Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider
994 events across 8 channels
Event ID 2 — MDM Enroll: Certificate policy create message failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 2 — MDM Enroll: Certificate policy create message failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 3 — MDM Enroll: Certificate Authentication was requested, but failed sign the server request.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 3 — MDM Enroll: Certificate Authentication was requested, but failed sign the server request.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4 — MDM Enroll: Certificate policy request sent successfully.
Message
Event ID 4 — MDM Enroll: Certificate policy request sent successfully.
Message
Event ID 5 — MDM Enroll: Certificate policy request sending failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 5 — MDM Enroll: Certificate policy request sending failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 6 — MDM Enroll: Certificate policy response processed successfully.
Message
Event ID 6 — MDM Enroll: Certificate policy response processed successfully.
Message
Event ID 7 — MDM Enroll: Failed to receive or parse certificate response.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 7 — MDM Enroll: Failed to receive or parse certificate response.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 8 — MDM Enroll: Certificate enrollment request sent successfully.
Message
Event ID 8 — MDM Enroll: Certificate enrollment request sent successfully.
Message
Event ID 9 — MDM Enroll: Certificate enrollment request sending failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 9 — MDM Enroll: Certificate enrollment request sending failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 10 — MDM Enroll: Certificate enrollment response parsed successfully.
Message
Event ID 10 — MDM Enroll: Certificate enrollment response parsed successfully.
Message
Event ID 11 — MDM Enroll: Failed to receive or parse certificate enroll response.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 11 — MDM Enroll: Failed to receive or parse certificate enroll response.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 12 — MDM Enroll: Failed to generate cert request.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 12 — MDM Enroll: Failed to generate cert request.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 15 — MDM Enroll: Failed to install client certificate.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 15 — MDM Enroll: Failed to install client certificate.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 16 — MDM Enroll: OMA-DM client configuration succeeds.
Message
Event ID 16 — MDM Enroll: OMA-DM client configuration succeeds.
Message
Event ID 17 — MDM Enroll: OMA-DM client configuration failed.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 17 — MDM Enroll: OMA-DM client configuration failed.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 19 — MDM Enroll: OMA-DM polling schedule set up failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 19 — MDM Enroll: OMA-DM polling schedule set up failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 20 — MDM Enroll: OMA-DM session initiation blocked since the enrollment is in a dormant state.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 20 — MDM Enroll: OMA-DM session initiation blocked since the enrollment is in a dormant state.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 21 — MDM Enroll: OMA-DM polling auxiliary schedule set up failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 21 — MDM Enroll: OMA-DM polling auxiliary schedule set up failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 23 — MDM Enroll: OMA-DM polling second auxiliary schedule set up failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 23 — MDM Enroll: OMA-DM polling second auxiliary schedule set up failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 25 — MDM Enroll: Client failed to set up the manual MDM client certificate renewal schedule.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 25 — MDM Enroll: Client failed to set up the manual MDM client certificate renewal schedule.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 26 — MDM Enroll: Certificate renew failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 26 — MDM Enroll: Certificate renew failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 27 — MDM Enroll: AutoEnrollMDM Result: PolicyValue: AADCredentialType.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HexInt2 | — |
HRESULT | — |
Event ID 28 — MDM Enroll: Certificate renew PKCS7Sign failed: Function: (%1) Result: (%2).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 28 — MDM Enroll: Certificate renew PKCS7Sign failed: Function: Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 29 — MDM Enroll: Certificate renew FindCertBasedOnContainer failed: Function: (%1) ContainerName: (%2) CryptoProvider: (%3) Result: (%4).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
HRESULT | — |
Event ID 29 — MDM Enroll: Certificate renew FindCertBasedOnContainer failed: Function: ContainerName: CryptoProvider: Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
HRESULT | — |
Event ID 30 — MDM Enroll: Binding public MDM certificate with private MDM key failed: Function: (%1) Result: (%2).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 30 — MDM Enroll: Binding public MDM certificate with private MDM key failed: Function: Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 32 — SCEP: Certificate enroll failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 36 — SCEP: Certificate request generated successfully.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
HexInt1 | — |
HexInt2 | — |
Event ID 37 — SCEP: Certificate request sent successfully.
Message
Event ID 38 — SCEP: Certificate response received successfully.
Message
Event ID 39 — SCEP: Certificate installed successfully.
Message
Event ID 42 — MDM Push: Failed to create WNS Push Channel for MDM Push Sessions.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 42 — MDM Push: Failed to create WNS Push Channel for MDM Push Sessions.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 43 — MDM Push: Successfully created WNS Push Channel for MDM Push Sessions.
Message
Event ID 43 — MDM Push: Successfully created WNS Push Channel for MDM Push Sessions.
Message
Event ID 44 — MDM Push: Failed to renew WNS Push Channel for MDM Push Sessions.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 44 — MDM Push: Failed to renew WNS Push Channel for MDM Push Sessions.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 45 — MDM Push: Successfully renewed WNS Push Channel for MDM Push Sessions.
Message
Event ID 45 — MDM Push: Successfully renewed WNS Push Channel for MDM Push Sessions.
Message
Event ID 46 — MDM Push: Failed to upgrade WNS Push Channel for MDM Push Sessions.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 46 — MDM Push: Failed to upgrade WNS Push Channel for MDM Push Sessions.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 47 — MDM Push: Successfully upgraded WNS Push Channel for MDM Push Sessions.
Message
Event ID 47 — MDM Push: Successfully upgraded WNS Push Channel for MDM Push Sessions.
Message
Event ID 48 — MDM Unenroll: Unenroll alert sent to server.
Message
Event ID 48 — MDM Unenroll: Unenroll alert sent to server.
Message
Event ID 49 — MDM Unenroll: Error sending unenroll alert to server.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 49 — MDM Unenroll: Error sending unenroll alert to server.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 52 — MDM Enroll: Server Returned Fault/Code/Subcode/Value= Fault/Reason/Text=.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 52 — MDM Enroll: Server Returned Fault/Code/Subcode/Value=(%1) Fault/Reason/Text=(%2).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 53 — MDM Enroll: Authentication failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 53 — MDM Enroll: Authentication failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 54 — MDM Enroll: Authentication successful: Got token from STS.
Message
Event ID 54 — MDM Enroll: Authentication successful: Got token from STS.
Message
Event ID 55 — MDM Enroll: Enrollment via UX failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 55 — MDM Enroll: Enrollment via UX failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 56 — MDM Enroll: Failed to parse server provisioning XML.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 56 — MDM Enroll: Failed to parse server provisioning XML.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 57 — MDM Enroll: Provisioning failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 57 — MDM Enroll: Provisioning failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 58 — MDM Enroll: Provisioning succeeded.
Message
Event ID 58 — MDM Enroll: Provisioning succeeded.
Message
Event ID 59 — MDM Enroll: Server context (%1).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 59 — MDM Enroll: Server context.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 60 — MDM Unenroll: Unenrollment initiated by entity other than user (server or device) (%1).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 60 — MDM Unenroll: Unenrollment initiated by entity other than user (server or device).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 61 — MDM Unenroll: Unenrollment initiated by user through UI.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 61 — MDM Unenroll: Unenrollment initiated by user through UI.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 62 — MDM Enroll: Server specifed hashAlgorithmOIDReference (%1) is a OID of group (%2), expected an OID in group CRYPT_HASH_ALG_OID_GROUP_ID.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 62 — MDM Enroll: Server specifed hashAlgorithmOIDReference is a OID of group, expected an OID in group CRYPT_HASH_ALG_OID_GROUP_ID.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 63 — MDM Enroll: Unable to acquire private key for newly installed cert.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 64 — MDM Unenroll: Changing dmwappushservice startup type to demand-start.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 64 — MDM Unenroll: Changing dmwappushservice startup type to demand-start.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 65 — MDM Unenroll: Changing dmwappushservice startup type to demand-start failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 65 — MDM Unenroll: Changing dmwappushservice startup type to demand-start failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 66 — MDM Enroll WAP Node Filtering: removed non-supported node.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 67 — MDM Unenroll: Failed to delete account.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 67 — MDM Unenroll: Failed to delete account.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 68 — MDM Enroll: /GetPoliciesResponse/response/policies/policy/attributes/policySchema invalid, got (%1) expected (3), ignoring certificate policy, usin...
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Event ID 68 — MDM Enroll: /GetPoliciesResponse/response/policies/policy/attributes/policySchema invalid, got (%1) expected (3), ignoring certificate policy, usin...
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Event ID 69 — MDM Enroll: Got a SOAP fault from the server, but couldn't parse it.
Message
Event ID 69 — MDM Enroll: Got a SOAP fault from the server, but couldn't parse it.
Message
Event ID 70 — MDM Enroll WAP Node Filtering: failed to remove non-supported node.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 71 — MDM Enroll: Failed
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 71 — MDM Enroll: Failed (%1).
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 72 — MDM Enroll: Succeeded
Message
Event ID 72 — MDM Enroll: Succeeded
Message
Event ID 73 — MDM Unenroll: Finished user independant unenroll
Message
Event ID 73 — MDM Unenroll: Finished user independant unenroll
Message
Event ID 74 — MDM Unenroll: Succeeded
Message
Event ID 74 — MDM Unenroll: Succeeded
Message
Event ID 75 — Auto MDM Enroll: Device Credential (%1), Succeeded.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
Event ID 75 — Auto MDM Enroll: Device Credential, Succeeded
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
Event ID 76 — Auto MDM Enroll: Device Credential (%1), Failed (%2).
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 76 — Auto MDM Enroll: Device Credential, Failed
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 77 — Auto MDM Enroll Retry On Failure
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 77 — Auto MDM Enroll Retry On Failure (%1).
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 78 — Auto MDM Enroll DMGetAadDeviceToken Failure
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 78 — Auto MDM Enroll DMGetAadDeviceToken Failure (%1).
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 79 — Auto MDM Enroll DmRequestAadUserToken Failure
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 79 — Auto MDM Enroll DmRequestAadUserToken Failure (%1).
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 80 — Auto MDM Enroll DmRaiseToastNotificationAndWait Failure
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 80 — Auto MDM Enroll DmRaiseToastNotificationAndWait Failure (%1).
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 81 — Auto MDM Enroll Impersonation Failure
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 81 — Auto MDM Enroll Impersonation Failure (%1).
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 82 — Auto MDM Enroll AADEnrollAsync Failure
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 82 — Auto MDM Enroll AADEnrollAsync Failure (%1).
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 83 — Auto MDM Enroll WaitForCompletiongNoThrow after AADEnrollAsync Failure
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 83 — Auto MDM Enroll WaitForCompletiongNoThrow after AADEnrollAsync Failure (%1).
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 84 — Auto MDM Enroll GetAsyncResults after AADEnrollAsync Failure
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 84 — Auto MDM Enroll GetAsyncResults after AADEnrollAsync Failure (%1).
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 85 — Should show EnrollmentStatusPage result.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HexInt2 | — |
Event ID 85 — Should show EnrollmentStatusPage result.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HexInt2 | — |
Event ID 86 — MDM Unenroll: Unenroll origin is: (%1).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 86 — MDM Unenroll: Unenroll origin is.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 87 — AADEnrollAsync(%1, %2, %3, %4, %5, %6, %7, %8) Failed Result: (%9).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
UInt1 | — |
Message5 | — |
Message6 | — |
Message7 | — |
Message8 | — |
HRESULT | — |
Event ID 88 — Enrolling SID Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 89 — Auto MDM Enroll DmGetAadDeviceTokenWithDiscovery with Application ID (%1): Status (%2).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 89 — Auto MDM Enroll DmGetAadDeviceTokenWithDiscovery with Application ID: Status
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 90 — Auto MDM Enroll Get AAD Token: Device Credential (%1), Resource Url (%2), Resource Url 2 (%3), Status (%4).
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 90 — Auto MDM Enroll Get AAD Token: Device Credential, Resource Url, Resource Url 2, Status
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 91 — Auto MDM Enroll Enrollment Information: AadResourceUrl (%1), DiscoveryServiceFullUrl (%2), TenantID (%3), Upn (%4).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Event ID 91 — Auto MDM Enroll Enrollment Information: AadResourceUrl, DiscoveryServiceFullUrl, TenantID, Upn
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Event ID 92 — MDM Unenroll due to the NT User who enrolled being deleted from the device
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 92 — MDM Unenroll due to the NT User who enrolled being deleted from the device (%1).
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 93 — Function Name: HRESULT.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 94 — CanEnroll Error: Found existing enrollment(s) of same type (%1), enrollmentIds: (%2).
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Message1 | — |
Event ID 94 — CanEnroll Error: Found existing enrollment(s) of same type, enrollmentIds.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Message1 | — |
Event ID 95 — CanEnroll Error: Found existing other enrollment(s) enrollmentId/EnrollmentType: (%1).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 95 — CanEnroll Error: Found existing other enrollment(s) enrollmentId/EnrollmentType.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 96 — CanEnroll Error: MDM enrollment is not allowed.
Message
Event ID 96 — CanEnroll Error: MDM enrollment is not allowed.
Message
Event ID 97 — CanEnroll Error: MDM enrollment is not allowed due to failed license check with HRESULT: (%1).
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 97 — CanEnroll Error: MDM enrollment is not allowed due to failed license check with HRESULT.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 98 — CanEnroll Error: MDM enrollment is not allowed due to failed access check(administrator or allowed user, capability check) with HRESULT: (%1).
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 98 — CanEnroll Error: MDM enrollment is not allowed due to failed access check(administrator or allowed user, capability check) with HRESULT.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 99 — CanEnroll Error: MDM enrollment is not allowed due to existing tenant found Type: (%1).
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Event ID 99 — CanEnroll Error: MDM enrollment is not allowed due to existing tenant found Type.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Event ID 100 — Offline Domain Join: Could not establish connectivity after time: milliseconds.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 101 — Offline Domain Join: Established connectivity after time: milliseconds.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 102 — Offline Domain Join: Failed to connect VPN.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 103 — Offline Domain Join: Connected VPN.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 104 — Offline Domain Join: Failed to enumerate the VPNs.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 105 — Offline Domain Join: Attempting to get the DC name.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 106 — Offline Domain Join: Attempting to ping the DC.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 107 — Offline Domain Join: Applying offline domain join blob succeeded.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 108 — Offline Domain Join: Applying offline domain join blob failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 109 — Offline Domain Join: Setting Domain join connectivity state to.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
Event ID 110 — Offline Domain Join: Current Domain join connectivity state is.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
Event ID 111 — Offline Domain Join: Starting wait for offline domain join blob.
