Microsoft-Windows-Devices-AccessBroker

15 events across 1 channel

Event ID	Title	Channel
100	ClientFileName (pid = ClientPid) successfully accessed InterfacePath.	System
101	ClientFileName (pid = ClientPid) successfully accessed InterfacePath, the device …	System
102	ClientFileName (pid = ClientPid) successfully accessed InterfacePath, the device …	System
103	ClientFileName (pid = ClientPid) successfully accessed InterfacePath, the app is …	System
104	ClientFileName (pid = ClientPid) successfully accessed InterfacePath, the device …	System
105	ClientFileName (pid = ClientPid) successfully accessed InterfacePath, the system …	System
200	ClientFileName (pid = ClientPid) failed to access InterfacePath (error = Error).	System
201	ClientFileName (pid = ClientPid) failed to access InterfacePath, the user cannot …	System
202	ClientFileName (pid = ClientPid) failed to access InterfacePath, the interface …	System
203	ClientFileName (pid = ClientPid) failed to access InterfacePath, the interface …	System
204	ClientFileName (pid = ClientPid) failed to access InterfacePath, the interface …	System
205	ClientFileName (pid = ClientPid) failed to access InterfacePath, the interface …	System
206	ClientFileName (pid = ClientPid) failed to access InterfacePath, the interface …	System
207	ClientFileName (pid = ClientPid) failed to access InterfacePath, the interface …	System
208	ClientFileName (pid = ClientPid) failed to access InterfacePath, the capability …	System

Event ID 100 — ClientFileName (pid = ClientPid) successfully accessed InterfacePath.

Provider: Microsoft-Windows-Devices-AccessBroker
Channel: System
Task: DeviceAccessCheck

Description

ClientFileName (pid = ClientPid) successfully accessed InterfacePath.

Message #

%1 (pid = %2) successfully accessed %3.

Fields #

Name	Description
`ClientFileName` UnicodeString	—
`ClientPid` UInt32	—
`InterfacePath` UnicodeString	—

Event ID 101 — ClientFileName (pid = ClientPid) successfully accessed InterfacePath, the device interface class is unrestricted and allows access for LPAC apps.

Provider: Microsoft-Windows-Devices-AccessBroker
Channel: System
Task: DeviceAccessCheck

Description

ClientFileName (pid = ClientPid) successfully accessed InterfacePath, the device interface class is unrestricted and allows access for LPAC apps.

Message #

%1 (pid = %2) successfully accessed %3, the device interface class is unrestricted and allows access for LPAC apps.

Fields #

Name	Description
`ClientFileName` UnicodeString	—
`ClientPid` UInt32	—
`InterfacePath` UnicodeString	—

Event ID 102 — ClientFileName (pid = ClientPid) successfully accessed InterfacePath, the device interface class is unrestricted.

Provider: Microsoft-Windows-Devices-AccessBroker
Channel: System
Task: DeviceAccessCheck

Description

ClientFileName (pid = ClientPid) successfully accessed InterfacePath, the device interface class is unrestricted.

Message #

%1 (pid = %2) successfully accessed %3, the device interface class is unrestricted.

Fields #

Name	Description
`ClientFileName` UnicodeString	—
`ClientPid` UInt32	—
`InterfacePath` UnicodeString	—

Event ID 103 — ClientFileName (pid = ClientPid) successfully accessed InterfacePath, the app is granted unrestricted access based on its capabilities.

Provider: Microsoft-Windows-Devices-AccessBroker
Channel: System
Task: DeviceAccessCheck

Description

ClientFileName (pid = ClientPid) successfully accessed InterfacePath, the app is granted unrestricted access based on its capabilities.

Message #

%1 (pid = %2) successfully accessed %3, the app is granted unrestricted access based on its capabilities.

Fields #

Name	Description
`ClientFileName` UnicodeString	—
`ClientPid` UInt32	—
`InterfacePath` UnicodeString	—

Event ID 104 — ClientFileName (pid = ClientPid) successfully accessed InterfacePath, the device container grants this app unrestricted access.

Provider: Microsoft-Windows-Devices-AccessBroker
Channel: System
Task: DeviceAccessCheck

Description

ClientFileName (pid = ClientPid) successfully accessed InterfacePath, the device container grants this app unrestricted access (i.e. legacy privileged app).

Message #

%1 (pid = %2) successfully accessed %3, the device container grants this app unrestricted access (i.e. legacy privileged app).

Fields #

Name	Description
`ClientFileName` UnicodeString	—
`ClientPid` UInt32	—
`InterfacePath` UnicodeString	—

Event ID 105 — ClientFileName (pid = ClientPid) successfully accessed InterfacePath, the system is in embedded mode and the app has the low level devices capability.

Provider: Microsoft-Windows-Devices-AccessBroker
Channel: System
Task: DeviceAccessCheck

Description

ClientFileName (pid = ClientPid) successfully accessed InterfacePath, the system is in embedded mode and the app has the low level devices capability.

Message #

%1 (pid = %2) successfully accessed %3, the system is in embedded mode and the app has the low level devices capability.

Fields #

Name	Description
`ClientFileName` UnicodeString	—
`ClientPid` UInt32	—
`InterfacePath` UnicodeString	—

Event ID 200 — ClientFileName (pid = ClientPid) failed to access InterfacePath (error = Error).

Provider: Microsoft-Windows-Devices-AccessBroker
Channel: System
Task: DeviceAccessCheck

Description

ClientFileName (pid = ClientPid) failed to access InterfacePath (error = Error).

Message #

%1 (pid = %2) failed to access %3 (error = %4).

