Microsoft-Windows-CloudRestoreLauncher

91 events across 1 channel

Event IDTitleChannel
1Error ErrorCode occurred.Operational
2A backup operation has started.Operational
3A backup operation has completed.Operational
4A restore operation has started.Operational
5A restore operation has completed.Operational
6Invoking backup restore handler HandlerId at index HandlerIndex.Operational
7Skipping backup restore handler HandlerId at index HandlerIndex.Operational
8Configuration is using variant Variant with payload Payload.Operational
9Manifest-based OperationMode operation failed to initialize with error …Operational
10Manifest-based OperationMode operation processed a backup unit and returned …Operational
11Manifest-based OperationMode operation failed to process a backup with error …Operational
12The backup operation is associated with a file.Operational
13The backup operation is associated with a file.Operational
14The restore operation is associated with a file.Operational
15The restore operation is associated with a file.Operational
16Loaded cloud data for TypeName.Operational
17Unable to load cloud data for TypeName.Operational
18Saved cloud data for TypeName.Operational
19Windows backup preferences settings Cloud store APIs Call Event.Operational
20Windows backup preferences settings Cloud store APIs Data Event.Operational
21Information Message.Operational
22The backup operation is associated with contrast theme.Operational
23The restore operation is associated with contrast theme.Operational
24The restore operation is associated with contrast theme.Operational
25The backup operation is associated with Date and time.Operational
26The restore operation is associated with Date and time.Operational
27Background ColorOperational
28Position of the PictureOperational
29Updated backup time in device profile ProfileId and sent to server transport for …Operational
30Updated backup time in device profile ProfileId in local cache; transport not …Operational
31Error ErrorCode occurred while attempting to update backup time in device …Operational
32The backup operation is associated with personalization theme.Operational
33The restore service identified PlaceholderCount placeholder tiles requiring …Operational
34The restore service was resumed to monitor placeholders.Operational
35Origin for OriginContext: Product AppIdOrProducCode with tile TileId was …Operational
36The backup operation is associated with Secondary Accounts.Operational
37The restore operation is associated with Secondary Accounts.Operational
38The API data returned to backup associated with Secondary Accounts.Operational
39Processing packaged products startedOperational
40Processing packaged products stoppedOperational
41Processing unpackaged products startedOperational
42Processing unpackaged products stoppedOperational
43Creating process CommandLine.Operational
44Created process ProcessId.Operational
45Process ProcessId exited.Operational
46The restore operation is associated with personalization theme.Operational
47The backup operation is associated with ColorSettings.Operational
48The restore operation is associated with ColorSettings.Operational
49An app restore operation has started.Operational
50A app restore operation has completed.Operational
51Consulting compat providers started.Operational
52Consulting compat providers stopped.Operational
53The backup operation is associated with Lunar Calendar Settings.Operational
54The restore operation is associated with Lunar Calendar Settings.Operational
55The backup operation is associated with Nightlight settings.Operational
56The backup operation is associated with Nightlight settings.Operational
57The restore operation is associated with Nightlight settings.Operational
58The restore operation is associated with Nightlight settings.Operational
59The restore operation is associated with Sound settings.Operational
60The restore operation data, Associated with Sound settings.Operational
61The backup operation is associated with Ink Pen Settings.Operational
62The restore operation is associated with Ink Pen Settings.Operational
63Ink Pen Setting Status.Operational
64The backup operation is associated with Background Slideshow Settings.Operational
65The restore operation is associated with Background Slideshow Settings.Operational
66The restore operation Error, Associated with Sound settings.Operational
67CPL Excluded Event Name, Associated with Sound settings.Operational
68The backup operation is associated with Device settings.Operational
69The restore operation is associated with Device settings.Operational
70The backup operation is associated with Device settings.Operational
71The restore operation is associated with Device settings.Operational
72The Bond Schema Activity backup associated with Device settings restore …Operational
73The Bond Schema Activity backup associated with Device settings backup opration.Operational
74The Skipping operation is associated with Device settings.Operational
75Taskbar Pins are prevented for All App placeholders with App IDsOperational
76Error: Type; See event details for more information.Operational
77The backup operation is associated with contrast theme.Operational
78The restore operation is associated with contrast theme.Operational
79The backup operation is associated with personalization theme.Operational
80The restore operation is associated with personalization theme.Operational
81Manifest-based OperationMode operation processed a backup unit and returned …Operational
82Manifest-based OperationMode operation failed to process a backup with error …Operational
83No changes detected in HandlerType since last backup.Operational
84Backup functionality is currently disabled due to policy settings.Operational
85Unable to restore the time zone from backup because the required ?Operational
86The backup operation was skipped because the functionality is currently disabled …Operational
87Operational
88Operational
89Operational
90Operational
91Operational