Message
Fields
| Name | Description |
|---|---|
Boolean1 | — |
Event ID 112 — MDM Enroll: OMA-DM polling user schedule set up failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 113 — MDM Enroll: OMA-DM polling schedule set up for multiple session failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 200 — MDM Session: OMA-DM message sent.
Message
Event ID 200 — MDM Session: OMA-DM message sent.
Message
Event ID 201 — MDM Session: OMA-DM message failed to be sent.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 201 — MDM Session: OMA-DM message failed to be sent.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 202 — MDM Session: OMA-DM server message received and parsed successfully.
Message
Event ID 202 — MDM Session: OMA-DM server message received and parsed successfully.
Message
Event ID 203 — MDM Session: OMA-DM server message parsing failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 203 — MDM Session: OMA-DM server message parsing failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 204 — MDM Session: OMA-DM client failed to connect to the server.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 204 — MDM Session: OMA-DM client failed to connect to the server.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 205 — MDM Session: OMA-DM client started.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 205 — MDM Session: OMA-DM client started.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 206 — MDM Session: OMA-DM session Init: UserSID, EnrolledUser, UserToken, DeviceToken, EnrollmentType, SyncType.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
UInt3 | — |
UInt4 | — |
UInt5 | — |
UInt6 | — |
Event ID 206 — MDM Session: OMA-DM session Init: UserSID(%1), EnrolledUser(%2), UserToken(%3), DeviceToken(%4), EnrollmentType(%5), SyncType(%6).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
UInt3 | — |
UInt4 | — |
UInt5 | — |
UInt6 | — |
Event ID 207 — MDM Session: Alert type (%1) and event type (%2) sent to server to indicate user login status.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 207 — MDM Session: Alert type and event type sent to server to indicate user login status.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 208 — MDM Session: OMA-DM session started for EnrollmentID (%1) with server: (%2), Server version: (%3), Client Version: (%4), PushRouterOrigin: (%5), Us...
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
HexInt4 | — |
UInt1 | — |
UInt2 | — |
Event ID 208 — MDM Session: OMA-DM session started for EnrollmentID (%1) with server: (%2), Server version: (%3), Client Version: (%4), PushRouterOrigin: (%5), Us...
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
HexInt4 | — |
UInt1 | — |
UInt2 | — |
Event ID 209 — MDM Session: OMA-DM session ended with status: (%1).
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 209 — MDM Session: OMA-DM session ended with status.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 210 — MDM Session: OMA-DM client stopped with status.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 211 — MDM Session: ExpiryTime triggered, Last successful server sync time, LocalTime, ExpiryTime days.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt1 | — |
Event ID 212 — MDM Session: Failed to get AAD Token for sync session User Token: (%1) Device Token: (%2).
Message
Fields
| Name | Description |
|---|---|
HRESULT1 | — |
HRESULT2 | — |
Event ID 212 — MDM Session: Failed to get AAD Token for sync session User Token: Device Token.
Message
Fields
| Name | Description |
|---|---|
HRESULT1 | — |
HRESULT2 | — |
Event ID 213 — MDM Session OmaDmVerboseTrace: Buffer:, BucketNumber:, BufferLength.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HexInt2 | — |
Event ID 214 — MDM Session OmaDmVerboseTrace: Buffer:, BucketNumber:, BufferLength.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HexInt2 | — |
Event ID 215 — MDM Session: Failure at Stage:, Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 216 — MDM Session: OmaDmHttpHeaderAlert.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 217 — MDM Session: OmaDmMultipleMessagesInPackageContinue.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HexInt2 | — |
Event ID 218 — MDM Session: ClientCertificateMissing.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HexInt2 | — |
Event ID 219 — MDM Session: OmaDmLoadSession.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 220 — MDM Session: OmaDmOrphanedSession.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HRESULT | — |
Event ID 221 — MDM Session: Alert type and event type sent to client to indicate user login status.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 222 — MDM Session: OmaDmMultipleMessagesInPackage.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
Event ID 223 — MDM Session: GetTargetUserSidEnrolledUserNotLogon.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 224 — MDM Session: DmGetAadUserTokenFailure.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
HexInt4 | — |
HRESULT | — |
Event ID 224 — MDM Session: DmGetAadUserTokenFailure.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
HexInt4 | — |
HRESULT | — |
Event ID 225 — MDM Session: Event Start.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 226 — MDM Session: LogServerSideTimeSaved.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
Event ID 227 — LogMeasure.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 228 — FunctionEntry.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 229 — FunctionExit.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt1 | — |
HexInt2 | — |
Event ID 230 — MDM Session: Alert type (%1), alert data (%2) and event type (%3) sent to server to indicate update status.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt1 | — |
Event ID 230 — MDM Session: Alert type, alert data and event type sent to server to indicate update status.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt1 | — |
Event ID 231 — MDM Session: DmGetAadTokenRetryOnExpiration.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HexInt2 | — |
HRESULT | — |
FileTime1 | — |
FileTime2 | — |
Event ID 231 — MDM Session: DmGetAadUserTokenFailure.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HexInt2 | — |
HRESULT | — |
FileTime1 | — |
FileTime2 | — |
Event ID 232 — MDM Session: DmInvalidateAadUserTokenFailure.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HexInt2 | — |
HRESULT | — |
Event ID 232 — MDM Session: DmInvalidateAadUserTokenFailure.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HexInt2 | — |
HRESULT | — |
Event ID 233 — MDM Session: Container syncML response XML parser: Result:(%1) %2.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 233 — MDM Session: Container syncML response XML parser: Result:(%1) %2.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 234 — MDM Session: HostOs syncML response XML length: %1, Container syncML response XML length: %2.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HexInt2 | — |
Event ID 234 — MDM Session: HostOs syncML response XML length: %1, Container syncML response XML length: %2.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HexInt2 | — |
Event ID 235 — MDM Session: Container syncML response XML.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 236 — DM Session: Container session has no SessionID.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
Event ID 237 — DM Session: ContainerFunctionExit.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HRESULT | — |
Event ID 238 — DM Session: ContainerCallbackEvent.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 239 — MDM Session: Host OS and Container Response XML Status content mismatch.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HRESULT | — |
Event ID 240 — MDM Session: Host OS and Container Response XML Status count mismatch.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
HRESULT | — |
Event ID 241 — MDM Session: Host OS and Container Response XML Http status mismatch.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
UInt1 | — |
UInt2 | — |
HRESULT | — |
Event ID 242 — MDM Session: Host OS and Container Response XML Result content mismatch.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HRESULT | — |
Event ID 243 — MDM Session: Host OS and Container Response XML Result Item count mismatch.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
HRESULT | — |
Event ID 244 — MDM Session: Host OS and Container Response XML Result Item data mismatch.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
UInt1 | — |
UInt2 | — |
UInt3 | — |
HRESULT | — |
Event ID 245 — DM Container: Orchestrator Refresh is triggered.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 246 — DM Container: Configuration Completion Task is scheduled.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 247 — DM Container: Unenrollment is triggered.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 248 — DM Container: Result change is notified.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt3 | — |
HRESULT | — |
Event ID 249 — DM Container: Declared Configuration result is get.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt1 | — |
HRESULT | — |
Event ID 250 — DM Container: Declared Configuration result is set.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt1 | — |
HRESULT | — |
Event ID 251 — DM Container: Declared Configuration result is set with failure: EnrollmentId:, ContainerId:, Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 252 — DM Container: Result of gathering setting provider settings: ProviderName:, User:, SettingFlag:, SettingDataLength:, TimeUsed:, Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Boolean1 | — |
HexInt1 | — |
UInt1 | — |
UInt2 | — |
HRESULT | — |
Event ID 253 — DM Container: Result of applying setting provider settings: ProviderName:, User:, SettingFlag:, SettingDataLength:, TimeUsed:, Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Boolean1 | — |
HexInt1 | — |
UInt1 | — |
UInt2 | — |
HRESULT | — |
Event ID 254 — DM Container: Result of InitializeContainer: Duration:, nestedVirtualization:, Result.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Boolean1 | — |
HexInt2 | — |
Event ID 255 — MDM Session: DmGetAadDeviceMdmResourceUrlFailure.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HexInt2 | — |
HRESULT | — |
Event ID 255 — MDM Session: DmGetAadDeviceMdmResourceUrlFailure.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HexInt2 | — |
HRESULT | — |
Event ID 256 — OmaDmLogOmaDmApiInitiateSession: Result: (%1), Account Id: (%2), Initiation Id: (%3), Mode: (%4), Origin: (%5), AutoDelete: (%6), Alert Count: (%7)...
Message
Fields
| Name | Description |
|---|---|
HRESULT1 | — |
Message2 | — |
Message3 | — |
UInt4 | — |
UInt5 | — |
Boolean6 | — |
UInt7 | — |
Message8 | — |
Message9 | — |
Boolean10 | — |
Boolean11 | — |
Message12 | — |
Boolean13 | — |
Event ID 256 — OmaDmLogOmaDmApiInitiateSession: Result: (%1), Account Id: (%2), Initiation Id: (%3), Mode: (%4), Origin: (%5), AutoDelete: (%6), Alert Count: (%7)...
Message
Fields
| Name | Description |
|---|---|
HRESULT1 | — |
Message2 | — |
Message3 | — |
UInt4 | — |
UInt5 | — |
Boolean6 | — |
UInt7 | — |
Message8 | — |
Message9 | — |
Boolean10 | — |
Boolean11 | — |
Message12 | — |
Boolean13 | — |
Event ID 257 — MDM Session: OMA-DM session started: Session ID, Server ID, User SID, Initiation ID, Origin.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
UInt5 | — |
Event ID 257 — MDM Session: OMA-DM session started: Session ID(%1), Server ID(%2), User SID(%3), Initiation ID(%4), Origin(%5).
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
UInt5 | — |
Event ID 258 — MDM Session: OMA-DM session Loaded: Initiation ID, Status, Total Count, Orphaned Count, Loaded Count, Parent Initiation ID, Completed Count.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT2 | — |
UInt3 | — |
UInt4 | — |
UInt5 | — |
Message6 | — |
UInt7 | — |
Event ID 258 — MDM Session: OMA-DM session Loaded: Initiation ID(%1), Status(%2), Total Count(%3), Orphaned Count(%4), Loaded Count(%5), Parent Initiation ID(%6),...
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT2 | — |
UInt3 | — |
UInt4 | — |
UInt5 | — |
Message6 | — |
UInt7 | — |
Event ID 259 — MDM Session: OMA-DM session Handled: Account ID, Initiation ID, Session ID, Initiator, Origin.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
UInt3 | — |
UInt4 | — |
UInt5 | — |
Event ID 259 — MDM Session: OMA-DM session Handled: Account ID(%1), Initiation ID(%2), Session ID(%3), Initiator(%4), Origin(%5).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
UInt3 | — |
UInt4 | — |
UInt5 | — |
Event ID 260 — MDM Session: OMA-DM Retry Session Scheduled: Account ID, Retry Count, status.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
HexInt3 | — |
Event ID 260 — MDM Session: OMA-DM Retry Session Scheduled: Account ID(%1), Retry Count(%2), status(%3).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
HexInt3 | — |
Event ID 261 — MDM Session: OMA-DM Retry Session Processed: Account ID, Retry Count, Total Count, status.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
UInt3 | — |
HexInt4 | — |
Event ID 261 — MDM Session: OMA-DM Retry Session Processed: Account ID(%1), Retry Count(%2), Total Count(%3), status(%4).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
UInt3 | — |
HexInt4 | — |
Event ID 262 — MDM Session: OMA-DM Retry Session Deleted: Account ID, Retry Count, Total Count, status.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
UInt3 | — |
HexInt4 | — |
Event ID 262 — MDM Session: OMA-DM Retry Session Deleted: Account ID(%1), Retry Count(%2), Total Count(%3), status(%4).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
UInt3 | — |
HexInt4 | — |
Event ID 263 — MDM Session: OMA-DM user logon sessions handled: Account ID, Count, status.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
HexInt3 | — |
Event ID 263 — MDM Session: OMA-DM user logon sessions handled: Account ID(%1), Count(%2), status(%3).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
HexInt3 | — |
Event ID 264 — MDM Session: OMA-DM sessions handled: User SID, Account ID, Initiation ID, User Only, All Active Users, Session Result, Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
UInt4 | — |
UInt5 | — |
HexInt6 | — |
HexInt7 | — |
Event ID 265 — MDM Session: OMA-DM sessions triggered: User SID (%1), Account ID(%2), Initiation ID(%3), Parent Initiation ID(%4), Origin(%5), Session ID(%6), Ses...
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
UInt5 | — |
UInt6 | — |
UInt7 | — |
HRESULT8 | — |
HRESULT9 | — |
Event ID 266 — MDM Session: OMA-DM sessions completed: User SID (%1), Account ID(%2), Initiation ID(%3), Parent Initiation ID(%4), Origin(%5), Session ID(%6), Ses...
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
UInt5 | — |
UInt6 | — |
UInt7 | — |
HRESULT8 | — |
HRESULT9 | — |
Event ID 267 — MDM Session: OMA-DM sessions failed to wait for shell ready: Result (%1).
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 267 — MDM Session: OMA-DM sessions failed to wait for shell ready: Result.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 268 — MDM Session: OMA-DM sessions wait for shell ready: Wait Time in Seconds: (%1), Result (%2).
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
HexInt1 | — |
Event ID 268 — MDM Session: OMA-DM sessions wait for shell ready: Wait Time in Seconds:, Result.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
HexInt1 | — |
Event ID 269 — MDM Session: OMA-DM sessions all active users: Account ID, Initiation ID, Active Users, Sessions Queued, Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
UInt3 | — |
UInt4 | — |
HRESULT5 | — |
Event ID 270 — MDM Session: OMA-DM sessions active user triggered: User SID (%1), Account ID(%2), Initiation ID(%3), Parent Initiation ID(%4), Session ID(%5), Use...
