Microsoft-Windows-DeviceManagement-Pushrouter
107 events across 1 channel
Event ID 100 — MDM PushRouter Service: Failed to create ConfigManager lock service binding.
Event ID 101 — MDM PushRouter Service: Successfully created RPC Server Interface group.
Description
MDM PushRouter Service: Successfully created RPC Server Interface group. Result: (HRESULT).
Message #
Fields #
| Name | Description |
|---|---|
HRESULT HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 101,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.736188+00:00",
"event_record_id": 7327,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 2792
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HRESULT": "0x0"
},
"message": ""
}
Event ID 102 — MDM PushRouter Service: Failed to create RPC Server Interface group.
Event ID 103 — MDM PushRouter Service: Failed to activate RPC Server Interface group because a duplicate end point exists.
Event ID 104 — MDM PushRouter Service: Successfully activated RPC Server Interface group.
Description
MDM PushRouter Service: Successfully activated RPC Server Interface group. Result: (HRESULT).
Message #
Fields #
| Name | Description |
|---|---|
HRESULT HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 104,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.738835+00:00",
"event_record_id": 7329,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 2792
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HRESULT": "0x0"
},
"message": ""
}
Event ID 105 — MDM PushRouter Service: Failed to activate RPC Server Interface group.
Event ID 106 — MDM PushRouter Service: Successfully deactivated RPC Server Interface group.
Description
MDM PushRouter Service: Successfully deactivated RPC Server Interface group. Result: (HRESULT).
Message #
Fields #
| Name | Description |
|---|---|
HRESULT HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 106,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:55:01.378775+00:00",
"event_record_id": 7376,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 3304
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HRESULT": "0x0"
},
"message": ""
}
Event ID 107 — MDM PushRouter Service: Failed to deactivate RPC Server Interface group.
Event ID 108 — MDM PushRouter Service: Successfully closed RPC Server Interface group.
Description
MDM PushRouter Service: Successfully closed RPC Server Interface group. Result: (HRESULT).
Message #
Fields #
| Name | Description |
|---|---|
HRESULT HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 108,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:55:01.378898+00:00",
"event_record_id": 7377,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 3304
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HRESULT": "0x0"
},
"message": ""
}
Event ID 109 — MDM PushRouter Service: Failed to close RPC Server Interface group.
Event ID 110 — MDM PushRouter Service: PushRouter RPC interface Idle status changed.
Description
MDM PushRouter Service: PushRouter RPC interface Idle status changed. Is group idle: (HexInt1).
Message #
Fields #
| Name | Description |
|---|---|
HexInt1 HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 110,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:53:16.062812+00:00",
"event_record_id": 7371,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 3304
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HexInt1": "0x1"
},
"message": ""
}
Event ID 111 — MDM PushRouter Service: Number of PushRouter clients remaining: (HRESULT).
Description
MDM PushRouter Service: Number of PushRouter clients remaining: (HRESULT). Operation: (Message1).
Message #
Fields #
| Name | Description |
|---|---|
Message1 UnicodeString | — |
HRESULT HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 111,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:55:01.376378+00:00",
"event_record_id": 7373,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 9048
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Message1": "Checking if all clients are handled",
"HRESULT": "0x0"
},
"message": ""
}
Event ID 112 — MDM PushRouter Service: All clients handled.
Description
MDM PushRouter Service: All clients handled. Number of PushRouter clients remaining: (HexInt1).
Message #
Fields #
| Name | Description |
|---|---|
HexInt1 HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 112,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:53:16.062830+00:00",
"event_record_id": 7372,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 3304
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HexInt1": "0x0"
},
"message": ""
}
Event ID 113 — MDM PushRouter Service: Number of active client count rolled over.
Event ID 114 — MDM PushRouter Service: PushRouter RPC run down occured.
Description
MDM PushRouter Service: PushRouter RPC run down occured.
Message #
Event ID 115 — MDM PushRouter Service: PushRouter::Open called by a client needing a handle to PushRouter.
Description
MDM PushRouter Service: PushRouter::Open called by a client needing a handle to PushRouter.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 115,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.897771+00:00",
"event_record_id": 7352,
"correlation": {
"ActivityID": "AEBE4C57-66E3-4324-8BB1-F438C2253964"
},
"execution": {
"process_id": 3932,
"thread_id": 3304
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {},
"message": ""
}
Event ID 116 — MDM PushRouter Service: PushRouter::Open called by a client needing to interact with PushRouter succeeded.
