID 4101 — New drive ExtentOffset will be created from unallocated space.

Provider: Microsoft-Windows-BitLocker-DrivePreparationTool
Channel: Operational
Opcode: Initialization

Description

New drive ExtentOffset will be created from unallocated space.

Message #

New drive %3 will be created from unallocated space
Unallocated extent offset: %1
New partition size: %2 Bytes

Fields #

Name	Description
`Unallocated_extent_offset`	—
`New_partition_size`	—
`ExtentOffset` UInt64	—
`NewPartitionSize` UInt64	—
`NewDriveLetter` UnicodeString	—

Event ID 4102 — Drive will be set as the new system drive Volume Name.

Provider: Microsoft-Windows-BitLocker-DrivePreparationTool
Channel: Operational
Opcode: Initialization

Description

Drive will be set as the new system drive.

Message #

Drive will be set as the new system drive
Volume Name: %1

Fields #

Name	Description
`Volume_Name`	—
`VolumeName` UnicodeString	—
`DriveLetter` UnicodeString	—
`DiskNumber` UInt32	—
`PartitionNumber` UInt32	—

Event ID 4103 — Detected Windows Recovery Environment volume Volume Path.

Provider: Microsoft-Windows-BitLocker-DrivePreparationTool
Channel: Operational
Opcode: Initialization

Description

Detected Windows Recovery Environment volume.

Message #

Detected Windows Recovery Environment volume
Volume Path: %1

Fields #

Name	Description
`Volume_Path`	—
`WinREVolumeName` UnicodeString	—
`DriveLetter` UnicodeString	—
`DiskNumber` UInt32	—
`PartitionNumber` UInt32	—

Event ID 4104 — A volume failed to meet the requirements for a target volume.

Provider: Microsoft-Windows-BitLocker-DrivePreparationTool
Channel: Operational
Opcode: Initialization

Description

A volume failed to meet the requirements for a target volume.

Message #

A volume failed to meet the requirements for a target volume.
Volume Name: %3
Reason: %2

Fields #

Name	Description
`Reason`	—
`Volume_Name`	—
`MessageCode` HexInt32	—
`MessageText` UnicodeString	—
`VolumeName` UnicodeString	—
`DriveLetter` UnicodeString	—
`DiskNumber` UInt32	—
`PartitionNumber` UInt32	—