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
UInt5 | — |
UInt6 | — |
UInt7 | — |
Event ID 271 — MDM Session: OMA-DM sessions initialization: CPUs, NumAllowedConcurrentUserSessionForBackgroundSync, NumAllowedConcurrentUserSessionAtUserLogonSync.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
UInt2 | — |
UInt3 | — |
Event ID 272 — Device token MDM recovery successful
Message
Event ID 272 — Device token MDM recovery successful
Message
Event ID 273 — Device token MDM recovery failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 273 — Device token MDM recovery failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 274 — User token MDM recovery successful
Message
Event ID 274 — User token MDM recovery successful
Message
Event ID 275 — User token MDM recovery failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 275 — User token MDM recovery failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 276 — Toast for MDM recovery launched
Message
Event ID 276 — Toast for MDM recovery launched
Message
Event ID 277 — Toast for MDM recovery failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 277 — Toast for MDM recovery failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 278 — MDM recovery conditions detected.
Message
Fields
| Name | Description |
|---|---|
Boolean1 | — |
Event ID 279 — MDM recovery maximum attempts have been reached
Message
Event ID 279 — MDM recovery maximum attempts have been reached
Message
Event ID 280 — An expired cert was chosen to use for OMA-DM Sync
Message
Event ID 280 — MDM Session: Failure during retry session.
Fields
| Name | Description |
|---|---|
param1 | — |
param2 | — |
param3 | — |
param4 | — |
Event ID 281 — LogMeasureWithHresult.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HRESULT | — |
Event ID 281 — MDM Session: Retry session succeeded.
Fields
| Name | Description |
|---|---|
param1 | — |
param2 | — |
param3 | — |
Event ID 282 —
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
HRESULT | — |
Event ID 282 — MDM Session: Failure during retry session.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
HRESULT | — |
Event ID 283 —
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 283 — MDM Session: Retry session succeeded.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 284 —
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 284 — MDM Session: AccountID, Function, HRESULT.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 285 —
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
HexInt3 | — |
Event ID 285 — MDM Session: Request to store session info for retry failed for AccountID with delay and HRESULT.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
HexInt3 | — |
Event ID 286 —
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
HexInt3 | — |
Event ID 286 — MDM Session: Request to store session info for retry succeeded for AccountID with delay and HRESULT.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
HexInt3 | — |
Event ID 287 —
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
UInt1 | — |
HexInt1 | — |
Event ID 287 — MDM Session: OMA-DM Retry Session Scheduled: Account ID, Initiation ID, Retry Count, status.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
UInt1 | — |
HexInt1 | — |
Event ID 288 —
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HexInt2 | — |
FileTime1 | — |
FileTime2 | — |
UInt11 | — |
Event ID 288 — MDM Session: DmGetAadTokenReturnExpiredToken.
Fields
| Name | Description |
|---|---|
param1 | — |
param2 | — |
param3 | — |
param4 | — |
param5 | — |
Event ID 288 — MDM Session: DmGetAadTokenReturnExpiredToken.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HexInt2 | — |
FileTime1 | — |
FileTime2 | — |
UInt11 | — |
Event ID 289 —
Fields
| Name | Description |
|---|---|
UInt1 | — |
HexInt1 | — |
HexInt2 | — |
Event ID 289 — MDM Session: OMA-DM sessions wait for shell ready: Wait Time in Seconds: (.
Fields
| Name | Description |
|---|---|
param1 | — |
param2 | — |
param3 | — |
Event ID 289 — MDM Session: OMA-DM sessions wait for shell ready: Wait Time in Seconds:, Result, Original Result.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
HexInt1 | — |
HexInt2 | — |
Event ID 290 —
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HexInt2 | — |
FileTime1 | — |
FileTime2 | — |
UInt11 | — |
Event ID 290 — MDM Session: DmGetAadTokenExpired.
Fields
| Name | Description |
|---|---|
param1 | — |
param2 | — |
param3 | — |
param4 | — |
param5 | — |
Event ID 290 — MDM Session: DmGetAadTokenExpired.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HexInt2 | — |
FileTime1 | — |
FileTime2 | — |
UInt11 | — |
Event ID 291 —
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HRESULT | — |
Event ID 291 — MDM Session: Process retry session succeeded: Account ID, Initiation ID, Function, SubFunction, HRESULT.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HRESULT | — |
Event ID 292 —
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HRESULT | — |
Event ID 292 — MDM Session: Process retry session failed: Account ID, Initiation ID, Function, SubFunction, HRESULT.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HRESULT | — |
Event ID 293 —
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HRESULT | — |
Event ID 293 — MDM Session: Schedule retry session succeeded: Account ID, Initiation ID, Function, SubFunction, HRESULT.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HRESULT | — |
Event ID 294 —
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HRESULT | — |
Event ID 294 — MDM Session: Schedule retry session failed: Account ID, Initiation ID, Function, SubFunction, HRESULT.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HRESULT | — |
Event ID 295 —
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
HRESULT | — |
Event ID 295 — MDM Session: Retry recovery succeeded: Account ID, Function, SubFunction, HRESULT.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
HRESULT | — |
Event ID 296 —
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
HRESULT | — |
Event ID 296 — MDM Session: Retry recovery failed: Account ID, Function, SubFunction, HRESULT.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
HRESULT | — |
Event ID 301 — SCEP: Failed CspCreateInstance of Node : Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 302 — SCEP: Failed CspAddNode : Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 303 — SCEP: Failed CspDeleteChild for Node : Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 304 — SCEP: Failed CspGetValue for Node : Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 305 — SCEP: Failed CspSetValue for Node : Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 306 — SCEP: CspExecute for UniqueId : InstallUserSid : InstallLocation : NodePath : KeyProtection: Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HexInt1 | — |
HexInt3 | — |
Event ID 307 — SCEP: Failed LogError Message :
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 308 — SCEP: Failed to send Server request.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 309 — SCEP: InstallFromRegEntries.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
Event ID 310 — PFX: Certificate Install.
Message
Fields
| Name | Description |
|---|---|
PFX_Certificate_Install_Status | — |
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 311 — PFX: Certificate Install Failed.
Message
Fields
| Name | Description |
|---|---|
PFX_Certificate_Install_Failed_Result | — |
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 350 — First Sync: Deleting first sync key.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 351 — First Sync: Setting IsSyncDone.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt1 | — |
HexInt2 | — |
Event ID 351 — First Sync: Setting IsSyncDone.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt1 | — |
HexInt2 | — |
Event ID 352 — First Sync: Setting ContinueAnyway.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt1 | — |
Event ID 352 — First Sync: Setting ContinueAnyway.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt1 | — |
Event ID 353 — First Sync: Setting IsServerProvisioningDone.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt1 | — |
Event ID 354 — First Sync: Setting AllowCollectLogsButton.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt1 | — |
Event ID 354 — First Sync: Setting AllowCollectLogsButton.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt1 | — |
Event ID 355 — First Sync: Setting SkipDeviceStatusPage.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 355 — First Sync: Setting SkipDeviceStatusPage.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 356 — First Sync: Setting SkipUserStatusPage.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 356 — First Sync: Setting SkipUserStatusPage.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 357 — First Sync: Setting TimeoutUntilSyncFailure.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 357 — First Sync: Setting TimeoutUntilSyncFailure.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 358 — First Sync: Setting BlockInStatusPage.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 358 — First Sync: Setting BlockInStatusPage.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 359 — First Sync: Resetting timeout.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 359 — First Sync: Resetting timeout.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 360 — First Sync: Setting DeviceProvisioningStatus.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt1 | — |
HexInt2 | — |
Event ID 360 — First Sync: Setting DeviceProvisioningStatus.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt1 | — |
HexInt2 | — |
Event ID 361 — First Sync: Getting DeviceProvisioningStatus.
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 361 — First Sync: Getting DeviceProvisioningStatus.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 400 — MDM ConfigurationManager: Command failure status.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
HexInt1 | — |
Event ID 401 — MDM ConfigurationManager: CSP Node Operation.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
Message6 | — |
HRESULT | — |
Event ID 402 — MDM ConfigurationManager: License check.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HRESULT | — |
Event ID 403 — MDM ConfigurationManager: CSP Allow check.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HRESULT | — |
Event ID 404 — MDM ConfigurationManager: Command failure status.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
InternalCmdType | — |
Message5 | — |
HexInt1 | — |
Event ID 405 — MDM ConfigurationManager: No original URI.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HRESULT | — |
Event ID 406 — MDM PushRouter: Pushrouter failed to start because the dmwappushservice service is disabled.
Message
Event ID 450 — MDM ConfigurationManager: Command failure status.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
HexInt1 | — |
Event ID 451 — MDM ConfigurationManager: CSP Node Operation.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
Message6 | — |
HRESULT | — |
Event ID 452 — MDM ConfigurationManager: License check.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HRESULT | — |
Event ID 453 — MDM ConfigurationManager: CSP Allow check.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HRESULT | — |
Event ID 454 — MDM ConfigurationManager: Command failure status.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
InternalCmdType | — |
Message5 | — |
HexInt1 | — |
Event ID 455 — MDM ConfigurationManager: Caller did not specify user to impersonate to.
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 455 — MDM ConfigurationManager: Caller did not specify user to impersonate to.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 456 — MDM ConfigurationManager: CSP Command takes too long in execution.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
UInt4 | — |
Message5 | — |
UInt6 | — |
HexInt7 | — |
Event ID 457 — MDM ConfigurationManager: CSP takes too long in locking.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
UInt4 | — |
Message5 | — |
UInt6 | — |
HexInt7 | — |
Event ID 458 — MDM ConfigurationManager: Global mutex takes too long in locking.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
UInt1 | — |
HexInt1 | — |
Event ID 600 — MDM ResourceManager: Resource URI:, Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 601 — MDM ResourceManager: DeleteResource EnrollmentID: UserSID: URI.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 700 — MDM Registration: Unregister device invoked by exe: (%1), Result: (%2).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 700 — MDM Registration: Unregister device invoked by exe:, Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 800 — MDM PolicyManager: Dedicated notification (WNF): (%2, %3) published for Policy: (%1).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HexInt2 | — |
Example Event
system:
provider: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider
guid: 3DA494E4-0FE2-415C-B895-FB5265C5C83B
event_source_name: ''
event_id: 800
version: 0
level: 4
task: 0
opcode: 0
keywords: 4611686018427387904
time_created: '2023-11-05T22:26:45.458468+00:00'
event_record_id: 134
correlation:
ActivityID: F590C418-1079-0002-E8EA-90F57910DA01
execution:
process_id: 3584
thread_id: 3588
channel: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational
computer: WinDev2310Eval
security:
user_id: S-1-5-18
event_data:
Message1: Power/Policy/Settings/Processor/SchemePersonality/381b4222-f694-41f0-9685-ff5bb260df2e/0aabb002-a307-447e-9b81-1d819df6c6d0/PerfIncreaseThreshold/DcValue
HexInt1: '0xa3b7e065'
HexInt2: '0x41c64e6d'
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 801 — MDM PolicyManager: Dedicated notification (WNF): (%2, %3) published for Policy: (%1), Result:(%4) %5.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
HRESULT | — |
Event ID 802 — MDM PolicyManager: Area notification (WNF): (%2, %3) published for Area: (%1).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HexInt2 | — |
Event ID 803 — MDM PolicyManager: Area notification (WNF): (%2, %3) published for Area: (%1), Result:(%4) %5.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
HRESULT | — |
Event ID 804 — MDM PolicyManager: Dedicated notification (WNF) WNF_ENTR_REQUIRE_DEVICE_ENCRYPTION_POLICY_VALUE_CHANGED published.
Message
Event ID 805 — MDM PolicyManager: Dedicated notification (WNF) WNF_ENTR_REQUIRE_DEVICE_ENCRYPTION_POLICY_VALUE_CHANGED published.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 806 — MDM PolicyManager: Merge string, Area: (%1), Policy: (%2), EnrollmentID requesting merge: (%3), Result:(%4) %5.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
UInt1 | — |
HRESULT | — |
Event ID 807 — MDM PolicyManager: Merge binary, Area: (%1), Policy: (%2), EnrollmentID requesting merge: (%3), Result:(%4) %5.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
UInt1 | — |
HRESULT | — |
Event ID 808 — MDM PolicyManager: Merge int, Area: (%1), Policy: (%2), EnrollmentID requesting merge: (%3), Result:(%4) %5.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
UInt1 | — |
HRESULT | — |
Event ID 809 — MDM PolicyManager: Set policy int, Policy: (%1), Area: (%2), EnrollmentID requesting set: (%3), Current User: (%4), Int: (%5), Enrollment Type.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
HexInt4 | — |
HexInt5 | — |
Event ID 810 — MDM PolicyManager: Set policy string, Policy: (%1), Area: (%2), EnrollmentID requesting set: (%3), Current User: (%4), String: (%5), Enrollment Typ...
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
HexInt4 | — |
Event ID 811 — MDM PolicyManager: Set policy binary, Policy: (%1), Area: (%2), EnrollmentID requesting set: (%3), Current User: (%4), Enrollment Type: (%5), Scope...