Description
MDM PushRouter Service: PushRouter::Open called by a client needing to interact with PushRouter succeeded. Client id: (Message1), Content Type: (Message2):, App Id: (Message3), Result: (HRESULT).
Message #
Fields #
| Name | Description |
|---|---|
Message1 UnicodeString | — |
Message2 UnicodeString | — |
Message3 UnicodeString | — |
HRESULT HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 116,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.899083+00:00",
"event_record_id": 7354,
"correlation": {
"ActivityID": "AEBE4C57-66E3-4324-8BB1-F438C2253964"
},
"execution": {
"process_id": 3932,
"thread_id": 3304
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Message1": "PC5",
"Message2": "application/vnd.syncml.notification",
"Message3": "x-wap-application:syncml.dm",
"HRESULT": "0x0"
},
"message": ""
}
Event ID 117 — MDM PushRouter Service: PushRouter::Open called by a client needing to interact with PushRouter failed.
Event ID 118 — MDM PushRouter Service: PushRouter was submitted a message from the same service PushRouter is running in.
Description
MDM PushRouter Service: PushRouter was submitted a message from the same service PushRouter is running in. Message origin: (HexInt1).
Message #
Fields #
| Name | Description |
|---|---|
HexInt1 HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 118,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.740105+00:00",
"event_record_id": 7333,
"correlation": {
"ActivityID": "E4DFE51C-35B1-4568-917B-5EE744140CBF"
},
"execution": {
"process_id": 3932,
"thread_id": 3304
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HexInt1": "0x3"
},
"message": ""
}
Event ID 119 — MDM PushRouter Service: PushRouter was submitted a message from the same service PushRouter is running in.
Description
MDM PushRouter Service: PushRouter was submitted a message from the same service PushRouter is running in. Message submission succeeded. Sender Address: (), Content Type: (), App Id: (), Result: ().
Message #
Fields #
| Name | Description |
|---|---|
Message1 UnicodeString | — |
Message2 UnicodeString | — |
Message3 UnicodeString | — |
HRESULT HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 119,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.765530+00:00",
"event_record_id": 7339,
"correlation": {
"ActivityID": "E4DFE51C-35B1-4568-917B-5EE744140CBF"
},
"execution": {
"process_id": 3932,
"thread_id": 3304
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Message1": "NULL",
"Message2": "application/vnd.syncml.notification",
"Message3": "NULL",
"HRESULT": "0x0"
},
"message": ""
}
Event ID 120 — MDM PushRouter Service: PushRouter was submitted a message from the same service PushRouter is running in.
Description
MDM PushRouter Service: PushRouter was submitted a message from the same service PushRouter is running in. Message submission failed. Sender Address: ():, Content Type: (),App Id: (), Result: ().
Message #
Fields #
| Name | Description |
|---|---|
Message1 UnicodeString | — |
Message2 UnicodeString | — |
Message3 UnicodeString | — |
HRESULT HexInt32 | — |
Event ID 121 — MDM PushRouter Service: PushRouter was submitted a message by a RPC client.
Description
MDM PushRouter Service: PushRouter was submitted a message by a RPC client. Message submission succeeded. Message origin: (HexInt1), Result: (HRESULT).
Message #
Fields #
| Name | Description |
|---|---|
HexInt1 HexInt32 | — |
HRESULT HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 121,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.765562+00:00",
"event_record_id": 7340,
"correlation": {
"ActivityID": "E4DFE51C-35B1-4568-917B-5EE744140CBF"
},
"execution": {
"process_id": 3932,
"thread_id": 3304
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HexInt1": "0x3",
"HRESULT": "0x0"
},
"message": ""
}
Event ID 122 — MDM PushRouter Service: PushRouter was submitted a message by a RPC client.
Event ID 123 — MDM PushRouter Service: PushRouter was created successfully.
Description
MDM PushRouter Service: PushRouter was created successfully. Result: (HRESULT).
Message #
Fields #
| Name | Description |
|---|---|
HRESULT HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 123,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.897951+00:00",
"event_record_id": 7353,
"correlation": {
"ActivityID": "AEBE4C57-66E3-4324-8BB1-F438C2253964"
},
"execution": {
"process_id": 3932,
"thread_id": 3304
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HRESULT": "0x0"
},
"message": ""
}
Event ID 124 — MDM PushRouter Service: PushRouter could not be created successfully.