Event ID 1 — Error ErrorCode occurred.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Error ErrorCode occurred. See event details for more information.

Message #

Error %2 occurred. See event details for more information.

Fields #

NameDescription
Type UInt32
ErrorCode UInt32
File AnsiString
LineNumber UInt32

Event ID 2 — A backup operation has started.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

A backup operation has started. See event details for more information.

Message #

A backup operation has started. See event details for more information.

Fields #

NameDescription
activityId GUID
cv AnsiString
Trigger UInt32

Event ID 3 — A backup operation has completed.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

A backup operation has completed. See event details for more information.

Message #

A backup operation has completed. See event details for more information.

Fields #

NameDescription
activityId GUID
cv AnsiString
Trigger UInt32

Event ID 4 — A restore operation has started.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

A restore operation has started. See event details for more information.

Message #

A restore operation has started. See event details for more information.

Fields #

NameDescription
activityId GUID
cv AnsiString
Trigger UInt32

Event ID 5 — A restore operation has completed.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

A restore operation has completed. See event details for more information.

Message #

A restore operation has completed. See event details for more information.

Fields #

NameDescription
activityId GUID
cv AnsiString
Trigger UInt32

Event ID 6 — Invoking backup restore handler HandlerId at index HandlerIndex.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Invoking backup restore handler HandlerId at index HandlerIndex.

Message #

Invoking backup restore handler %2 at index %1.

Fields #

NameDescription
HandlerIndex UInt32
HandlerId UnicodeString

Event ID 7 — Skipping backup restore handler HandlerId at index HandlerIndex.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Skipping backup restore handler HandlerId at index HandlerIndex.

Message #

Skipping backup restore handler %2 at index %1.

Fields #

NameDescription
HandlerIndex UInt32
HandlerId UnicodeString

Event ID 8 — Configuration is using variant Variant with payload Payload.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Configuration is using variant Variant with payload Payload.

Message #

Configuration is using variant %1 with payload %2.

Fields #

NameDescription
Variant UInt8
Payload UInt32

Event ID 9 — Manifest-based OperationMode operation failed to initialize with error ErrorCode.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Manifest-based OperationMode operation failed to initialize with error ErrorCode. See event details for more information.

Message #

Manifest-based %1 operation failed to initialize with error %2. See event details for more information.

Fields #

NameDescription
OperationMode UInt32
ErrorCode Int32

Event ID 10 — Manifest-based OperationMode operation processed a backup unit and returned status StatusCode.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Manifest-based OperationMode operation processed a backup unit and returned status StatusCode. See event details for more information.

Message #

Manifest-based %1 operation processed a backup unit and returned status %2. See event details for more information.

Fields #

NameDescription
OperationMode UInt32
StatusCode UInt32
Context UInt32
ManifestId UnicodeString
Scope UnicodeString

Event ID 11 — Manifest-based OperationMode operation failed to process a backup with error ErrorCode.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Manifest-based OperationMode operation failed to process a backup with error ErrorCode. See event details for more information.

Message #

Manifest-based %1 operation failed to process a backup with error %2. See event details for more information.