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
HexInt4 | — |
Event ID 812 — MDM PolicyManager: Set policy, Policy: (%1), Area: (%2), EnrollmentID requesting merge: (%3), Current User: (%4), Scope: (%5), Result:(%6) %7.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
Event ID 813 — MDM PolicyManager: Set policy int, Policy:, Area:, EnrollmentID requesting merge:, Current User:, Int:, Enrollment Type:, Scope.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
Example Event
system:
provider: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider
guid: 3DA494E4-0FE2-415C-B895-FB5265C5C83B
event_source_name: ''
event_id: 813
version: 0
level: 4
task: 0
opcode: 0
keywords: 9223372036854775808
time_created: '2023-11-05T22:26:45.437445+00:00'
event_record_id: 172
correlation:
ActivityID: F590C418-1079-0002-E8EA-90F57910DA01
execution:
process_id: 3584
thread_id: 3588
channel: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin
computer: WinDev2310Eval
security:
user_id: S-1-5-18
event_data:
Message1: Power/Policy/Settings/Processor/SchemePersonality/381b4222-f694-41f0-9685-ff5bb260df2e/0aabb002-a307-447e-9b81-1d819df6c6d0/PerfIncreaseThreshold/DcValue
Message2: knobs
Message3: fc01e91f-914c-45af-9d7c-0b2e5fbedf62
Message4: device
HexInt1: '0x1e'
HexInt2: '0x1'
HexInt3: '0x0'
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 814 — MDM PolicyManager: Set policy string, Policy:, Area:, EnrollmentID requesting merge:, Current User:, String:, Enrollment Type:, Scope.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
HexInt1 | — |
HexInt2 | — |
Event ID 815 — MDM PolicyManager: Set policy binary, Policy:, Area:, EnrollmentID requesting merge:, Current User:, Enrollment Type:, Scope.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HexInt1 | — |
HexInt2 | — |
Event ID 817 — MDM PolicyManager: Merge policy precheck apply call.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt1 | — |
HexInt2 | — |
HRESULT | — |
Event ID 818 — MDM PolicyManager: Delete policy, Policy: (%1), Area: (%2), EnrollmentID requesting merge: (%3), Current User: (%4), Scope: (%5), Result:(%6) %7.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
Event ID 819 — MDM PolicyManager: Delete policy, Policy:, Area:, EnrollmentID requesting merge:, Current User:, Scope.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HexInt1 | — |
Event ID 820 — MDM PolicyManager: Set policy precheck precheck call.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt1 | — |
HexInt2 | — |
HRESULT | — |
Event ID 821 — MDM PolicyManager: Merge of policy did not complete successfully, Policy: (%1), Area: (%2), Result:(%3) %4.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt3 | — |
HRESULT | — |
Event ID 822 — MDM PolicyManager: Acquiring the merge lock, Policy: (%1), Area: (%2), Result:(%3) %4.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt3 | — |
HRESULT | — |
Event ID 823 — MDM PolicyManager: Create dynamic policy metadata, Policy: (%1), Area: (%2), Result:(%3) %4.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt3 | — |
HRESULT | — |
Event ID 824 — MDM PolicyManager: Per user policy has device wide scope specified, Policy: (%1), Area: (%2), Result:(%3) %4.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt3 | — |
HRESULT | — |
Event ID 825 — MDM PolicyManager: Device wide policy has user wide scope specified, Policy: (%1), Area: (%2), Result:(%3) %4.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt3 | — |
HRESULT | — |
Event ID 826 — MDM PolicyManager: SLAPI data not found, Policy: (%1), Area: (%2), Result:(%3) %4.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt3 | — |
HRESULT | — |
Event ID 827 — MDM PolicyManager: Policy is rejected by licensing, Policy: (%1), Area: (%2), Result:(%3) %4.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt3 | — |
HRESULT | — |
Event ID 828 — MDM PolicyManager: Policy is rejected by DoNotAllow flag, Policy: (%1), Area: (%2), Result:(%3) %4.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt3 | — |
HRESULT | — |
Event ID 829 — MDM PolicyManager: Dedicated cached delayed notification (WNF): (%3, %4) published for Policy: (%1) in Area (%2).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt1 | — |
HexInt2 | — |
Example Event
system:
provider: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider
guid: 3DA494E4-0FE2-415C-B895-FB5265C5C83B
event_source_name: ''
event_id: 829
version: 0
level: 4
task: 0
opcode: 0
keywords: 4611686018427387904
time_created: '2022-04-07T08:14:41.791112+00:00'
event_record_id: 2
correlation: {}
execution:
process_id: 648
thread_id: 2760
channel: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational
computer: WIN-FPV0DSIC9O6.sigma.fr
security:
user_id: S-1-5-18
event_data:
Message1: DataProtection
Message2: EnterpriseProtectedDomainNames
HexInt1: '0xa3bd6475'
HexInt2: '0x13920028'
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 830 — MDM PolicyManager: Dedicated cached delayed notification (WNF): (%3, %4) published for Policy: (%1) in Area (%2), Result:(%5) %6.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
HRESULT | — |
Event ID 831 — MDM PolicyManager: Dedicated non-cached delayed notification (WNF): (%3, %4) published for Policy: (%1) in Area (%2).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt1 | — |
HexInt2 | — |
Event ID 832 — MDM PolicyManager: Dedicated non-cached delayed notification (WNF): (%3, %4) published for Policy: (%1) in Area (%2), Result:(%5) %6.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
HRESULT | — |
Event ID 833 — MDM PolicyManager: Evaluator notification (WNF): (%2, %3) published for Evaluator: (%1).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HexInt2 | — |
Example Event
system:
provider: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider
guid: 3DA494E4-0FE2-415C-B895-FB5265C5C83B
event_source_name: ''
event_id: 833
version: 0
level: 4
task: 0
opcode: 0
keywords: 9223372036854775808
time_created: '2023-10-25T22:55:39.435030+00:00'
event_record_id: 50
correlation: {}
execution:
process_id: 4544
thread_id: 772
channel: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin
computer: WinDevEval
security:
user_id: S-1-5-21-2533829718-189860685-2477588761-500
event_data:
Message1: AppHVSI
HexInt1: '0xa3bd9075'
HexInt2: '0x13920028'
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 834 — MDM PolicyManager: Evaluator notification (WNF): (%2, %3) published for Evaluator: (%1), Result:(%4) %5.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
HRESULT | — |
Event ID 835 — MDM PolicyManager: Set Policy in Area is Evaluator policy.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 836 — MDM PolicyManager: Set Policy in Area is Evaluator policy.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
UInt1 | — |
HRESULT | — |
Event ID 837 — MDM PolicyManager: Delete Policy in Area is Evaluator policy.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 838 — MDM PolicyManager: Delete Policy in Area is Evaluator policy.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
UInt1 | — |
HRESULT | — |
Event ID 839 — MDM PolicyManager: Delete provider.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Example Event
system:
provider: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider
guid: 3DA494E4-0FE2-415C-B895-FB5265C5C83B
event_source_name: ''
event_id: 839
version: 0
level: 4
task: 0
opcode: 0
keywords: 9223372036854775808
time_created: '2023-10-25T22:55:39.426870+00:00'
event_record_id: 48
correlation: {}
execution:
process_id: 4544
thread_id: 772
channel: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin
computer: WinDevEval
security:
user_id: S-1-5-21-2533829718-189860685-2477588761-500
event_data:
Message1: FC01E91F-914C-45AF-9D7C-0B2E5FBEDF62
Message2: AppHVSI
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 840 — MDM PolicyManager: Delete provider.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt3 | — |
HRESULT | — |
Event ID 841 — MDM PolicyManager: Delete area in provider.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 842 — MDM PolicyManager: Delete area in provider.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
UInt1 | — |
HRESULT | — |
Event ID 843 — MDM PolicyManager: Load of the precheck DLL (%4) did not complete successfully, Policy: (%2), Area: (%1), Precheck: (%3), Result:(%5) %6.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
UInt1 | — |
UInt2 | — |
HRESULT | — |
Event ID 844 — MDM PolicyManager: During %1 found bad enrollment (%2) during merge.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
HRESULT | — |
Example Event
system:
provider: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider
guid: 3DA494E4-0FE2-415C-B895-FB5265C5C83B
event_source_name: ''
event_id: 844
version: 0
level: 2
task: 0
opcode: 0
keywords: 9223372036854775808
time_created: '2023-10-26T04:20:37.233106+00:00'
event_record_id: 2
correlation: {}
execution:
process_id: 716
thread_id: 3532
channel: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin
computer: WIN-OQ6R0RVA4NF
security:
user_id: S-1-5-18
event_data:
Message1: Inbox
Message2: 82965F5A-6C65-4B7A-8075-488FCCE07D4E
Message3: 1e05dd5d-a022-46c5-963c-b20de341170f
HRESULT: '0x3f'
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 845 — MDM PolicyManager: Cannot delete the policy hive for bad enrollment.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HexInt2 | — |
HRESULT | — |
Event ID 846 — MDM PolicyManager: Machine Broadcast of WM_SETTINGCHANGES to user sessions failed with.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HexInt2 | — |
HRESULT | — |
Event ID 847 — MDM PolicyManager: Machine Broadcast of WM_SETTINGCHANGES to user sessions.
Message
Event ID 848 — MDM PolicyManager: Policy value set by MAM is not allowed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt3 | — |
HRESULT | — |
Event ID 849 — MDM PolicyManager: Merge policy precheck apply call.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
UInt1 | — |
HRESULT | — |
Event ID 850 — MDM PolicyManager ADMX Ingestion: Blocked registry key: in tag.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 851 — MDM PolicyManager ADMX Ingestion: Cannot remove ADMX metadata when policy is in use.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 852 — MDM PolicyManager ADMX Ingestion: Invalid attribute.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 853 — MDM PolicyManager ADMX Ingestion: Invalid tag:<.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 854 — MDM PolicyManager ADMX Ingestion: <.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt1 | — |
HexInt2 | — |
Event ID 855 — MDM PolicyManager ADMX Ingestion: Xml Read Error TagName:, Line: Position: Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HexInt2 | — |
HRESULT | — |
Event ID 856 — MDM PolicyManager: ADMX ingestion given payload policy definition element Id not found: Id.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HRESULT | — |
Event ID 857 — MDM PolicyManager: ADMX ingestion given payload expect True or False string.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HRESULT | — |
Event ID 858 — MDM PolicyManager: ADMX ingestion given payload has value that cannot be converted to decimal: Id.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HRESULT | — |
Event ID 859 — MDM PolicyManager: Load of the translation DLL (%4) did not complete successfully, Policy: (%2), Area: (%1), Action: (%3), Result:(%5) %6.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
UInt1 | — |
UInt2 | — |
HRESULT | — |
Event ID 860 — MDM PolicyManager: Merge policy precheck post apply call.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
UInt1 | — |
UInt2 | — |
HRESULT | — |
Event ID 861 — MDM PolicyManager: Merge policy precheck post apply call.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
HRESULT | — |
Event ID 862 — MDM PolicyManager: Merge policy: Policy definitions for area not found.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HRESULT | — |
Event ID 863 — MDM PolicyManager: Merge policy: Policy definition for area, policy not found.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt3 | — |
HRESULT | — |
Event ID 864 — MDM PolicyManager: Enum of policies: Policy definition for area, policy not found.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt3 | — |
HRESULT | — |
Event ID 865 — MDM PolicyManager: ADMX Ingestion: EnrollmentId, app name, setting type, unique Id.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HexInt1 | — |
HexInt3 | — |
Event ID 866 — MDM PolicyManager: ADMX Ingestion: EnrollmentId, app name, setting type, unique Id, area.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
Event ID 867 — MDM PolicyManager: ADMX ingestion delete of previous ingestion: EnrollmentId, app name, setting type, unique Id.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HexInt1 | — |
HexInt3 | — |
Event ID 868 — MDM PolicyManager: ADMX ingestion: Nested Element tags found: previous, next.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt3 | — |
HRESULT | — |
Event ID 869 — MDM PolicyManager: ADMX ingestion: Delete of path issue: Path.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HRESULT | — |
Event ID 870 — MDM PolicyManager: ADMX ingestion payload Id attribute missing.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 871 — MDM PolicyManager: ADMX ingestion verification whether there are policies against it has failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HexInt1 | — |
HexInt3 | — |
Event ID 872 — MDM PolicyManager: ADMX ingestion starting update of existing Admx ingestion.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HexInt1 | — |
Event ID 873 — MDM PolicyManager: ADMX ingestion starting new Admx ingestion.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Event ID 880 — MDM Wins Over GP: MDMWinsOverGP policy enabled but this GP setting is not blocked, Value: (%1), Namespace: (%2), Operation: (%3), Result:(%4) %5.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
UInt1 | — |
HRESULT | — |
Event ID 881 — MDM Wins Over GP: MDMWinsOverGP policy enabled and GP setting is blocked, Value:, Namespace:, Operation.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 890 — MDM Container: Admx Ingestion Change Notificaiton WNF fired, Value: (.
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 890 — MDM Container: Admx Ingestion Change Notificaiton WNF fired, Value.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 900 — MDM Diagnostics: Getting Diagnostics Information from.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 901 — MDM Diagnostics: Creating Diagnostic report at.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 902 — MDM Diagnostics: Adding redirected reg keys to Policy Manager diagnostic data failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 903 — MDM Diagnostics: Opening redirected reg keys in Policy Manager diagnostic data failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 904 — MDM Diagnostics: Opening redirected reg value in Policy Manager diagnostic data failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 905 — MDM Diagnostics: Appending redirected reg key or Group Policy values in Policy Manager diagnostic report failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 906 — MDM Diagnostics: Parsing input XML failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 907 — MDM Diagnostics: Getting data out of top level key failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 908 — MDM Diagnostics: Getting data out of registry keys failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 909 — MDM Diagnostics: Getting data out of registry values failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 910 — MDM Diagnostics: Check for whether directory exists and create if not failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 911 — MDM Diagnostics: Removing PII from ActiveSync data failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 912 — MDM PolicyManager ADMX Ingestion: ParentCategory of policy is not defined in categories PolicyName:, ParentCategory.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 913 — MDM PolicyManager ADMX Ingestion: Circular Referencing In Categories Category, ParentCategory.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 914 — MDM PolicyManager ADMX Ingestion: Equivalent Area name from categories should be limited to 255 characters(Max registry key length).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 915 — MDM PolicyManager: Merge policy: Making the enrollment dormant, removing policies.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 916 — MDM PolicyManager: Merge policy: Making the enrollment non dormant, policies in enrollment are make current.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 917 — MDM PolicyManager: Merge policy: State of enrollment should not be dormant.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 918 — MDM PolicyManager: Merge policy: State of enrollment should not be non-dormant.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 1000 — Phone Reset: Phone reset initiated.
Message
Event ID 1100 — Device Management Account CSP: Retrieving the node via Get command failed with.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1101 — Device Management Account CSP: Device Management session not requested after account creation.
Message
Event ID 1102 — Device Management Account CSP: Device Management session requested after DM account creation by server.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 1103 — Device Management Account CSP: Device Management session kick-off request ignored for enterprise enrollment type.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 1104 — Device Management Account CSP: Device Management session kick-off request denied for enrollment type.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 1105 — Device Management Account CSP: Invalid enrollment type.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 1106 — Device Management Account CSP: Device Management session kick-off request failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1107 — Device Management Account CSP: Notifying configuration manager notification failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1108 — Device Management Account CSP: Retrieving the session variable:, value: failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 1109 — Device Management Account CSP: Retrieved the session variable:, value.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 1110 — Device Management Account CSP: Creating an instance of Device Management Account CSP failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1111 — Device Management Account CSP: An instance of the Device Management Account CSP was initialized for AccountUID: (%1), session's Enrollment ID: (%2)...