Event ID 125 — MDM PushRouter Service: Opening Service Control Manager to change PushRouter startup type failed.
Event ID 126 — MDM PushRouter Service: Opening service handle to change PushRouter startup type failed.
Event ID 127 — MDM PushRouter Service: Changing PushRouter start up type to auto start failed.
Event ID 128 — MDM PushRouter Service: Changing PushRouter start up type to delayed auto start failed.
Event ID 129 — MDM PushRouter Service: PushRouter close called by a client interacting with it succeeded.
Description
MDM PushRouter Service: PushRouter close called by a client interacting with it succeeded. Client id: (Message1), Result: (HRESULT).
Message #
Fields #
| Name | Description |
|---|---|
Message1 UnicodeString | — |
HRESULT HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 129,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:16.047385+00:00",
"event_record_id": 7364,
"correlation": {
"ActivityID": "3C7B2557-A3AD-4E72-AF98-0B95D4A5B22B"
},
"execution": {
"process_id": 3932,
"thread_id": 3304
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Message1": "PC5",
"HRESULT": "0x0"
},
"message": ""
}
Event ID 130 — MDM PushRouter Service: PushRouter close called by a client interacting with it failed.
Event ID 131 — MDM PushRouter Service: A client initiated a get message operation from PushRouter.
Description
MDM PushRouter Service: A client initiated a get message operation from PushRouter.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 131,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:06.036773+00:00",
"event_record_id": 7363,
"correlation": {
"ActivityID": "7FBD6708-DDA2-4966-92A3-E43FEAE64147"
},
"execution": {
"process_id": 3932,
"thread_id": 3304
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {},
"message": ""
}
Event ID 132 — MDM PushRouter Service: A client was able to successfully get a message from PushRouter.
Message #
Fields #
| Name | Description |
|---|---|
Message1 UnicodeString | — |
Message2 UnicodeString | — |
Message3 UnicodeString | — |
Message4 UnicodeString | — |
Message5 UnicodeString | — |
HexInt1 HexInt32 | — |
HexInt3 HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 132,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.909201+00:00",
"event_record_id": 7356,
"correlation": {
"ActivityID": "36236335-6C3A-4D79-A11A-C8A243448C83"
},
"execution": {
"process_id": 3932,
"thread_id": 3304
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Message1": "application/vnd.syncml.notification",
"Message2": "NULL",
"Message3": "",
"Message4": "PC5",
"Message5": "OmaDmClient_Enterprise",
"HexInt1": "0x3",
"HexInt3": "0x0"
},
"message": ""
}
Event ID 133 — MDM PushRouter Service: A client failed to get a message from PushRouter.
Description
MDM PushRouter Service: A client failed to get a message from PushRouter. Content Type: (Message1), App Id: (Message2), Source Address: (Message3), Client ID: (Message4), Message origin: (HexInt1), Result: (HexInt3).
Message #
Fields #
| Name | Description |
|---|---|
Message1 UnicodeString | — |
Message2 UnicodeString | — |
Message3 UnicodeString | — |
Message4 UnicodeString | — |
HexInt1 HexInt32 | — |
HexInt3 HexInt32 | — |
Event ID 134 — MDM PushRouter Service: PushRouter was instantiated.
Description
MDM PushRouter Service: PushRouter was instantiated.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 134,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.755805+00:00",
"event_record_id": 7337,
"correlation": {
"ActivityID": "E4DFE51C-35B1-4568-917B-5EE744140CBF"
},
"execution": {
"process_id": 3932,
"thread_id": 3304
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {},
"message": ""
}
Event ID 135 — MDM Message Persistence: Persisted message found.
Description
MDM Message Persistence: Persisted message found. Location: (Message1).
Message #
Fields #
| Name | Description |
|---|---|
Message1 UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 135,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.740876+00:00",
"event_record_id": 7334,
"correlation": {
"ActivityID": "E4DFE51C-35B1-4568-917B-5EE744140CBF"
},
"execution": {
"process_id": 3932,
"thread_id": 3304
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Message1": "C:\\Windows\\system32\\config\\systemprofile\\AppData\\Local\\PushRouter\\1.queue"
},
"message": ""
}
Event ID 136 — MDM Message Persistence: Failed to load persisted message file.
Event ID 137 — MDM Message Persistence: Queue Id found for persisted message.
Event ID 138 — MDM Message Persistence: No client found for queue Id for persisted message.