Fields #

NameDescription
OperationMode UInt32
ErrorCode Int32
StatusCode UInt32
Context UInt32
ManifestId UnicodeString
Scope UnicodeString

Event ID 12 — The backup operation is associated with a file.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The backup operation is associated with a file. See event details for more information.

Message #

The backup operation is associated with a file. See event details for more information.

Fields #

NameDescription
ItemId UnicodeString
ContentUri UnicodeString
SyncRootRelativePath UnicodeString

Event ID 13 — The backup operation is associated with a file.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The backup operation is associated with a file. See event details for more information.

Message #

The backup operation is associated with a file. See event details for more information.

Fields #

NameDescription
LocalPath UnicodeString

Event ID 14 — The restore operation is associated with a file.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The restore operation is associated with a file. See event details for more information.

Message #

The restore operation is associated with a file. See event details for more information.

Fields #

NameDescription
ItemId UnicodeString
ContentUri UnicodeString
SyncRootRelativePath UnicodeString

Event ID 15 — The restore operation is associated with a file.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The restore operation is associated with a file. See event details for more information.

Message #

The restore operation is associated with a file. See event details for more information.

Fields #

NameDescription
LocalPath UnicodeString

Event ID 16 — Loaded cloud data for TypeName.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Loaded cloud data for TypeName. See event details for more information.

Message #

Loaded cloud data for %1. See event details for more information.

Fields #

NameDescription
TypeName AnsiString
Version UInt64
IsDefault Boolean

Event ID 17 — Unable to load cloud data for TypeName.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Unable to load cloud data for TypeName. See event details for more information.

Message #

Unable to load cloud data for %1. See event details for more information.

Fields #

NameDescription
TypeName AnsiString
Version UInt64
IsDefault Boolean

Event ID 18 — Saved cloud data for TypeName.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Saved cloud data for TypeName. See event details for more information.

Message #

Saved cloud data for %1. See event details for more information.

Fields #

NameDescription
TypeName AnsiString
LoadedVersion UInt64
SavedVersion UInt64

Event ID 19 — Windows backup preferences settings Cloud store APIs Call Event.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Windows backup preferences settings Cloud store APIs Call Event. See event details for more information.

Message #

Windows backup preferences settings Cloud store APIs Call Event. See event details for more information.

Fields #

NameDescription
Operation UnicodeString
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
PolicyName UnicodeString

Event ID 20 — Windows backup preferences settings Cloud store APIs Data Event.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Windows backup preferences settings Cloud store APIs Data Event. See event details for more information.

Message #

Windows backup preferences settings Cloud store APIs Data Event. See event details for more information.

Fields #

NameDescription
Operation UnicodeString
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
PolicyName UnicodeString
CloudStorePolicyOption UnicodeString

Event ID 21 — Information Message.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Information Message. See event details for message details.

Message #

Information Message. See event details for message details

Fields #

NameDescription
HandlerType UnicodeString
Message UnicodeString

Event ID 22 — The backup operation is associated with contrast theme.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The backup operation is associated with contrast theme. See event details for more information.

Message #

The backup operation is associated with contrast theme. See event details for more information.

Fields #

NameDescription
type UInt64
currentThemePath UnicodeString
contrastThemePath UnicodeString
baseContrastThemeName UnicodeString
customThemeName UnicodeString

Event ID 23 — The restore operation is associated with contrast theme.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The restore operation is associated with contrast theme. See event details for more information.

Message #

The restore operation is associated with contrast theme. See event details for more information.

Fields #

NameDescription
type UInt64
currentThemePath UnicodeString
contrastThemePath UnicodeString
baseContrastThemeName UnicodeString
customThemeName UnicodeString

Event ID 24 — The restore operation is associated with contrast theme.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The restore operation is associated with contrast theme. See event details for more information.

Message #

The restore operation is associated with contrast theme. See event details for more information.

Fields #

NameDescription
ContrastThemeLocalPath UnicodeString

Event ID 25 — The backup operation is associated with Date and time.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The backup operation is associated with Date and time. See event details for more information.