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
UInt1 | — |
HRESULT | — |
Event ID 1112 — Device Management Account CSP: Failed to initialize an instance of the Device Management Account CSP for AccountUID: (%1), session's Enrollment ID:...
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
UInt1 | — |
HRESULT | — |
Event ID 1113 — Device Management Account CSP: Enumerating the children nodes failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1114 — Device Management Account CSP: Device Management account for a different Enterprise enrollment denied.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
HRESULT | — |
Event ID 1115 — Device Management Account CSP: Device Management account being created for Mobile Operator.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 1116 — Device Management Account CSP: Creating new enrollment for mobile operator failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 1117 — Device Management Account CSP: Creating new enrollment for mobile operator failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 1118 — Device Management Account CSP: Device Management account added.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
HRESULT | — |
Event ID 1119 — Device Management Account CSP: Adding device management account failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
HRESULT | — |
Event ID 1120 — Device Management Account CSP: Device Management account deleted.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 1121 — Device Management Account CSP: Device Management account deletion failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 1122 — Device Management Account CSP: Device Management account clear failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1123 — Device Management Account CSP: Device Management account moved.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
HRESULT | — |
Event ID 1124 — Device Management Account CSP: Device Management account move failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
HRESULT | — |
Event ID 1125 — Device Management Account CSP: Device Management account check.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
HRESULT | — |
Event ID 1126 — Device Management Account CSP: Device Management account check failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
HRESULT | — |
Event ID 1127 — Device Management Account CSP: Device Management session kick-off request ignored since there are multiple accounts being created.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 1128 — Device Management Account CSP: MO trying to access a non-MO Device Management account.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Message1 | — |
HRESULT | — |
Event ID 1200 — Device Impersonation: Illegal attempt to impersonate.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 1300 — Enrollment Status Tracking: Starting status tracking for resource.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 1301 — Enrollment Status Tracking: Initializing download for resource.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 1302 — Enrollment Status Tracking: Downloading resource.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 1303 — Enrollment Status Tracking: Pending download retry for resource.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 1304 — Enrollment Status Tracking: Download of resource encountered an error and could not complete.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 1305 — Enrollment Status Tracking: Download of resource completed successfully.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 1306 — Enrollment Status Tracking: Pending user session for resource.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 1307 — Enrollment Status Tracking: Installing resource.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 1308 — Enrollment Status Tracking: Pending installation retry for resource.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 1309 — Enrollment Status Tracking: Installation of resource encountered an error and could not complete.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 1310 — Enrollment Status Tracking: Installation of resource completed successfully.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 1311 — Enrollment Status Tracking: Status of resource is unknown.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
References
Event ID 1350 — Autopilot Device Preparation: Latest device preparation hint used = %1.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Event ID 1351 — Autopilot Device Preparation: Device is no longer in OOBE and attempt to clear the device preparation hint resulted in HRESULT %1.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1500 — WiFiConfigurationServiceProvider: New node initialized, type:, name.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Message1 | — |
Event ID 1501 — WiFiConfigurationServiceProvider: Children queried, type:, count.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
UInt2 | — |
Event ID 1502 — WiFiConfigurationServiceProvider: Node added, type:, uri:, result.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Message1 | — |
HRESULT | — |
Event ID 1503 — WiFiConfigurationServiceProvider: Node delete child, type:, uri:, result.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Message1 | — |
HRESULT | — |
Event ID 1504 — WiFiConfigurationServiceProvider: Node clear, type:, Result.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
HRESULT | — |
Event ID 1505 — WiFiConfigurationServiceProvider: Node get value, type:, Result.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
HRESULT | — |
Event ID 1506 — WiFiConfigurationServiceProvider: Node set value, type:, Result.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
HRESULT | — |
Event ID 1507 — WiFiConfigurationServiceProvider: Node set value failed to set the wlan profile, error.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Event ID 1508 — WiFiConfigurationServiceProvider: Node destructed, type.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Event ID 1509 — WiFiConfigurationServiceProvider: Get Node, Result.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1510 — WiFiConfigurationServiceProvider: Node set value failed to set proxy, dwError.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Event ID 1511 — WiFiConfigurationServiceProvider: Node initialize, segments:, uri:, Result.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Message1 | — |
HRESULT | — |
Event ID 1530 — WiredNetworkConfigurationServiceProvider: Wired network profile saved.
Message
Event ID 1531 — WiredNetworkConfigurationServiceProvider: Enable block period set.
Message
Event ID 1532 — WiredNetworkConfigurationServiceProvider: Wired network profile deleted.
Message
Event ID 1533 — WiredNetworkConfigurationServiceProvider: Wired network profile deleted.
Message
Event ID 1534 — WiredNetworkConfigurationServiceProvider: Wired network profile not saved.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1535 — WiredNetworkConfigurationServiceProvider: Block period not set.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1536 — WiredNetworkConfigurationServiceProvider: Delete wired network profile failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1537 — WiredNetworkConfigurationServiceProvider: Disable block period failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1538 — WiredNetworkConfigurationServiceProvider: Dot3 service start failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1539 — WiredNetworkConfigurationServiceProvider: Dot3 service configuration change failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1540 — WiredNetworkConfigurationServiceProvider: Dot3 service stop failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1600 — DMClient Configuration Service Provider: Server initiated unenroll started.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 1600 — DMClient Configuration Service Provider: Server initiated unenroll started.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 1601 — DMClient Configuration Service Provider: Server initiated unenroll failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 1601 — DMClient Configuration Service Provider: Server initiated unenroll failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 1650 — Windows Information Protection configuration changed: Previous State:, Current State:, Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 1651 — Windows Information Protection dependency check result: Dependency Name:, State:, IsDependencySatisfied:, Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt3 | — |
HRESULT | — |
Event ID 1652 — Windows Information Protection missing mandatory policy: Area:, Name.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 1653 — MDM Evaluator Scenario Evaluate Result: Scenario:, Previous State:, Last Dependency:, Final State:, Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HRESULT | — |
Event ID 1700 — System Migration Task Started.
Message
Event ID 1701 — System Migration Task Deleted.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1702 — System Upgrade Alert scheduled.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1703 — User Upgrade Alert scheduled.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1704 — User Migration Task Started.
Message
Event ID 1705 — User Migration Task Deleted.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1706 — Resource Manager Keys Migrated.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1707 — Schedules Created.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1708 — Impersonation result.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1709 — No Migration needed, not an upgrade.
Message
Example Event
system:
provider: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider
guid: 3DA494E4-0FE2-415C-B895-FB5265C5C83B
event_source_name: ''
event_id: 1709
version: 0
level: 4
task: 0
opcode: 0
keywords: 9223372036854775808
time_created: '2023-10-25T21:23:47.600367+00:00'
event_record_id: 30
correlation: {}
execution:
process_id: 6072
thread_id: 6120
channel: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin
computer: WinDevEval
security:
user_id: S-1-5-18
event_data: {}
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 1800 — Windows Defender Advanced Threat Protection CSP: Get Node's Value.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Message1 | — |
Event ID 1801 — Windows Defender Advanced Threat Protection CSP: Failed to Get Node's Value.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Message1 | — |
HRESULT | — |
Event ID 1802 — Windows Defender Advanced Threat Protection CSP: Get Node's Value complete.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Message1 | — |
HRESULT | — |
Event ID 1803 — Windows Defender Advanced Threat Protection CSP: Get Last Connected value complete.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Boolean1 | — |
Event ID 1804 — Windows Defender Advanced Threat Protection CSP: Get Org ID value complete.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Boolean1 | — |
Event ID 1805 — Windows Defender Advanced Threat Protection CSP: Get Sense Is Running value complete.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Event ID 1806 — Windows Defender Advanced Threat Protection CSP: Get Onboarding State value complete.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Boolean1 | — |
Event ID 1807 — Windows Defender Advanced Threat Protection CSP: Get Onboarding value complete.
Message
Fields
| Name | Description |
|---|---|
Boolean1 | — |
Event ID 1808 — Windows Defender Advanced Threat Protection CSP: Get Offboarding value complete.
Message
Fields
| Name | Description |
|---|---|
Boolean1 | — |
Event ID 1809 — Windows Defender Advanced Threat Protection CSP: Get Sample Sharing value complete.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Boolean1 | — |
Event ID 1810 — Windows Defender Advanced Threat Protection CSP: Onboarding process.
Message
Event ID 1811 — Windows Defender Advanced Threat Protection CSP: Onboarding process.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1812 — Windows Defender Advanced Threat Protection CSP: Onboarding process.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1813 — Windows Defender Advanced Threat Protection CSP: Onboarding process.
Message
Event ID 1814 — Windows Defender Advanced Threat Protection CSP: Onboarding process.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1815 — Windows Defender Advanced Threat Protection CSP: Set Sample Sharing value complete.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
HRESULT | — |
Event ID 1816 — Windows Defender Advanced Threat Protection CSP: Offboarding process.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1817 — Windows Defender Advanced Threat Protection CSP: Offboarding process.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1818 — Windows Defender Advanced Threat Protection CSP: Set Node's Value started.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Message1 | — |
Event ID 1819 — Windows Defender Advanced Threat Protection CSP: Failed to Set Node's Value.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Message1 | — |
HRESULT | — |
Event ID 1820 — Windows Defender Advanced Threat Protection CSP: Set Node's Value complete.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Message1 | — |
HRESULT | — |
Event ID 1901 — EnterpriseDesktopAppManagement CSP: A node instance of was created successfully.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 1902 — EnterpriseDesktopAppManagement CSP: A node instance failed to be created.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
HRESULT | — |
Event ID 1903 — EnterpriseDesktopAppManagement CSP: An app which was previously installed is no longer installed on this device.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 1904 — EnterpriseDesktopAppManagement CSP: MDMAppInstaller task has started.
Message
Event ID 1905 — EnterpriseDesktopAppManagement CSP: Application content download started.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 1906 — EnterpriseDesktopAppManagement CSP: Application content download completed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 1907 — EnterpriseDesktopAppManagement CSP: Application content download failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HRESULT | — |
Event ID 1908 — EnterpriseDesktopAppManagement CSP: Unable to start the application content download.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 1909 — EnterpriseDesktopAppManagement CSP: Unable to start the application installation action because the user is not logged in.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 1910 — EnterpriseDesktopAppManagement CSP: Another instance of the MDMAppInstaller process is already running.
Message
Event ID 1911 — EnterpriseDesktopAppManagement CSP: The MDMAppInstaller process is terminating with an error.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 1912 — EnterpriseDesktopAppManagement CSP: The MDMAppInstaller process is terminating with no errors.
Message
Event ID 1913 — EnterpriseDesktopAppManagement CSP: Creation of the MSI app install job failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 1914 — EnterpriseDesktopAppManagement CSP: Creation of the MSI app uninstall job failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 1915 — EnterpriseDesktopAppManagement CSP: The MDMAppInstaller process could not be started to process MSI app install.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 1916 — EnterpriseDesktopAppManagement CSP: The MDMAppInstaller process could not be started to process MSI app uninstall.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 1920 — EnterpriseDesktopAppManagement CSP: An application install has started.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 1921 — EnterpriseDesktopAppManagement CSP: An application uninstall has started.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 1922 — EnterpriseDesktopAppManagement CSP: An application install has succeeded.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 1923 — EnterpriseDesktopAppManagement CSP: An application uninstall has succeeded.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 1924 — EnterpriseDesktopAppManagement CSP: An application install has failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HRESULT | — |
Event ID 1925 — EnterpriseDesktopAppManagement CSP: An application uninstall has failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HRESULT | — |
Event ID 1926 — EnterpriseDesktopAppManagement CSP: An application installation action has exceeded the expected run time.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 1927 — EnterpriseDesktopAppManagement CSP: An application status alert was sent to the device management service.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 1928 — EnterpriseDesktopAppManagement CSP: An application status alert failed to be sent to the device management service.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HRESULT | — |
Event ID 1930 — EnterpriseDesktopAppManagement CSP: The MDMAppInstaller has been configured for restart by scheduled task (Resume App Installation Actions).
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HexInt2 | — |
Event ID 1931 — EnterpriseDesktopAppManagement CSP/ MdmAppInstaller: Message.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 1932 — EnterpriseDesktopAppManagement CSP/ MdmAppInstaller: Message.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 1933 — EnterpriseDesktopAppManagement CSP/ MdmAppInstaller: Message.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 2001 — Identical Polices from sam configuration source already applied.
Message
Event ID 2002 — Performing enrollment for Partnership ID from an elevated context
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 2003 — Performing unenrollment for Partnership ID from an elevated context
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 2004 — The required operation requires elevation.
Message
Event ID 2005 — The compliance check result for the partnership ID is
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 2006 — The policy application result for the partnership ID is
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 2007 — MDM Enroll: Error creating OS Edition Upgrade Alert schedule
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 2008 — OS Edition Upgrade WNF event process status
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 2009 — MDM Enroll: Error creating Win10 S Mode Alert schedule
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 2010 — Win10 S Mode WNF event process status
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 2011 — MDM Enroll: Error creating Wsc Startup Alert schedule
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 2012 — Wsc Startup Alert WNF event process status
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 2101 — Dynamic Management: Successfully created Context Store.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 2102 — Dynamic Management: Failed to create Context Store.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 2103 — Dynamic Management: Successfully created context.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 2104 — Dynamic Management: Failed to create context.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 2105 — Dynamic Management: Successfully processed signal definition.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 2106 — Dynamic Management: Failed to process signal definition.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
HRESULT | — |
Event ID 2107 — Dynamic Management: Successfully applied context.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 2108 — Dynamic Management: Failed to apply context.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 2109 — Preview Builds: %1, Result: %2.
Message
Fields
| Name | Description |
|---|---|
Preview_Builds | — |
Result | — |
Message1 | — |
HRESULT | — |
Event ID 2110 — Preview Builds: %1, Result: %2.
Message
Fields
| Name | Description |
|---|---|
Preview_Builds | — |
Result | — |
Message1 | — |
HRESULT | — |
Event ID 2111 — Preview Builds: %1, Result: %2.
Message
Fields
| Name | Description |
|---|---|
Preview_Builds | — |
Result | — |
Message1 | — |
HRESULT | — |
Event ID 2112 — Preview Builds: %1, Result: %2.