Event ID 139 — MDM Message Persistence: Client found for queue Id for persisted message.
Event ID 140 — MDM Message Persistence: Client failed to launch for queue Id for persisted message.
Event ID 141 — MDM Message Persistence: No persisted message found.
Description
MDM Message Persistence: No persisted message found.Location: (Message1).
Message #
Fields #
| Name | Description |
|---|---|
Message1 UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 141,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.741841+00:00",
"event_record_id": 7335,
"correlation": {
"ActivityID": "E4DFE51C-35B1-4568-917B-5EE744140CBF"
},
"execution": {
"process_id": 3932,
"thread_id": 3304
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Message1": "C:\\Windows\\system32\\config\\systemprofile\\AppData\\Local\\PushRouter\\1.queue"
},
"message": ""
}
Event ID 142 — MDM Message Persistence: Failed to delete messages file.
Event ID 143 — MDM Message Persistence: Failed to process persisted messages.
Event ID 144 — MDM Message Persistence: Successfully processed persisted messages.
Description
MDM Message Persistence: Successfully processed persisted messages. Result: (HRESULT).
Message #
Fields #
| Name | Description |
|---|---|
HRESULT HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 144,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.755596+00:00",
"event_record_id": 7336,
"correlation": {
"ActivityID": "E4DFE51C-35B1-4568-917B-5EE744140CBF"
},
"execution": {
"process_id": 3932,
"thread_id": 3304
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HRESULT": "0x0"
},
"message": ""
}
Event ID 145 — MDM PushRouter Service: PushRouter started routing a message.
Description
MDM PushRouter Service: PushRouter started routing a message.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 145,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.820264+00:00",
"event_record_id": 7349,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 8644
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {},
"message": ""
}
Event ID 146 — MDM PushRouter Service: Routing a message failed.
Description
MDM PushRouter Service: Routing a message failed. Content: (Message1), Application: (Message2), Sender: (Message3), Client: (Message4), Queue Id: (Message5), Result: (HexInt1).
Message #
Fields #
| Name | Description |
|---|---|
Message1 UnicodeString | — |
Message2 UnicodeString | — |
Message3 UnicodeString | — |
Message4 UnicodeString | — |
Message5 UnicodeString | — |
HexInt1 HexInt32 | — |
Event ID 147 — MDM PushRouter Service: Message routed successfully.
Description
MDM PushRouter Service: Message routed successfully. Content: (Message1), Application: (Message2), Sender: (Message3), Client: (Message4), Queue Id: (Message5), Result: (HexInt1).
Message #
Fields #
| Name | Description |
|---|---|
Message1 UnicodeString | — |
Message2 UnicodeString | — |
Message3 UnicodeString | — |
Message4 UnicodeString | — |
Message5 UnicodeString | — |
HexInt1 HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 147,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.841537+00:00",
"event_record_id": 7350,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 8644
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Message1": "application/vnd.syncml.notification",
"Message2": "NULL",
"Message3": "NULL",
"Message4": "PC5",
"Message5": "1",
"HexInt1": "0x0"
},
"message": ""
}
Event ID 148 — MDM PushRouter Service: PushRouter started routing a new message.
Description
MDM PushRouter Service: PushRouter started routing a new message.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 148,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.765585+00:00",
"event_record_id": 7341,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 8644
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {},
"message": ""
}
Event ID 149 — MDM PushRouter Service: Failed to route a new message.
Event ID 150 — MDM PushRouter Service: Successfully routed a new message.
Description
MDM PushRouter Service: Successfully routed a new message. Result: (HRESULT).
Message #
Fields #
| Name | Description |
|---|---|
HRESULT HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 150,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.841554+00:00",
"event_record_id": 7351,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 8644
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HRESULT": "0x0"
},
"message": ""
}
Event ID 151 — MDM Message Persistence: Failed to load unauthenticated messages file.
Event ID 152 — MDM PushRouter Authentication: Loaded an authentication provider.
Description
MDM PushRouter Authentication: Loaded an authentication provider. Name: (Message1).
Message #
Fields #
| Name | Description |
|---|---|
Message1 UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 152,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.765605+00:00",
"event_record_id": 7342,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 8644
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Message1": "SecProviders.SyncMLSecProvider"
},
"message": ""
}
Event ID 153 — MDM PushRouter Authentication: Getting authentication provider failed.