Message #

The backup operation is associated with Date and time. See event details for more information.

Fields #

NameDescription
isAutoTimeZoneEnabled UInt64
timezone UnicodeString

Event ID 26 — The restore operation is associated with Date and time.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The restore operation is associated with Date and time. See event details for more information.

Message #

The restore operation is associated with Date and time. See event details for more information.

Fields #

NameDescription
isAutoTimeZoneEnabled UInt64
timezone UnicodeString

Event ID 27 — Background Color

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Background Color.

Message #

Background Color

Fields #

NameDescription
HandlerType UnicodeString
Red UInt8
Green UInt8
Blue UInt8

Event ID 28 — Position of the Picture

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Position of the Picture.

Message #

Position of the Picture

Fields #

NameDescription
HandlerType UnicodeString
Position UInt64

Event ID 29 — Updated backup time in device profile ProfileId and sent to server transport for delivery to cloud.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Updated backup time in device profile ProfileId and sent to server transport for delivery to cloud.

Message #

Updated backup time in device profile %1 and sent to server transport for delivery to cloud.

Fields #

NameDescription
ProfileId UnicodeString

Event ID 30 — Updated backup time in device profile ProfileId in local cache; transport not available for delivery to cloud.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Updated backup time in device profile ProfileId in local cache; transport not available for delivery to cloud.

Message #

Updated backup time in device profile %1 in local cache; transport not available for delivery to cloud.

Fields #

NameDescription
ProfileId UnicodeString

Event ID 31 — Error ErrorCode occurred while attempting to update backup time in device profile ProfileId.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Error ErrorCode occurred while attempting to update backup time in device profile ProfileId.

Message #

Error %1 occurred while attempting to update backup time in device profile %2.

Fields #

NameDescription
ErrorCode Int32
ProfileId UnicodeString
Stage UInt8

Event ID 32 — The backup operation is associated with personalization theme.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The backup operation is associated with personalization theme. See event details for more information.

Message #

The backup operation is associated with personalization theme. See event details for more information.

Fields #

NameDescription
type UInt64
basePersonalizationThemeName UnicodeString

Event ID 33 — The restore service identified PlaceholderCount placeholder tiles requiring replacement.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The restore service identified PlaceholderCount placeholder tiles requiring replacement.

Message #

The restore service identified %1 placeholder tiles requiring replacement.

Fields #

NameDescription
PlaceholderCount UInt32

Event ID 34 — The restore service was resumed to monitor placeholders.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The restore service was resumed to monitor placeholders.

Message #

The restore service was resumed to monitor placeholders.

Event ID 35 — Origin for OriginContext: Product AppIdOrProducCode with tile TileId was RemoveKind with heuristic Heuristic and replaced by ReplacedByTileId.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Origin for OriginContext: Product AppIdOrProducCode with tile TileId was RemoveKind with heuristic Heuristic and replaced by ReplacedByTileId.

Message #

%1 for %2: Product %3 with tile %4 was %5 with heuristic %6 and replaced by %7.

Fields #

NameDescription
Origin UInt32
OriginContext UnicodeString
AppIdOrProducCode UnicodeString
TileId UnicodeString
RemoveKind UInt32
Heuristic UInt32
ReplacedByTileId UnicodeString

Event ID 36 — The backup operation is associated with Secondary Accounts.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The backup operation is associated with Secondary Accounts. See event details for more information.

Message #

The backup operation is associated with Secondary Accounts. See event details for more information.

Fields #

NameDescription
accountName UnicodeString
safeCustomerID UnicodeString

Event ID 37 — The restore operation is associated with Secondary Accounts.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The restore operation is associated with Secondary Accounts. See event details for more information.

Message #

The restore operation is associated with Secondary Accounts. See event details for more information.

Fields #

NameDescription
accountName UnicodeString
safeCustomerID UnicodeString

Event ID 38 — The API data returned to backup associated with Secondary Accounts.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The API data returned to backup associated with Secondary Accounts. See event details for more information.