Fields #

Name	Description
`ClientFileName` UnicodeString	—
`ClientPid` UInt32	—
`InterfacePath` UnicodeString	—
`Error` HexInt32	—

Event ID 201 — ClientFileName (pid = ClientPid) failed to access InterfacePath, the user cannot access the device (error = Error).

Provider: Microsoft-Windows-Devices-AccessBroker
Channel: System
Task: DeviceAccessCheck

Description

ClientFileName (pid = ClientPid) failed to access InterfacePath, the user cannot access the device (error = Error).

Message #

%1 (pid = %2) failed to access %3, the user cannot access the device (error = %4).

Fields #

Name	Description
`ClientFileName` UnicodeString	—
`ClientPid` UInt32	—
`InterfacePath` UnicodeString	—
`Error` HexInt32	—

Event ID 202 — ClientFileName (pid = ClientPid) failed to access InterfacePath, the interface class is unrestricted but does not allow LPAC apps access (error = Error).

Provider: Microsoft-Windows-Devices-AccessBroker
Channel: System
Task: DeviceAccessCheck

Description

ClientFileName (pid = ClientPid) failed to access InterfacePath, the interface class is unrestricted but does not allow LPAC apps access (error = Error).

Message #

%1 (pid = %2) failed to access %3, the interface class is unrestricted but does not allow LPAC apps access (error = %4).

Fields #

Name	Description
`ClientFileName` UnicodeString	—
`ClientPid` UInt32	—
`InterfacePath` UnicodeString	—
`Error` HexInt32	—

Event ID 203 — ClientFileName (pid = ClientPid) failed to access InterfacePath, the interface class is restricted and the app is LPAC (error = Error).

Provider: Microsoft-Windows-Devices-AccessBroker
Channel: System
Task: DeviceAccessCheck

Description

ClientFileName (pid = ClientPid) failed to access InterfacePath, the interface class is restricted and the app is LPAC (error = Error).

Message #

%1 (pid = %2) failed to access %3, the interface class is restricted and the app is LPAC (error = %4).

Fields #

Name	Description
`ClientFileName` UnicodeString	—
`ClientPid` UInt32	—
`InterfacePath` UnicodeString	—
`Error` HexInt32	—

Event ID 204 — ClientFileName (pid = ClientPid) failed to access InterfacePath, the interface class is custom and nothing gives the app access (error = Error).

Provider: Microsoft-Windows-Devices-AccessBroker
Channel: System
Task: DeviceAccessCheck

Description

ClientFileName (pid = ClientPid) failed to access InterfacePath, the interface class is custom and nothing gives the app access (error = Error).

Message #

%1 (pid = %2) failed to access %3, the interface class is custom and nothing gives the app access (error = %4).

                 One of the following methods may be used to grant an app access to a custom device:
                 - an interface class may define access policy for either allowing unrestricted access or access restricted to a specific capability
                 - a device interface instance may grant access to apps based on well-known or custom capabilities
                 - (Deprecated) Privileged App Support: device metadata may grant access to specific PFNs associated to device container's PnP state

                 Note: custom capabilities are typically the correct way to enable an app to access a custom device.

Fields #

Name	Description
`ClientFileName` UnicodeString	—
`ClientPid` UInt32	—
`InterfacePath` UnicodeString	—
`Error` HexInt32	—

Event ID 205 — ClientFileName (pid = ClientPid) failed to access InterfacePath, the interface class is restricted by policy (error = Error).

Provider: Microsoft-Windows-Devices-AccessBroker
Channel: System
Task: DeviceAccessCheck

Description

ClientFileName (pid = ClientPid) failed to access InterfacePath, the interface class is restricted by policy (error = Error).

Message #

%1 (pid = %2) failed to access %3, the interface class is restricted by policy (error = %4).

Fields #

Name	Description
`ClientFileName` UnicodeString	—
`ClientPid` UInt32	—
`InterfacePath` UnicodeString	—
`Error` HexInt32	—

Event ID 206 — ClientFileName (pid = ClientPid) failed to access InterfacePath, the interface instance is restricted (error = Error).

Provider: Microsoft-Windows-Devices-AccessBroker
Channel: System
Task: DeviceAccessCheck

Description

ClientFileName (pid = ClientPid) failed to access InterfacePath, the interface instance is restricted (error = Error).

Message #

%1 (pid = %2) failed to access %3, the interface instance is restricted (error = %4).

Fields #

Name	Description
`ClientFileName` UnicodeString	—
`ClientPid` UInt32	—
`InterfacePath` UnicodeString	—
`Error` HexInt32	—

Event ID 207 — ClientFileName (pid = ClientPid) failed to access InterfacePath, the interface class does not allow raw handles to the device (error = Error).

Provider: Microsoft-Windows-Devices-AccessBroker
Channel: System
Task: DeviceAccessCheck

Description

ClientFileName (pid = ClientPid) failed to access InterfacePath, the interface class does not allow raw handles to the device (error = Error).

Message #

%1 (pid = %2) failed to access %3, the interface class does not allow raw handles to the device (error = %4).

Fields #

Name	Description
`ClientFileName` UnicodeString	—
`ClientPid` UInt32	—
`InterfacePath` UnicodeString	—
`Error` HexInt32	—

Event ID 208 — ClientFileName (pid = ClientPid) failed to access InterfacePath, the capability access check was denied (error = Error).

Provider: Microsoft-Windows-Devices-AccessBroker
Channel: System
Task: DeviceAccessCheck

Description

ClientFileName (pid = ClientPid) failed to access InterfacePath, the capability access check was denied (error = Error).

Message #

%1 (pid = %2) failed to access %3, the capability access check was denied (error = %4).

Fields #

Name	Description
`ClientFileName` UnicodeString	—
`ClientPid` UInt32	—
`InterfacePath` UnicodeString	—
`Error` HexInt32	—