Event ID 154 — MDM PushRouter Authentication: Loaded authentication provider failed to authenticate message.
Event ID 155 — MDM PushRouter Authentication: Message authenticated successfully.
Description
MDM PushRouter Authentication: Message authenticated successfully. Name: (Message1), Security account name: (Message2), Message headers: (Message3), Sender address: (Message4), Role: (HexInt1), Result: (HexInt3).
Message #
Fields #
| Name | Description |
|---|---|
Message1 UnicodeString | — |
Message2 UnicodeString | — |
Message3 UnicodeString | — |
Message4 UnicodeString | — |
HexInt1 HexInt32 | — |
HexInt3 HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 155,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.811427+00:00",
"event_record_id": 7348,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 8644
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Message1": "SecProviders.SyncMLSecProvider",
"Message2": "OmaDmClient_Enterprise",
"Message3": "Content-Type: application/vnd.syncml.notification\r\nX-Wap-Application-Id: x-wap-application:syncml.dm",
"Message4": "NULL",
"HexInt1": "0x20",
"HexInt3": "0x0"
},
"message": ""
}
Event ID 156 — MDM PushRouter Authentication: Message could not be authenticated.
Event ID 157 — MDM PushRouter Proxy: RPC call to get a message from PushRouter failed.
Event ID 158 — MDM PushRouter Proxy: RPC call to get a message from PushRouter succeeded.
Event ID 159 — MDM PushRouter Proxy: RPC call to submit a message from PushRouter failed.
Event ID 160 — MDM PushRouter Proxy: RPC call to submit a message from PushRouter succeeded.
Event ID 161 — MDM PushRouter Authentication: Failed to get network shared secret because ICCID is null.
Description
MDM PushRouter Authentication: Failed to get network shared secret because ICCID is null.
Message #
Event ID 162 — MDM PushRouter Authentication: WAP Verification succeeded.
Event ID 163 — MDM PushRouter Authentication: WAP Verification failed.
Event ID 164 — MDM PushRouter Authentication: WAP Authentication failed.
Event ID 165 — MDM PushRouter Authentication: WAP Authentication succeeded.
Event ID 166 — MDM PushRouter Authentication: SyncMl Authentication failed.
Event ID 167 — MDM PushRouter Authentication: SyncMl Authentication succeeded.
Description
MDM PushRouter Authentication: SyncMl Authentication succeeded. Headers: (Message1), Message Body size: (HexInt1), Result: (HRESULT).
Message #
Fields #
| Name | Description |
|---|---|
Message1 UnicodeString | — |
HexInt1 HexInt32 | — |
HRESULT HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 167,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.811409+00:00",
"event_record_id": 7347,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 8644
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Message1": "Content-Type: application/vnd.syncml.notification\r\nX-Wap-Application-Id: x-wap-application:syncml.dm",
"HexInt1": "0x3c",
"HRESULT": "0x0"
},
"message": ""
}
Event ID 168 — MDM PushRouter Authentication: Getting ServerID from the trigger failed.
Event ID 169 — MDM PushRouter Authentication: Getting ServerID from the trigger succeeded.
Description
MDM PushRouter Authentication: Getting ServerID from the trigger succeeded. Result: (HRESULT).
Message #
Fields #
| Name | Description |
|---|---|
HRESULT HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 169,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.810524+00:00",
"event_record_id": 7346,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 8644
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HRESULT": "0x0"
},
"message": ""
}
Event ID 170 — MDM PushRouter Authentication: Validating trigger failed.
Event ID 171 — MDM PushRouter Authentication: Validating trigger succeeded.
Description
MDM PushRouter Authentication: Validating trigger succeeded. Result: (HRESULT).
Message #
Fields #
| Name | Description |
|---|---|
HRESULT HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 171,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.810506+00:00",
"event_record_id": 7345,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 8644
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HRESULT": "0x0"
},
"message": ""
}
Event ID 172 — MDM PushRouter Authentication: Validating nonce failed.
Event ID 173 — MDM PushRouter Authentication: Validating nonce succeeded.
Description
MDM PushRouter Authentication: Validating nonce succeeded. Type of nonce: (Message1), Result: (HRESULT).
Message #
Fields #
| Name | Description |
|---|---|
Message1 UnicodeString | — |
HRESULT HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 173,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.810461+00:00",
"event_record_id": 7344,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 8644
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Message1": "Regular",
"HRESULT": "0x0"
},
"message": ""
}
Event ID 174 — MDM PushRouter Authentication: Using default nonce resync is set to false.