Message #

The API data returned to backup associated with Secondary Accounts. See event details for more information.

Fields #

NameDescription
propertyName UnicodeString
propertyValue UnicodeString

Event ID 39 — Processing packaged products started

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Processing packaged products started.

Message #

Processing packaged products started

Event ID 40 — Processing packaged products stopped

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Processing packaged products stopped.

Message #

Processing packaged products stopped

Event ID 41 — Processing unpackaged products started

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Processing unpackaged products started.

Message #

Processing unpackaged products started

Event ID 42 — Processing unpackaged products stopped

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Processing unpackaged products stopped.

Message #

Processing unpackaged products stopped

Event ID 43 — Creating process CommandLine.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Creating process CommandLine.

Message #

Creating process %1.

Fields #

NameDescription
CommandLine UnicodeString

Event ID 44 — Created process ProcessId.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Created process ProcessId.

Message #

Created process %1.

Fields #

NameDescription
ProcessId UInt32

Event ID 45 — Process ProcessId exited.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Process ProcessId exited.

Message #

Process %1 exited.

Fields #

NameDescription
ProcessId UInt32

Event ID 46 — The restore operation is associated with personalization theme.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The restore operation is associated with personalization theme. See event details for more information.

Message #

The restore operation is associated with personalization theme. See event details for more information.

Fields #

NameDescription
type UInt64
basePersonalizationThemeName UnicodeString

Event ID 47 — The backup operation is associated with ColorSettings.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The backup operation is associated with ColorSettings. See event details for more information.

Message #

The backup operation is associated with ColorSettings. See event details for more information.

Fields #

NameDescription
AppColorMode UInt64
SystemColorMode UInt64
enableTransperency UInt64
colorPrevalnce UInt64
accentColorMode UInt64
dwmColorPrevalence UInt64
Red UInt8
Green UInt8
Blue UInt8

Event ID 48 — The restore operation is associated with ColorSettings.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The restore operation is associated with ColorSettings. See event details for more information.

Message #

The restore operation is associated with ColorSettings. See event details for more information.

Fields #

NameDescription
AppColorMode UInt64
SystemColorMode UInt64
enableTransperency UInt64
colorPrevalnce UInt64
accentColorMode UInt64
dwmColorPrevalence UInt64
Red UInt8
Green UInt8
Blue UInt8

Event ID 49 — An app restore operation has started.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

An app restore operation has started.

Message #

An app restore operation has started.

Event ID 50 — A app restore operation has completed.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

A app restore operation has completed.

Message #

A app restore operation has completed.

Event ID 51 — Consulting compat providers started.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Consulting compat providers started.

Message #

Consulting compat providers started.

Event ID 52 — Consulting compat providers stopped.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Consulting compat providers stopped. Store returned: StoreResult; Appraiser returned: AppraiserResult.

Message #

Consulting compat providers stopped. Store returned: %1; Appraiser returned: %2

Fields #

NameDescription
StoreResult Int32
AppraiserResult Int32

Event ID 53 — The backup operation is associated with Lunar Calendar Settings.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The backup operation is associated with Lunar Calendar Settings. See event details for more information.

Message #

The backup operation is associated with Lunar Calendar Settings. See event details for more information.

Fields #

NameDescription
CalendarType UInt64

Event ID 54 — The restore operation is associated with Lunar Calendar Settings.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The restore operation is associated with Lunar Calendar Settings. See event details for more information.

Message #

The restore operation is associated with Lunar Calendar Settings. See event details for more information.

Fields #

NameDescription
CalendarType UInt64

Event ID 55 — The backup operation is associated with Nightlight settings.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The backup operation is associated with Nightlight settings. See event details for more information.

Message #

The backup operation is associated with Nightlight settings. See event details for more information.