Message
Fields
| Name | Description |
|---|---|
Preview_Builds | — |
Result | — |
Message1 | — |
HRESULT | — |
Event ID 2200 — Acquired lock for Group Policy scope.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 2201 — Failed to acquire lock for Group Policy scope:, Error.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 2202 — Released lock for Group Policy scope.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 2203 — Failed to release lock for Group Policy scope:, Error.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 2204 — Caching uri for blocking mapped GP location.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 2205 — Failed to lookup in the dictionary.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 2206 — Marking blocking record for removal during post processing.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 2207 — No blocking records need removal.
Message
Event ID 2208 — Trying to delete the blocking record reg key.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HRESULT | — |
Event ID 2209 — Found a blocking record reg key that needs to be deleted.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 2210 — Attempted to restore GP Value.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 2211 — Created a blocking record.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 2212 — Updated a blocking record.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
References
Event ID 2213 — Attempted to save existing GP Value.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
References
Event ID 2214 — Attempted to delete existing GP Value.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 2215 — MdmWinsOverGp policy is being set to value.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
Event ID 2216 — All GP locations that were to be unblocked have been unblocked successfully.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
Event ID 2217 — No blocking records existed, so skipping re-evaluation of blocking records.
Message
Event ID 2218 — Found existing blocking records.
Message
Event ID 2219 — Uri evalulation for delete showed that uri still configured state is.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 2220 — MdmWinsOverGp Policy value is.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
Event ID 2221 — Setting the targetted user sid to.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 2222 — No targetted user sid was set.
Message
Event ID 2223 — Targetting user with sid.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 2300 — Bootstrap Enrollment Status Page: publish notification value.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
Event ID 2400 — MDM Declared Configuration: Delete document, Document Id: (%1), Version: (%2), Enrollment ID: (%3), Current User: (%4), schema: (%5), Scope: (%6), ...
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
HexInt1 | — |
HexInt2 | — |
Event ID 2400 — MDM Declared Configuration: Delete document, Document Id:, Version:, Enrollment ID:, Current User:, schema:, Scope:, Enroll Type.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
HexInt1 | — |
HexInt2 | — |
Event ID 2401 — MDM Declared Configuration: Delete document, Document Id: (%1), Version: (%2), Enrollment ID: (%3), Current User: (%4), schema: (%5), Scope: (%6), ...
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
HexInt4 | — |
Event ID 2402 — MDM Declared Configuration: End document parsing from file: Expected Document Id: (%1) File Document Id: (%2), Scenario: (%3), Version: (%4), Enrol...
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
Message6 | — |
Message7 | — |
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
HexInt4 | — |
HexInt5 | — |
Event ID 2403 — MDM Declared Configuration: End document parsing from file: Expected Document Id: (%1) File Document Id: (%2), Scenario: (%3), Version: (%4), Enrol...
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
Message6 | — |
Message7 | — |
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
HexInt4 | — |
HexInt5 | — |
HexInt6 | — |
HexInt7 | — |
Event ID 2404 — MDM Declared Configuration: End document parsing from CSP: Document Id: (%1), Scenario: (%2), Version: (%3), Enrollment Id: (%4), Current User.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
Message6 | — |
Message7 | — |
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
HexInt4 | — |
HexInt5 | — |
HexInt6 | — |
HexInt7 | — |
Event ID 2405 — MDM Declared Configuration: End document parsing from CSP: Document Id: (%1), Scenario: (%2), Version: (%3), Enrollment Id: (%4), Current User.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
Message6 | — |
Message7 | — |
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
HexInt4 | — |
HexInt5 | — |
HexInt6 | — |
HexInt7 | — |
HexInt8 | — |
HexInt9 | — |
Event ID 2406 — MDM Declared Configuration: Document Summary due to Alert: Enrollment Id:, Current User:, Alert data:, Enroll type.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
HexInt1 | — |
Event ID 2407 — MDM Declared Configuration: Document Summary due to Alert: Enrollment Id: (%1), Current User: (%2), Alert data: (%3), Enroll type: (%4), Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
UInt1 | — |
UInt2 | — |
HRESULT | — |
Event ID 2408 — MDM Declared Configuration: Flag set to trigger OMADM session.
Message
Event ID 2409 — MDM Declared Configuration: Failed to trigger OMADM session due to document changes, Result:(%1) %2.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 2410 — MDM Declared Configuration: CDN Download trigger DC WatchDog Task: Completed downloaded jobs: (%1), Result:(%2) %3.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HexInt2 | — |
HRESULT | — |
Event ID 2411 — MDM Declared Configuration: CDN Download trigger DC WatchDog Task: Completed downloaded jobs.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
Event ID 2412 — MDM Declared Configuration: Acquiring DC WatchDog Task Handler Lock Creation: Result:(%1) %2.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 2413 — MDM Declared Configuration: Acquiring DC WatchDog Task Handler Lock Creation.
Message
Event ID 2414 — MDM Declared Configuration: DC WatchDog Task Handler Lock.
Message
Event ID 2415 — MDM Declared Configuration: DC WatchDog Task Handler Unlock.
Message
Event ID 2416 — MDM Declared Configuration: Construct URI Storage Lock Creation: Result:(%1) %2.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 2417 — MDM Declared Configuration: Construct URI Storage Lock Creation.
Message
Event ID 2418 — MDM Declared Configuration: Construct URI Storage Lock.
Message
Event ID 2419 — MDM Declared Configuration: Construct URI Storage Unlock.
Message
Event ID 2420 — MDM Declared Configuration: CDN Download Lock Creation: Result:(%1) %2.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 2421 — MDM Declared Configuration: CDN Download Lock Creation.
Message
Event ID 2422 — MDM Declared Configuration: CDN Download Lock.
Message
Event ID 2423 — MDM Declared Configuration: CDN Download Unlock.
Message
Event ID 2424 — MDM Declared Configuration: CDN Download Lock Creation: Result:(%1) %2.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 2425 — MDM Declared Configuration: CDN Download Lock Creation.
Message
Event ID 2426 — MDM Declared Configuration: CDN Download Lock.
Message
Event ID 2427 — MDM Declared Configuration: CDN Download Unlock.
Message
Event ID 2428 — MDM Declared Configuration: Async Delete Document Lock Creation: Result:(%1) %2.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 2429 — MDM Declared Configuration: Async Delete Document Lock Creation.
Message
Event ID 2430 — MDM Declared Configuration: Async Delete Document Lock.
Message
Event ID 2431 — MDM Declared Configuration: Async Delete Document Unlock.
Message
Event ID 2432 — MDM Declared Configuration: Get Documents Summary Alert Lock Creation: Result:(%1) %2.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 2433 — MDM Declared Configuration: Get Documents Summary Alert Lock Creation.
Message
Event ID 2434 — MDM Declared Configuration: Get Documents Summary Alert Lock.
Message
Event ID 2435 — MDM Declared Configuration: Get Documents Summary Alert Unlock.
Message
Event ID 2436 — MDM Declared Configuration: Unenroll Execute Lock Creation: Result:(%1) %2.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 2437 — MDM Declared Configuration: Unenroll Execute Lock Creation.
Message
Event ID 2438 — MDM Declared Configuration: Unenroll Execute Lock.
Message
Event ID 2439 — MDM Declared Configuration: Unenroll Execute Unlock.
Message
Event ID 2440 — MDM Declared Configuration: About to process CDN Downloaded Doc: Enrollment:, Context:, Document Id.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 2441 — MDM Declared Configuration: Successfully processed CDN Downloaded Doc: Enrollment:, Context:, Document Id.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 2442 — MDM Declared Configuration: Failed to processed CDN Downloaded Doc: Enrollment:(%1), Context:(%2), Document Id:(%3), Result:(%4) %5.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
HexInt1 | — |
HexInt2 | — |
Event ID 2443 — MDM Declared Configuration: Results Merger: Host OS and container results CSP count is mismatch: Enrollment Id: (%1), Doc Id:(%2), Host CSP Count.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
HRESULT | — |
Event ID 2444 — MDM Declared Configuration: Results Merger: Host OS and container results URI count mismatch: Enrollment Id: (%1), Doc Id:(%2), CSP path:(%3), Host...
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
UInt1 | — |
UInt2 | — |
UInt3 | — |
HRESULT | — |
Event ID 2445 — MDM Declared Configuration: Results Merger: Host OS and container results CSP path mismatch: Enrollment Id: (%1), Doc Id:(%2), Host CSP path:(%3), ...
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
UInt1 | — |
HRESULT | — |
Event ID 2446 — MDM Declared Configuration: Results Merger: Host OS and container results URI path mismatch: Enrollment Id: (%1), Doc Id:(%2), CSP path:(%3), Host ...
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
UInt1 | — |
HRESULT | — |
Event ID 2447 — MDM Declared Configuration: Results Merger: Host OS and container results HTTP status mismatch: Enrollment Id: (%1), Doc Id:(%2), CSP path:(%3), Ho...
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
Message6 | — |
Message7 | — |
UInt1 | — |
HRESULT | — |
Event ID 2448 — MDM Declared Configuration: Results Merger: Host OS and container results data mismatch: Enrollment Id: (%1), Doc Id:(%2), CSP path:(%3), Host/Cont...
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
UInt1 | — |
HRESULT | — |
Event ID 2449 — MDM Declared Configuration: DeclaredConfigurationStore_ParseDeclaredConfigurationJson error at JSON argument:, HRESULT.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 2450 — MDM Declared Configuration: Begin DSC Native MI Provider Operation, Document Id: (%1), Version: (%2), Enrollment ID: (%3), Doc schema version: (%4)...
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
Message6 | — |
Message7 | — |
Event ID 2451 — MDM Declared Configuration: End DSC Native MI Provider Operation failed, Document Id: (%1), Version: (%2), Enrollment ID: (%3), Doc schema version:...
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
Message6 | — |
Message7 | — |
Message8 | — |
UInt1 | — |
HRESULT | — |
Event ID 2452 — MDM Declared Configuration: End DSC Native MI Provider Operation, Document Id: (%1), Version: (%2), Enrollment ID: (%3), Doc schema version: (%4), ...
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
Message6 | — |
Message7 | — |
Event ID 2454 — MDM Declared Configuration: Get document, Document Id:, Version:, Enrollment ID:, Current User:, schema:, Scope:, Enroll Type.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
HexInt1 | — |
HexInt2 | — |
Event ID 2455 — MDM Declared Configuration: Get document, Document Id: (%1), Version: (%2), Enrollment ID: (%3), Current User: (%4), schema: (%5), Scope: (%6), Enr...
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
HexInt4 | — |
Event ID 2456 — MDM Declared Configuration: Set document, Document Id:, Version:, Enrollment ID:, Current User:, schema:, Scope:, Enroll Type.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
HexInt1 | — |
HexInt2 | — |
Event ID 2457 — MDM Declared Configuration: Set document, Document Id: (%1), Version: (%2), Enrollment ID: (%3), Current User: (%4), schema: (%5), Scope: (%6), Enr...
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
HexInt4 | — |
Event ID 2500 — MDM Orchestrator: Service Init result:
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 2501 — MDM Orchestrator: Service Init status:
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
Event ID 2502 — MDM Orchestrator: Start Service Error:
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 2503 — MDM Orchestrator: End Service Error:
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 2504 — MDM Orchestrator: CDN Download handler failed:
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 2505 — MDM Orchestrator: Process a single DeclaredConfiguration document result: enrollment Id:, userId:, docId:, docVersion:, target:, hresult.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
HRESULT | — |
Event ID 2506 — MDM Declared Configuration: Create Orchestrator ScenrioId Lock Creation: Result:(%1) %2.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 2507 — MDM Declared Configuration: Create ScenarioId Lock.
Message
Event ID 2508 — MDM Declared Configuration: Create ScenarioId Unlock.
Message
Event ID 2509 — MDM Declared Configuration: ConfigDC failed to create configuration request: EnrollmentId: Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 2510 — MDM Declared Configuration: DeleteDC failed to create configuration request: Result.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 2511 — MDM Declared Configuration: ConfigDC failed to create configuration request: Result.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 2512 — MDM Declared Configuration: ConfigDC waiting for notification.
Message
Event ID 2513 — MDM Declared Configuration: ConfigDC notification sent with: Result.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 2514 — MDM Declared Configuration: Orchestrator MsftPolicies GetRequest failed: Result.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 2515 — MDM Declared Configuration: Orchestrator ConfigDC failed: Result.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 2516 — MDM Declared Configuration: Orchestrator ConfigDC Succeeded.
Message
Event ID 2517 — MDM Declared Configuration: Orchestrator DeleteDC Succeeded.
Message
Event ID 2518 — MDM Declared Configuration: Orchestrator DeleteDC failed: Result.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 2519 — MDM Declared Configuration: Orchestrator CreateNewRequest failed: EnrollmentId:, UserId:, DocId:, DocVersion:, Target:, StateMachineType:, Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
UInt1 | — |
HRESULT | — |
Event ID 2520 — MDM Declared Configuration: Orchestrator CreateNewRequest failed: EnrollmentId:, UserId:, DocId:, DocVersion:, Target:, StateMachineType:
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
UInt1 | — |
Event ID 2521 — MDM Declared Configuration: Orchestrator WaitForFinish timed out.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 2522 — MDM Declared Configuration: StartProcessing Eventname: (%14), RequestKey: (%8), requestType: (%1), requestPriority: (%2), requestNumber: (%3), acti...
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
UInt2 | — |
UInt3 | — |
UInt4 | — |
UInt5 | — |
UInt6 | — |
UInt7 | — |
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
Message6 | — |
Message7 | — |
Event ID 2523 — MDM Declared Configuration: Error in Processing Eventname: (%14), RequestKey: (%8), requestType: (%1), requestPriority: (%2), requestNumber: (%3), ...
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
UInt2 | — |
UInt3 | — |
UInt4 | — |
UInt5 | — |
UInt6 | — |
UInt7 | — |
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
Message6 | — |
Message7 | — |
HRESULT | — |
Event ID 2524 — MDM Declared Configuration: ScenarioId: Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 2525 — MDM Declared Configuration: Exception Details.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 2526 — MDM Declared Configuration: ActivityExecution: Activity Type, Orchestrator Type, activityKey, Result.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 2527 — MDM Declared Configuration: CDNDownload Delete record Id:, Result:
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 2528 — MDM Declared Configuration: Orchestrator CreateNewRequest failed: EnrollmentId:, UserId:, DocId: Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
HRESULT | — |
Event ID 2529 — MDM Declared Configuration: Invalid enrollment(or unenrolling) enrollmentId:, Result:
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 2530 — MDM Declared Configuration: EndProcessing Eventname: (%14), RequestKey: (%8), requestType: (%1), requestPriority: (%2), requestNumber: (%3), activi...