Description
MDM PushRouter Authentication: Using default nonce resync is set to false.
Message #
Event ID 175 — MDM PushRouter Authentication: Default nonce not found.
Description
MDM PushRouter Authentication: Default nonce not found.
Message #
Event ID 176 — MDM PushRouter: Changing dmwappushservice startup type to demand started.
Event ID 177 — MDM PushRouter: Changing dmwappushservice startup type to demand started failed.
Event ID 178 — MDM PushRouter: Pushrouter failed to start because the dmwappushservice service is disabled.
Description
MDM PushRouter: Pushrouter failed to start because the dmwappushservice service is disabled.
Message #
Event ID 300 — MDM Common Utility for Policies: Policy query.
Description
MDM Common Utility for Policies: Policy query. Policy ID: (HexInt1), Policy Value: (HexInt2), Result: (HRESULT).
Message #
Fields #
| Name | Description |
|---|---|
HexInt1 HexInt32 | — |
HexInt2 HexInt32 | — |
HRESULT HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 300,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:02.145061+00:00",
"event_record_id": 7357,
"correlation": {},
"execution": {
"process_id": 6736,
"thread_id": 11860
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HexInt1": "0x1022",
"HexInt2": "0x0",
"HRESULT": "0x0"
},
"message": ""
}
Event ID 301 — MDM Common Utility for Policies: Policy set.
Event ID 500 — DmWapPushService: Failed to retrieve ICCID of the SIM on which the message was received.
Event ID 501 — DmWapPushService: Failed to copy WAP message into a format that PushRouter understands.
Event ID 502 — DmWapPushService: Successfully copied WAP message into a format that PushRouter understands.
Event ID 503 — DmWapPushService: Failed to retrieve body of WAP message.
Event ID 504 — DmWapPushService: Successfully retrieved body of WAP message.
Event ID 505 — DmWapPushService: The current value of SECPOLICY_WSPNOTIFICATIONS is: (HexInt1).
Event ID 506 — DmWapPushService: Failed to register WNF with EventAggregator for WAP messages received by SMS Router.
Description
DmWapPushService: Failed to register WNF with EventAggregator for WAP messages received by SMS Router. Result: (HexInt1).
Message #
Fields #
| Name | Description |
|---|---|
HexInt1 HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 506,
"version": 0,
"level": 2,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-15T23:43:24.011193+00:00",
"event_record_id": 10,
"correlation": {},
"execution": {
"process_id": 14788,
"thread_id": 14400
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-DC01.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HexInt1": "0xc002000b"
},
"message": ""
}
Event ID 507 — DmWapPushService: Successfully registered WNF with EventAggregator for WAP messages received by SMS Router.
Description
DmWapPushService: Successfully registered WNF with EventAggregator for WAP messages received by SMS Router. Result: (HexInt1).
Message #
Fields #
| Name | Description |
|---|---|
HexInt1 HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 507,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.736008+00:00",
"event_record_id": 7325,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 2792
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HexInt1": "0x0"
},
"message": ""
}
Event ID 508 — DmWapPushService: Callback to handle a new WAP message received.
Description
DmWapPushService: Callback to handle a new WAP message received.
Message #
Event ID 509 — DmWapPushService: There are pending RPC clients currently.
Description
DmWapPushService: There are pending RPC clients currently.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 509,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:53:01.369389+00:00",
"event_record_id": 7367,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 3304
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {},
"message": ""
}
Event ID 510 — DmWapPushService: No pending RPC clients remain.
Description
DmWapPushService: No pending RPC clients remain.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 510,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:55:01.378179+00:00",
"event_record_id": 7374,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 9048
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {},
"message": ""
}
Event ID 511 — DmWapPushService: Setting the timer to check if all RPC clients are handled to fire after (HexInt1) seconds.
Description
DmWapPushService: Setting the timer to check if all RPC clients are handled to fire after (HexInt1) seconds.
Message #
Fields #
| Name | Description |
|---|---|
HexInt1 HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 511,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:53:01.369414+00:00",
"event_record_id": 7368,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 3304
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HexInt1": "0x78"
},
"message": ""
}
Event ID 512 — DmWapPushService: Idle timeout of DmWapPushService is currently set to (HexInt1) seconds.
Description
DmWapPushService: Idle timeout of DmWapPushService is currently set to (HexInt1) seconds.