Fields #

NameDescription
automaticOnSchedule UInt64
automaticOnSunset UInt64
manualScheduleBlueLightReductionOnHours UInt64
manualScheduleBlueLightReductionOffHours UInt64
targetColorTemperature UInt64
sunsetHours UInt64
sunriseHours UInt64
previewColorTemperatureChanges UInt64
darkMode UInt64

Event ID 56 — The backup operation is associated with Nightlight settings.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The backup operation is associated with Nightlight settings. See event details for more information.

Message #

The backup operation is associated with Nightlight settings. See event details for more information.

Fields #

NameDescription
state UInt64
source UInt64
isSupported UInt64

Event ID 57 — The restore operation is associated with Nightlight settings.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The restore operation is associated with Nightlight settings. See event details for more information.

Message #

The restore operation is associated with Nightlight settings. See event details for more information.

Fields #

NameDescription
automaticOnSchedule UInt64
automaticOnSunset UInt64
manualScheduleBlueLightReductionOnHours UInt64
manualScheduleBlueLightReductionOffHours UInt64
targetColorTemperature UInt64
sunsetHours UInt64
sunriseHours UInt64
previewColorTemperatureChanges UInt64
darkMode UInt64

Event ID 58 — The restore operation is associated with Nightlight settings.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The restore operation is associated with Nightlight settings. See event details for more information.

Message #

The restore operation is associated with Nightlight settings. See event details for more information.

Fields #

NameDescription
state UInt64
source UInt64
isSupported UInt64

Event ID 59 — The restore operation is associated with Sound settings.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The restore operation is associated with Sound settings. See event details for more information.

Message #

The restore operation is associated with Sound settings. See event details for more information.

Fields #

NameDescription
Operation UnicodeString
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.

Event ID 60 — The restore operation data, Associated with Sound settings.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The restore operation data, Associated with Sound settings. See event details for more information.

Message #

The restore operation data, Associated with Sound settings. See event details for more information.

Fields #

NameDescription
CurrentSoundSchemeFile UnicodeString
DefaultSoundSchemeFile UnicodeString

Event ID 61 — The backup operation is associated with Ink Pen Settings.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The backup operation is associated with Ink Pen Settings. See event details for more information.

Message #

The backup operation is associated with Ink Pen Settings. See event details for more information.

Fields #

NameDescription
singleClickOverride UInt64
singleClickPenWorkspaceVerb UInt64
doubleClickOverride UInt64
doubleClickPenWorkspaceVerb UInt64
longPressOverride UInt64
longPressPenWorkspaceVerb UInt64
penWorkspaceAppLaunchOnPenDetachEnabled UInt64
penEnablePenButtonOverride UInt64
singleClickCustomAppPath UnicodeString
doubleClickCustomAppPath UnicodeString
longPressCustomAppPath UnicodeString
singleClickCustomAppID UnicodeString
doubleClickCustomAppID UnicodeString
longPressCustomAppID UnicodeString

Event ID 62 — The restore operation is associated with Ink Pen Settings.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The restore operation is associated with Ink Pen Settings. See event details for more information.

Message #

The restore operation is associated with Ink Pen Settings. See event details for more information.

Fields #

NameDescription
singleClickOverride UInt64
singleClickPenWorkspaceVerb UInt64
doubleClickOverride UInt64
doubleClickPenWorkspaceVerb UInt64
longPressOverride UInt64
longPressPenWorkspaceVerb UInt64
penWorkspaceAppLaunchOnPenDetachEnabled UInt64
penEnablePenButtonOverride UInt64
singleClickCustomAppPath UnicodeString
doubleClickCustomAppPath UnicodeString
longPressCustomAppPath UnicodeString
singleClickCustomAppID UnicodeString
doubleClickCustomAppID UnicodeString
longPressCustomAppID UnicodeString

Event ID 63 — Ink Pen Setting Status.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Ink Pen Setting Status. See event details for more information.

Message #

Ink Pen Setting Status. See event details for more information.

Fields #

NameDescription
Setting UnicodeString
Status UnicodeStringNTSTATUS reference

Event ID 64 — The backup operation is associated with Background Slideshow Settings.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The backup operation is associated with Background Slideshow Settings. See event details for more information.