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
UInt2 | — |
UInt3 | — |
UInt4 | — |
UInt5 | — |
UInt6 | — |
UInt7 | — |
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
Message6 | — |
Message7 | — |
HRESULT | — |
Event ID 2531 — MDM Declared Configuration: Acquire Orchestrator GlobalMutex failed in function:, Result:
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 2532 — MDM Declared Configuration: Alert Status for enrollmentId:, Result:
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 2533 — MDM Declared Configuration: ActivityExecution: Activity Type, Orchestrator Type, activityKey, Result.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 2534 — MDM Declared Configuration: Error in Processing Eventname: (%14), RequestKey: (%8), requestType: (%1), requestPriority: (%2), requestNumber: (%3), ...
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
UInt2 | — |
UInt3 | — |
UInt4 | — |
UInt5 | — |
UInt6 | — |
UInt7 | — |
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
Message6 | — |
Message7 | — |
HRESULT | — |
Event ID 2535 — MDM Declared Configuration: Enter function:
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 2536 — MDM Declared Configuration: Exit function: with Result:
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 2537 — MDM Declared Configuration: Exit OrchestratorConfig: enrollmentId: userId: docId: docVersion: (4), target: stateMachineType:, isNewVersion:
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
HexInt1 | — |
Boolean1 | — |
Event ID 2538 — MDM Declared Configuration: Exit OrchestratorConfig: enrollmentId: userId: docId: docVersion: (4), target: stateMachineType:, isNewVersion:, Hresult:
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
HexInt1 | — |
Boolean1 | — |
HexInt2 | — |
Event ID 2539 — MDM Declared Configuration: Exit OrchestratorSetInstanceVariable: enrollmentId: docId: docVersion: (3), vraiableName:
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Event ID 2540 — MDM Declared Configuration: Exit OrchestratorSetInstanceVariable: enrollmentId: docId: docVersion: (3), vraiableName: Hresult:
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HRESULT | — |
Event ID 2541 — MDM Declared Configuration: Enter OrchestratorDelete with GUID:
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 2542 — MDM Declared Configuration: Exit OrchestratorDelete with GUID: Result:
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 2543 — MDM Declared Configuration: Exit OrchestratorProcessPreviouslyRanDocs with enrollmentId:
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 2544 — MDM Declared Configuration: Exit OrchestratorProcessPreviouslyRanDocs with enrollmentId: Result:
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 2545 — MDM Declared Configuration: Function operation failed with
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Example Event
system:
provider: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider
guid: 3DA494E4-0FE2-415C-B895-FB5265C5C83B
event_source_name: ''
event_id: 2545
version: 0
level: 3
task: 0
opcode: 0
keywords: 4611686018427387904
time_created: '2023-11-06T01:13:43.732943+00:00'
event_record_id: 139
correlation: {}
execution:
process_id: 4596
thread_id: 21720
channel: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational
computer: WinDev2310Eval
security:
user_id: S-1-5-18
event_data:
Message1: checkNewInstanceData
Message2: Read isNewInstanceData
HRESULT: '0x80070057'
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 2546 — MDM Declared Configuration: Function DocState is:
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 2547 — MDM Declared Configuration: Function operation succeeded
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 2548 — MDM Declared Configuration: Enter OrchestratorUpdateDocStatus enrollmentId userId uniqueId successStatus
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Boolean1 | — |
Event ID 2549 — MDM Declared Configuration: Exit OrchestratorUpdateDocStatus enrollmentId userId uniqueId successStatus result
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Boolean1 | — |
HRESULT | — |
Event ID 2550 — MDM Declared Configuration: Warning Function operation result:
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 2551 — MDM Declared Configuration: Function operation result:
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 2552 — DeclaredConfiguration CSP: RefreshInterval can not be smaller than
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
Event ID 2553 — MDM Declared Configuration: Enter OrchestratorDeletePerEnrollmentScenario enrollmentId OSDefinedScenario
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 2554 — MDM Declared Configuration: Exit OrchestratorDeletePerEnrollmentScenario enrollmentId OSDefinedScenario result
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 2555 — MDM Declared Configuration: Enqueue Request Failure - enrollmentId docId contextId isRefresh result
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Boolean1 | — |
HRESULT | — |
Event ID 2556 — MDM Declared Configuration: Enqueue Request Information - enrollmentId docId contextId isRefresh result
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Boolean1 | — |
HRESULT | — |
Event ID 2600 — MMP-C: Device permission to select target MMP-C environment is (%1).
Message
Fields
| Name | Description |
|---|---|
Boolean1 | — |
Event ID 2600 — MMP-C: Device permission to select target MMP-C environment is.
Message
Fields
| Name | Description |
|---|---|
Boolean1 | — |
Event ID 2601 — MMP-C: Query for MMP-C environment to target.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 2601 — MMP-C: Query for MMP-C environment to target.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 2602 — MMP-C: MMP-C environment to target.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 2602 — MMP-C: MMP-C environment to target.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 2603 — MMP-C: Device is allowed to skip MMP-C cert pinning checks.
Event ID 2603 — MMP-C: Device is allowed to skip MMP-C cert pinning checks.
Message
Event ID 2604 — MMP-C: Failed to get certificate chain of the Server SSL certificate.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 2604 — MMP-C: Failed to get certificate chain of the Server SSL certificate.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 2605 — MMP-C: Failed to verify certificate policy: (%1) of the Server SSL certificate.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 2605 — MMP-C: Failed to verify certificate policy: of the Server SSL certificate.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 2606 — MMP-C: Certificate chain too short for MMP-C server SSL cert.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
Event ID 2606 — MMP-C: Certificate chain too short for MMP-C server SSL cert.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
Event ID 2607 — MMP-C: Getting the hash of the cert in position: (%1) in the MMP-C SSL certificate chain failed.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 2607 — MMP-C: Getting the hash of the cert in position: in the MMP-C SSL certificate chain failed.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 2608 — MMP-C: Found a certificate whose SPKI matched one of the expected pinned certs.
Message
Event ID 2608 — MMP-C: Found a certificate whose SPKI matched one of the expected pinned certs.
Message
Event ID 2609 — MMP-C: MMP-C Server's SSL cert did not chain to any known pinned certificate.
Message
Event ID 2609 — MMP-C: MMP-C Server's SSL cert did not chain to any known pinned certificate.
Message
Event ID 2610 — MMP-C: Device locked down state to MMP-C: (%1).
Message
Fields
| Name | Description |
|---|---|
Boolean1 | — |
Event ID 2610 — MMP-C: Device locked down state to MMP-C.
Message
Fields
| Name | Description |
|---|---|
Boolean1 | — |
Event ID 2611 — MMP-C: Retrieving MMP-C URLs failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 2611 — MMP-C: Retrieving MMP-C URLs failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 2612 — MMP-C: Device locked down to MMP-C: Enrollment URL: (%1), ToU URL: (%2), Resource URL: (%3).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 2612 — MMP-C: Device locked down to MMP-C: Enrollment URL:, ToU URL:, Resource URL.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 2613 — MMP-C: Not all URLs returned by MMP-C discovery.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 2613 — MMP-C: Not all URLs returned by MMP-C discovery.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 2614 — MMP-C: Retrieving MMP-C URLs failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 2614 — MMP-C: Retrieving MMP-C URLs failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 2700 — Device rename has been blocked through MDM because machine is domain joined.
Message
Event ID 2750 — DeviceStatus CSP: WscGetSecurityProviderHealth(%1) returned status %2 and HRESULT %3.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HRESULT | — |
Event ID 2751 — DeviceStatus CSP: %1 returned HRESULT %2.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 2752 — DeviceStatus CSP: GetBitlockerStatus indicates drive %1 is not encrypted, flags:%2.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 2800 — The following URI has triggered a reboot.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 2900 — BitLocker CSP: GetDeviceEncryptionComplianceStatus indicates %1 is not compliant with returned status %2.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 2901 — BitLocker CSP: GetRDVStatus returned status %1 (BDE Disabled=0x00000001, Not Protected=0x00000002, Encryption Type Mismatch=0x00000004).
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
Event ID 2902 — BitLocker CSP: Encryption method of OS Drive is different than set by policy.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HexInt2 | — |
Event ID 2903 — BitLocker CSP: Wrong encryption type for OS Drives used.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
Event ID 2904 — BitLocker CSP: Wrong encryption type for OS Drives used.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
Event ID 2905 — BitLocker CSP: TPM not used for protection of OS Drives, but is required by policy.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
Event ID 2906 — BitLocker CSP: TPM-only protection not used for OS Drives, but is required by policy.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
Event ID 2907 — BitLocker CSP: TPM+PIN protection not used for OS Drives, but is required by policy.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
Event ID 2908 — BitLocker CSP: TPM+Startup-Key protection not used for OS Drives, but is required by policy.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
Event ID 2909 — BitLocker CSP: TPM+PIN+Startup-Key protection not used for OS Drives, but is required by policy.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
Event ID 2910 — BitLocker CSP: Fixed Drive not protected.
Message
Event ID 2911 — BitLocker CSP: Encryption method of Fixed Drive is different than set by policy.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HexInt2 | — |
Event ID 2912 — BitLocker CSP: Wrong encryption type for Fixed Drives used.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
Event ID 2913 — BitLocker CSP: Wrong encryption type for Fixed Drives used.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
Event ID 2914 — BitLocker CSP: OS Drive not protected.
Message
Event ID 3000 — Current time (%1) is earlier than expected renew attempt time (%2), skip renew.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 3000 — Current time is earlier than expected renew attempt time, skip renew.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 3001 — Current time (%1) is later than expected renew end attempt time (%2), but continue renew effort.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 3001 — Current time is later than expected renew end attempt time, but continue renew effort.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 3002 — Failed to read regkey (%1) with HRESULT %2).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 3002 — Failed to read regkey (%1) with HRESULT %2).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 3003 — Current renew schedule is incorrect, next run time (%1) is not between (%2) and (%3), updating renew schedule.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 3003 — Current renew schedule is incorrect, next run time is not between and, updating renew schedule
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 3004 — [MDM Schedule Enrollment Cert Renew Session Start] EnrollmentId: %1, Renew period: %3; Renew retry interval: %4; Robo mode: %5; Cert Expiration: %2.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
UInt3 | — |
UInt4 | — |
UInt5 | — |
Event ID 3004 — [MDM Schedule Enrollment Cert Renew Session Start] EnrollmentId: %1, Renew period: %3; Renew retry interval: %4; Robo mode: %5; Cert Expiration: %2.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
UInt3 | — |
UInt4 | — |
UInt5 | — |
Event ID 3005 — [MDM Schedule Enrollment Cert Renew Session End] Error: HRESULT: %1.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 3005 — [MDM Schedule Enrollment Cert Renew Session End] Error: HRESULT.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 3006 — Current time (%1) is earlier than last renew time plus wait period (%2), skip renew.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 3006 — Current time is earlier than last renew time plus wait period, skip renew.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 3007 — Begin creating enrollment key in TPM function.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 3008 — End creating enrollment key in TPM function with result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 3009 — Function, cryptoProvider:, failed when binding keys, HRESULT.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 3010 — Skip export private keys when using TPM in function
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 3011 — Creating key with crypto provider: (%1) HRESULT: (%2), failFunction: (%3), CryptoProvider index (%4) of total (%5).
Message
Fields
| Name | Description |
|---|---|
ProviderName | — |
HRESULT2 | — |
FunctionName | — |
ProviderIndex | — |
TotalProviders | — |
Event ID 3011 — Creating key with crypto provider: HRESULT:, failFunction:, CryptoProvider index of total.
Message
Fields
| Name | Description |
|---|---|
ProviderName | — |
HRESULT2 | — |
FunctionName | — |
ProviderIndex | — |
TotalProviders | — |
Event ID 3012 — TPM State: Version:(%1) ReadyForStorage:(%2) NotReadyReason:(%3), ReadyForAttestation:(%4), NotReadyReason:(%5), isUnsatifactory:(%6), hasVulnerabi...
Message
Fields
| Name | Description |
|---|---|
TPMVersion | — |
ReadyForStorage | — |
NotReadyReason | — |
ReadyForAttestation | — |
NotREadyReason | — |
IsUnsatifactory | — |
HasVulnerability | — |
IsLocked | — |
IsSupportedAlg | — |
AlgorithmOid | — |
Event ID 3012 — TPM State: Version:(%1) ReadyForStorage:(%2) NotReadyReason:(%3), ReadyForAttestation:(%4), NotReadyReason:(%5), isUnsatifactory:(%6), hasVulnerabi...
Message
Fields
| Name | Description |
|---|---|
TPMVersion | — |
ReadyForStorage | — |
NotReadyReason | — |
ReadyForAttestation | — |
NotREadyReason | — |
IsUnsatifactory | — |
HasVulnerability | — |
IsLocked | — |
IsSupportedAlg | — |
AlgorithmOid | — |
Event ID 3013 — Function Name: (%1) HRESULT:(%2).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 3013 — Function Name: HRESULT.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 3014 — CanEnroll Error: GetNumberOfEnrollmentsOfType failed with reason: (%1), EnrollType: (%2), HRESULT: (%3).
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HRESULT | — |
Event ID 3014 — CanEnroll Error: GetNumberOfEnrollmentsOfType failed with reason:, EnrollType:, HRESULT.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
HRESULT | — |
Event ID 3015 — CanEnroll Error: DiscoveryServiceFullUrl: (%1), AccountID: (%2), AadResourceUrl: (%3), OpaqueId: (%4), TenantId: (%5), CorrelationID(%6), Failure R...