Message #
Fields #
| Name | Description |
|---|---|
HexInt1 HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 512,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.374089+00:00",
"event_record_id": 7319,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 2792
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HexInt1": "0x78"
},
"message": ""
}
Event ID 513 — DmWapPushService: Initialized idle stop-start for DmWapPushService.
Description
DmWapPushService: Initialized idle stop-start for DmWapPushService.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 513,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:55:01.379453+00:00",
"event_record_id": 7379,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 3304
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {},
"message": ""
}
Event ID 514 — DmWapPushService: Service status updated.
Description
DmWapPushService: Service status updated. Current state: (HexInt1), Exit code: (HexInt2), Wait hint: (HexInt3).
Message #
Fields #
| Name | Description |
|---|---|
HexInt1 HexInt32 | — |
HexInt2 HexInt32 | — |
HexInt3 HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 514,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:55:01.379563+00:00",
"event_record_id": 7381,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 3304
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HexInt1": "0x1",
"HexInt2": "0x0",
"HexInt3": "0x0"
},
"message": ""
}
Event ID 515 — DmWapPushService: Failed to initialize service.
Event ID 516 — DmWapPushService: Successfully initialized service.
Description
DmWapPushService: Successfully initialized service. Result: (HRESULT).
Message #
Fields #
| Name | Description |
|---|---|
HRESULT HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 516,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.736031+00:00",
"event_record_id": 7326,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 2792
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HRESULT": "0x0"
},
"message": ""
}
Event ID 517 — DmWapPushService: Failed to register service's RPC interface.
Event ID 518 — DmWapPushService: Successfully registered service's RPC interface.
Description
DmWapPushService: Successfully registered service's RPC interface. Result: (HRESULT).
Message #
Fields #
| Name | Description |
|---|---|
HRESULT HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 518,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.738848+00:00",
"event_record_id": 7330,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 2792
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HRESULT": "0x0"
},
"message": ""
}
Event ID 519 — DmWapPushService: Failed to uninitialize service.
Event ID 520 — DmWapPushService: Successfully uninitialized service.
Description
DmWapPushService: Successfully uninitialized service. Result: (HRESULT).
Message #
Fields #
| Name | Description |
|---|---|
HRESULT HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 520,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:55:01.379544+00:00",
"event_record_id": 7380,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 3304
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HRESULT": "0x0"
},
"message": ""
}
Event ID 521 — DmWapPushService: Failed to unregister service's RPC interface.
Event ID 522 — DmWapPushService: Successfully unregistered service's RPC interface.
Description
DmWapPushService: Successfully unregistered service's RPC interface. Result: (HRESULT).
Message #
Fields #
| Name | Description |
|---|---|
HRESULT HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 522,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:55:01.378914+00:00",
"event_record_id": 7378,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 3304
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HRESULT": "0x0"
},
"message": ""
}
Event ID 523 — DmWapPushService: Service handler invoked.
Description
DmWapPushService: Service handler invoked. Opcode: (HexInt1), Current state: (HexInt2).
Message #
Fields #
| Name | Description |
|---|---|
HexInt1 HexInt32 | — |
HexInt2 HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 523,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-11T23:52:08.830793+00:00",
"event_record_id": 7132,
"correlation": {},
"execution": {
"process_id": 6116,
"thread_id": 8576
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HexInt1": "0x4",
"HexInt2": "0x4"
},
"message": ""
}
Event ID 524 — DmWapPushService: DmWapPushService is being initialized.
Description
DmWapPushService: DmWapPushService is being initialized.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 524,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.373899+00:00",
"event_record_id": 7317,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 2792
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {},
"message": ""
}
Event ID 525 — DmWapPushService: Stop Service handler registered.
Description
DmWapPushService: Stop Service handler registered. Status: (HexInt1), Result: (HRESULT).
Message #
Fields #
| Name | Description |
|---|---|
HexInt1 HexInt32 | — |
HRESULT HexInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DeviceManagement-Pushrouter",
"guid": "F1201B5A-E170-42B6-8D20-B57AC57E6416",
"event_source_name": "",
"event_id": 525,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-12T02:51:01.738885+00:00",
"event_record_id": 7331,
"correlation": {},
"execution": {
"process_id": 3932,
"thread_id": 2792
},
"channel": "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HexInt1": "0x0",
"HRESULT": "0x0"
},
"message": ""
}