Message #

The backup operation is associated with Background Slideshow Settings. See event details for more information.

Fields #

NameDescription
OneDrivefolder UInt64
Shuffle UInt64
TimeInMillSec UInt64

Event ID 65 — The restore operation is associated with Background Slideshow Settings.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The restore operation is associated with Background Slideshow Settings. See event details for more information.

Message #

The restore operation is associated with Background Slideshow Settings. See event details for more information.

Fields #

NameDescription
OneDrivefolder UInt64
Shuffle UInt64
TimeInMillSec UInt64

Event ID 66 — The restore operation Error, Associated with Sound settings.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The restore operation Error, Associated with Sound settings. See event details for more information.

Message #

The restore operation Error, Associated with Sound settings. See event details for more information.

Fields #

NameDescription
LogMessage UnicodeString
RegKeyPath UnicodeString
ErrorCode Int32

Event ID 67 — CPL Excluded Event Name, Associated with Sound settings.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

CPL Excluded Event Name, Associated with Sound settings. See event details for more information.

Message #

CPL Excluded Event Name, Associated with Sound settings. See event details for more information.

Fields #

NameDescription
LogMessage UnicodeString
Event Name UnicodeString
EventName UnicodeString

Event ID 68 — The backup operation is associated with Device settings.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The backup operation is associated with Device settings. See event details for more information.

Message #

The backup operation is associated with Device settings. See event details for more information.

Fields #

NameDescription
SettingName UnicodeString
SettingDataValue Boolean

Event ID 69 — The restore operation is associated with Device settings.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The restore operation is associated with Device settings. See event details for more information.

Message #

The restore operation is associated with Device settings. See event details for more information.

Fields #

NameDescription
SettingName UnicodeString
SettingDataValue Boolean

Event ID 70 — The backup operation is associated with Device settings.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The backup operation is associated with Device settings. See event details for more information.

Message #

The backup operation is associated with Device settings. See event details for more information.

Fields #

NameDescription
Operation UnicodeString
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.

Event ID 71 — The restore operation is associated with Device settings.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The restore operation is associated with Device settings. See event details for more information.

Message #

The restore operation is associated with Device settings. See event details for more information.

Fields #

NameDescription
Operation UnicodeString
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.

Event ID 72 — The Bond Schema Activity backup associated with Device settings restore opration.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The Bond Schema Activity backup associated with Device settings restore opration. See event details for more information.

Message #

The Bond Schema Activity backup associated with Device settings restore opration. See event details for more information.

Fields #

NameDescription
Operation UnicodeString
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
LogMessage UnicodeString

Event ID 73 — The Bond Schema Activity backup associated with Device settings backup opration.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The Bond Schema Activity backup associated with Device settings backup opration. See event details for more information.

Message #

The Bond Schema Activity backup associated with Device settings backup opration. See event details for more information.

Fields #

NameDescription
Operation UnicodeString
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
LogMessage UnicodeString

Event ID 74 — The Skipping operation is associated with Device settings.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The Skipping operation is associated with Device settings. See event details for more information.

Message #

The Skipping operation is associated with Device settings. See event details for more information.

Fields #

NameDescription
Operation UnicodeString
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
LogMessage UnicodeString

Event ID 75 — Taskbar Pins are prevented for All App placeholders with App IDs

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Taskbar Pins are prevented for All App placeholders with App IDs.

Message #

Taskbar Pins are prevented for All App placeholders with App IDs

Fields #

NameDescription
AppIDs UnicodeString

Event ID 76 — Error: Type; See event details for more information.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Error: Type; See event details for more information.

Message #

Error: %2; See event details for more information.

Fields #

NameDescription
Error
Type UInt32
ErrorCode Int32
File AnsiString
LineNumber UInt32

Event ID 77 — The backup operation is associated with contrast theme.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The backup operation is associated with contrast theme. See event details for more information.