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
Message6 | — |
Message7 | — |
UInt1 | — |
UInt2 | — |
HRESULT | — |
Event ID 3200 —
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
Message6 | — |
UInt1 | — |
HRESULT | — |
Event ID 3200 — OsConfiguration API success: Function (%1) EnrollmentId (%2) DocumentId (%3) ScenarioName (%4) ScenarioVersion (%5) ScenarioSchema (%6) WaitTime.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
Message6 | — |
UInt1 | — |
HRESULT | — |
Event ID 3201 —
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
Message6 | — |
UInt1 | — |
HRESULT | — |
Event ID 3201 — OsConfiguration API failure: Function (%1) EnrollmentId (%2) DocumentId (%3) ScenarioName (%4) ScenarioVersion (%5) ScenarioSchema (%6) WaitTime.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
Message6 | — |
UInt1 | — |
HRESULT | — |
Event ID 4000 — DcSvc: Successfully initialized service.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Example Event
system:
provider: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider
guid: 3DA494E4-0FE2-415C-B895-FB5265C5C83B
event_source_name: ''
event_id: 4000
version: 0
level: 4
task: 0
opcode: 0
keywords: 4611686018427387904
time_created: '2023-11-06T06:25:47.748360+00:00'
event_record_id: 52
correlation: {}
execution:
process_id: 5040
thread_id: 5056
channel: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational
computer: WinDev2310Eval
security:
user_id: S-1-5-18
event_data:
HRESULT: '0x0'
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 4001 — DcSvc: Failled to initialize service.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4002 — DcSvc: Successfully registered service's RPC interface.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4003 — DcSvc: Failed to register service's RPC interface.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4005 — DcSvc: Successfully unregistered service's RPC interface.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4006 — DcSvc: Failed to unregister service's RPC interface.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4007 — DcSvc: successfully uninitialize service.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4008 — DcSvc: Failed to uninitialized service.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4009 — DcSvc: Service status updated.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HexInt2 | — |
HexInt3 | — |
Example Event
system:
provider: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider
guid: 3DA494E4-0FE2-415C-B895-FB5265C5C83B
event_source_name: ''
event_id: 4009
version: 0
level: 4
task: 0
opcode: 0
keywords: 4611686018427387904
time_created: '2023-11-06T06:25:47.770822+00:00'
event_record_id: 53
correlation: {}
execution:
process_id: 5040
thread_id: 5056
channel: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational
computer: WinDev2310Eval
security:
user_id: S-1-5-18
event_data:
HexInt1: '0x4'
HexInt2: '0x0'
HexInt3: '0x0'
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 4010 — DcSvc: Stop Service handler registered.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 4011 — DcSvc: Service handler invoked.
Message
Fields
| Name | Description |
|---|---|
HexInt1 | — |
HRESULT | — |
Event ID 4012 — DcSvc: Failed to activate RPC Server Interface group because a duplicate end point exists.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4013 — DcSvc: Failed to deactivate RPC Server Interface group.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4014 — DcSvc: Successfully deactivated RPC Server Interface group.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4015 — DcSvc: Failed to close RPC Server Interface group.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4016 — DcSvc: Successfully closed RPC Server Interface group.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4017 — DcSvc: Failed to create RPC Server Interface group.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4018 — DcSvc: Successfully created RPC Server Interface group.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4019 — DcSvc: Service is being initialized.
Message
Example Event
system:
provider: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider
guid: 3DA494E4-0FE2-415C-B895-FB5265C5C83B
event_source_name: ''
event_id: 4019
version: 0
level: 4
task: 0
opcode: 0
keywords: 4611686018427387904
time_created: '2023-11-06T06:25:47.745461+00:00'
event_record_id: 50
correlation: {}
execution:
process_id: 5040
thread_id: 5056
channel: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational
computer: WinDev2310Eval
security:
user_id: S-1-5-18
event_data: {}
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 4020 — DcSvc: DeclaredConfigurationStore_RecreateSchedule failed.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4021 — DcSvc:: Failed to create ConfigManager lock service binding.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4022 — Failed to enroll MMP-C for dual enrollment mode.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4022 — Failed to enroll MMP-C for dual enrollment mode.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4023 — Enroll MMP-C for dual enrollment mode succeeded.
Message
Event ID 4023 — Enroll MMP-C for dual enrollment mode succeeded.
Message
Event ID 4024 — Failed to unenroll MMP-C for dual enrollment mode.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4024 — Failed to unenroll MMP-C for dual enrollment mode.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4025 — Unenroll MMP-C for dual enrollment mode succeeded.
Message
Event ID 4025 — Unenroll MMP-C for dual enrollment mode succeeded.
Message
Event ID 4026 — Failed to set mmpc flag.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4026 — Failed to set mmpc flag.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4027 — The following resource has current state.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 4028 — MMP-C dual enrollment is bypassed with result: (%1).
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4028 — MMP-C dual enrollment is bypassed with result.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4029 — Resource transfer with enrollmentId, context, docId, docVersion, resourceUri with result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
Message6 | — |
HRESULT | — |
Event ID 4030 — Resource transfer from MMPC to MDM with enrollmentId, context, docId, docVersion failed with result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HRESULT | — |
Event ID 4031 — MDM Declared Configuration: Orchestrator detects conflict with enrollmentId (%1), context(%2), docId(%3), docVersion(%4), cspName(%5), uriPath(%6) ...
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
Message6 | — |
HRESULT | — |
UInt8 | — |
UInt9 | — |
UInt10 | — |
UInt11 | — |
Event ID 4032 — MDM Declared Configuration: Update drift control with enrollmentId, docId, driftControl with result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
UInt1 | — |
HexInt1 | — |
Event ID 4033 — MDM Declared Configuration: Update drift control refresh period with enrollmentId, docId, refreshPeriod with result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
UInt1 | — |
HexInt1 | — |
Event ID 4050 — Drift Control - No Drift Detected: enrollmentId, context, docId, docVersion, Uri.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
Event ID 4051 — Drift Control - Drift Detected: enrollmentId, context, docId, docVersion, Uri, Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
HRESULT | — |
Event ID 4052 — Drift Control - Skip Refresh: enrollmentId, context, docId, docVersion, Uri.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
Event ID 4053 — Drift Control - Drift Unrecoverable: enrollmentId, context, docId, docVersion, Uri, Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
HRESULT | — |
Event ID 4100 — UserRights account delete failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
UInt1 | — |
HRESULT | — |
Event ID 4101 — UserRights account add failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
UInt1 | — |
HRESULT | — |
Event ID 4102 — UserRights account add failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
UInt1 | — |
HRESULT | — |
Event ID 4103 — UserRights SID is invalid.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
UInt1 | — |
HRESULT | — |
Event ID 4104 — Bulk Instance Data Parsed Successfully.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HexInt1 | — |
HexInt2 | — |
Event ID 4105 — MDM Declared Configuration: DeclaredConfigurationStore_ParseBulkInstanceData error at:, HRESULT.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
HRESULT | — |
Event ID 4106 — Dual enrollment task creation is successful.
Message
Event ID 4107 — MDM Declared Configuration resource cleanup task succeeded.
Message
Event ID 4108 — MDM Declared Configuration resource cleanup task failed.
Message
Event ID 4109 — Dual enrollment: missing parent enrollment Id (%1).
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4109 — Dual enrollment: missing parent enrollment Id.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4110 — Dual enrollment: discovery endpoint is not set (%1).
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4110 — Dual enrollment: discovery endpoint is not set.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4111 — Dual enrollment: discovery endpoint string is too big (%1).
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4111 — Dual enrollment: discovery endpoint string is too big.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4112 — Dual enrollment: existing dual enrollment found (%1), skipping enroll task creation.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 4112 — Dual enrollment: existing dual enrollment found, skipping enroll task creation.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 4113 — Dual enrollment: EntDMId of the main enrollment is not found (%1).
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4113 — Dual enrollment: EntDMId of the main enrollment is not found.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4114 — Dual enrollment: could not find main enrollment GUID (%1).
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4114 — Dual enrollment: could not find main enrollment GUID.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4115 — Dual enrollment: found multiple MDM enrollments.
Message
Event ID 4115 — Dual enrollment: found multiple MDM enrollments.
Message
Event ID 4116 — UserRights account SID not mapped to account.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 4117 — Resource transfer from MDM failed with enrollmentId, context, docId, Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
HRESULT | — |
Event ID 4200 — ConfigRefresh started.
Message
Event ID 4201 — ConfigRefresh failed with HRESULT %1.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4202 — ConfigRefresh completed successfully.
Message
Event ID 4203 — Failed to create ConfigRefresh task.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4204 — Failed to delete ConfigRefresh task.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4205 — Failed to set ConfigRefresh Enabled value to %1.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
HexInt1 | — |
Event ID 4206 — Failed to delete ConfigRefresh Enabled node.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4207 — Failed to disable ConfigRefresh task.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4208 — Failed to enable ConfigRefresh task.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4209 — Failed to set ConfigRefresh Cadence value to %1.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
HexInt1 | — |
Event ID 4210 — Failed to delete ConfigRefresh Cadence node.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4211 — Failed to update ConfigRefresh task with Cadence value %1.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
HexInt1 | — |
Event ID 4212 — Failed to set ConfigRefresh Pause Period value to %1.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
HexInt1 | — |
Event ID 4213 — Failed to delete ConfigRefresh Pause Period node.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4214 — Failed to update ConfigRefresh task with Pause Period value %1.
Message
Fields
| Name | Description |
|---|---|
UInt1 | — |
HexInt1 | — |
Event ID 4215 — %1 failed to acquire ConfigRefresh mutex.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 4216 — Failed to release ConfigRefresh mutex.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4217 — Failed to set ConfigRefresh thread to lowest priority.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4218 — Wait for ConfigRefresh semaphore failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 4219 — Failed to release ConfigRefresh semaphore.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 4220 — ConfigRefresh skipped because OmaDmClient sync is in progress
Message
Event ID 4221 — DeclaredConfigurationRefresh skipped because OmaDmClient sync is in progress
Message
Event ID 4222 — ConfigLock skipped because OmaDmClient sync is in progress
Message
Event ID 4223 — Soap Response Message with error:
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 4224 — ConfigRefresh just for per user policies started.
Message
Event ID 4225 — ConfigRefresh just for per user policies failed with HRESULT %1.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4226 — ConfigRefresh just for per user policies cdcompleted successfully.
Message
Event ID 4227 — ConfigRefresh for just per user policies skipped because OmaDmClient sync is in progress
Message
Event ID 4300 — Failed to load %1.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 4301 — Failed to GetProcAddress of %1.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HexInt1 | — |
Event ID 4302 — ADMX-backed policy %1/%2 CSE %3 call failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
HexInt1 | — |
Event ID 4400 — Attestation attempt started with Correlation Vector:, RPID:, Attestation URI.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Event ID 4401 — Attestation attempt succeeded with Correlation Vector:, Server Correlation Vector, RPID:, Attestation URI, and HRESULT.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
HRESULT | — |
Event ID 4402 — Attestation attempt failed with Correlation Vector:, Server Correlation Vector, RPID:, Attestation URI, Error Message and HRESULT.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Message3 | — |
Message4 | — |
Message5 | — |
HRESULT | — |
Event ID 4403 — Attestation PDC Activate Failed with.
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4404 — Attestation PDC Deactivate failed with
Message
Fields
| Name | Description |
|---|---|
HRESULT | — |
Event ID 4405 — Attestation PDC Function failed with
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 4500 —
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
UInt3 | — |
Message4 | — |
Event ID 4500 — MDM Registry Provider: Set value, URI:, Data Type:, Int:, Enrollment ID.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
UInt3 | — |
Message4 | — |
Event ID 4501 —
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
Message3 | — |
Message4 | — |
Event ID 4501 — MDM Registry Provider: Set value, URI:, Data Type:, String:, Enrollment ID.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
Message3 | — |
Message4 | — |
Event ID 4502 —
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
UInt3 | — |
Message4 | — |
Event ID 4502 — MDM Registry Provider: Set value, URI:, Data Type:, Binary Size:, Enrollment ID.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
UInt3 | — |
Message4 | — |
Event ID 4503 —
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
Message3 | — |
Event ID 4503 — MDM Registry Provider: Delete value, URI:, Data Type:, Enrollment ID.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
Message3 | — |
Event ID 4504 —
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
UInt3 | — |
Message4 | — |
HexInt5 | — |
Event ID 4504 — MDM Registry Provider: Set value with failure, URI:, Data Type:, Int:, Enrollment ID:, Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
UInt3 | — |
Message4 | — |
HexInt5 | — |
Event ID 4505 —
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
Message3 | — |
Message4 | — |
HexInt5 | — |
Event ID 4505 — MDM Registry Provider: Set value with failure, URI:, Data Type:, String:, Enrollment ID:, Result:
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
Message3 | — |
Message4 | — |
HexInt5 | — |
Event ID 4506 —
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
UInt3 | — |
Message4 | — |
HexInt5 | — |
Event ID 4506 — MDM Registry Provider: Set value with failure, URI:, Data Type:, Binary Size:, Enrollment ID:, Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
UInt3 | — |
Message4 | — |
HexInt5 | — |
Event ID 4507 —
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
Message3 | — |
HexInt4 | — |
Event ID 4507 — MDM Registry Provider: Set value with failure, URI:, Data Type:, Enrollment ID:, Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
Message3 | — |
HexInt4 | — |
Event ID 4508 —
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
Message3 | — |
HexInt4 | — |
Event ID 4508 — MDM Registry Provider: Delete value with failure, URI:, Data Type:, Enrollment ID:, Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
Message3 | — |
HexInt4 | — |
Event ID 4509 —
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
UInt3 | — |
Message4 | — |
Event ID 4509 — MDM Registry Provider: Set value, URI:, Data Type:, Int:, Enrollment ID.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
UInt3 | — |
Message4 | — |
Event ID 4510 —
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
UInt3 | — |
Message4 | — |
HexInt5 | — |
Event ID 4510 — MDM Registry Provider: Set value with failure, URI:, Data Type:, Int:, Enrollment ID:, Result.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
UInt2 | — |
UInt3 | — |
Message4 | — |
HexInt5 | — |
Event ID 4600 —
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 4600 — Parsing notification payload succeeded.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 4601 —
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 4601 — Parsing notification payload failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 4602 —
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 4602 — Getting push alert info for push initiated session succeeded.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Event ID 4603 —
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 4603 — Getting push alert info for push initiated session failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Event ID 4604 —
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 4604 — Parsing notification payload succeeded.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
Message2 | — |
Event ID 4605 —
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Message2 | — |
Event ID 4605 — Parsing notification payload failed.
Message
Fields
| Name | Description |
|---|---|
Message1 | — |
HRESULT | — |
Message2 | — |