Message #

The backup operation is associated with contrast theme. See event details for more information.

Fields #

NameDescription
themeType UnicodeString
currentThemePath UnicodeString
contrastThemePath UnicodeString
baseContrastThemeName UnicodeString
customThemeName UnicodeString

Event ID 78 — The restore operation is associated with contrast theme.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The restore operation is associated with contrast theme. See event details for more information.

Message #

The restore operation is associated with contrast theme. See event details for more information.

Fields #

NameDescription
themeType UnicodeString
currentThemePath UnicodeString
contrastThemePath UnicodeString
baseContrastThemeName UnicodeString
customThemeName UnicodeString

Event ID 79 — The backup operation is associated with personalization theme.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The backup operation is associated with personalization theme. See event details for more information.

Message #

The backup operation is associated with personalization theme. See event details for more information.

Fields #

NameDescription
type UnicodeString
basePersonalizationThemeName UnicodeString

Event ID 80 — The restore operation is associated with personalization theme.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The restore operation is associated with personalization theme. See event details for more information.

Message #

The restore operation is associated with personalization theme. See event details for more information.

Fields #

NameDescription
type UnicodeString
basePersonalizationThemeName UnicodeString

Event ID 81 — Manifest-based OperationMode operation processed a backup unit and returned status StatusCode.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Manifest-based OperationMode operation processed a backup unit and returned status StatusCode. See event details for more information.

Message #

Manifest-based %1 operation processed a backup unit and returned status %2. See event details for more information.

Fields #

NameDescription
OperationMode UInt32
StatusCode UInt32
Status UnicodeStringNTSTATUS reference
Context UInt32
ManifestId UnicodeString
Scope UnicodeString

Event ID 82 — Manifest-based OperationMode operation failed to process a backup with error ErrorCode.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Manifest-based OperationMode operation failed to process a backup with error ErrorCode. See event details for more information.

Message #

Manifest-based %1 operation failed to process a backup with error %2. See event details for more information.

Fields #

NameDescription
OperationMode UInt32
ErrorCode Int32
StatusCode UInt32
Status UnicodeStringNTSTATUS reference
Context UInt32
ManifestId UnicodeString
Scope UnicodeString

Event ID 83 — No changes detected in HandlerType since last backup.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

No changes detected in HandlerType since last backup. Skipping save operation.

Message #

No changes detected in %1 since last backup. Skipping save operation.

Fields #

NameDescription
HandlerType UnicodeString

Event ID 84 — Backup functionality is currently disabled due to policy settings.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Backup functionality is currently disabled due to policy settings. For further assistance, please reach out to your administrator.

Message #

Backup functionality is currently disabled due to policy settings. For further assistance, please reach out to your administrator.

Event ID 85 — Unable to restore the time zone from backup because the required ?

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

Unable to restore the time zone from backup because the required ?Change the time zone? permission is missing. For further assistance, please reach out to your administrator.

Message #

Unable to restore the time zone from backup because the required ?Change the time zone? permission is missing. For further assistance, please reach out to your administrator.

Event ID 86 — The backup operation was skipped because the functionality is currently disabled due to policy settings.

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Description

The backup operation was skipped because the functionality is currently disabled due to policy settings. For further assistance, please reach out to your administrator.

Message #

The backup operation was skipped because the functionality is currently disabled due to policy settings. For further assistance, please reach out to your administrator.

Fields #

NameDescription
activityId GUID
cv AnsiString
Trigger UInt32

Event ID 87 —

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Event ID 88 —

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Fields #

NameDescription
OperationStatus UInt32

Event ID 89 —

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Fields #

NameDescription
Result Boolean

Event ID 90 —

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Fields #

NameDescription
Operation UInt32
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
PolicyName UnicodeString

Event ID 91 —

Provider
Microsoft-Windows-CloudRestoreLauncher
Channel
Operational

Fields #

NameDescription
Operation UInt32
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
PolicyName UnicodeString
CloudStorePolicyOption UnicodeString