Microsoft-Windows-DeviceSync
64 events across 2 channels
Event ID 100: SI_CreateStart
#Event ID 101: SI_CreateStop
#Event ID 102: SI_Request_Start_SyncStart
#Event ID 103: SI_Request_Start_SyncStop
#Event ID 104: SI_Request_Stop_SyncStart
#Event ID 105: SI_Request_Stop_SyncStop
#Event ID 106: SI_Device_ConnectionStart
#Event ID 107: SI_Device_ConnectionStop
#Event ID 108: SI_Query_StatusStart
#Event ID 109: SI_Query_StatusStop
#Event ID 110: SI_Query_ServiceStart
#Event ID 111: SI_Query_ServiceStop
#Event ID 112: SI_State_ChangeStart
#Event ID 113: SI_State_ChangeStop
#Event ID 114: SI_SyncStart
#Event ID 115: SI_SyncStop
#Event ID 116: SI_Subscribe_EventsStart
#Event ID 117: SI_Subscribe_EventsStop
#Event ID 118: SI_Unsubscribe_EventsStart
#Event ID 119: SI_Unsubscribe_EventsStop
#Event ID 200: MediaSync_StartSyncStart
#Event ID 201: MediaSync_StartSyncStop
#Event ID 202: MediaSync_StopSyncStart
#Event ID 203: MediaSync_StopSyncStop
#Event ID 204: MediaSync_SyncStateStart
#Event ID 205: MediaSync_SyncStateStop
#Event ID 206: MediaSync_CreateOCXStart
#Event ID 207: MediaSync_CreateOCXStop
#Event ID 208: MediaSync_SupportedContentStart
#Event ID 209: MediaSync_SupportedContentStop
#Event ID 210: MediaSync_RemovePartnershipStart
#Event ID 211: MediaSync_RemovePartnershipStop
#Event ID 212: MediaSync_GetSyncRulesStart
#Event ID 213: MediaSync_GetSyncRulesStop
#Event ID 214: MediaSync_SyncRulesTypeStart
#Event ID 215: MediaSync_SyncRulesTypeStop
#Event ID 216: MediaSync_EstimateSyncStart
#Event ID 217: MediaSync_EstimateSyncStop
#Event ID 218: MediaSync_CancelEstimationStart
#Event ID 219: MediaSync_CancelEstimationStop
#Event ID 220: MediaSync_GetStorageInfoStart
#Event ID 221: MediaSync_GetStorageInfoStop
#Event ID 222: MediaSync_GetDeletesFlagStart
#Event ID 223: MediaSync_GetDeletesFlagStop
#Event ID 224: MediaSync_ResetDeleteFlagStart
#Event ID 225: MediaSync_ResetDeleteFlagStop
#Event ID 226: MediaSync_InitializeDevicesStart
#Event ID 227: MediaSync_InitializeDevicesStop
#Event ID 300: PartnershipStore_LoadStoreStart
#Event ID 301: PartnershipStore_LoadStoreStop
#Event ID 302: PartnershipStore_CreateStart
#Event ID 303: PartnershipStore_CreateStop
#Event ID 304: PartnershipStore_DestroyStart
#Event ID 305: PartnershipStore_DestroyStop
#Event ID 306: PartnershipStore_FindByIdStart
#Event ID 307: PartnershipStore_FindByIdStop
#Event ID 308: PartnershipStore_EnumStart
#Event ID 309: PartnershipStore_EnumStop
#Event ID 310: PartnershipStore_CommitStart
#Event ID 311: PartnershipStore_CommitStop
#Event ID 312: PartnershipStore_RemoveOwnershipStart
#Event ID 313: PartnershipStore_RemoveOwnershipStop
#Event ID 1001: task_0
#Fields #
| Name | Description |
|---|---|
Error_DUID GUID | |
Error_Partnership GUID | |
Error_Type UInt8 | |
Error_HResult Int32 | |
Error_Time FILETIME | |
nameLen UInt32 | |
dataName Binary | |
descLen UInt32 | |
dataDesc Binary | |
detailLen UInt32 | |
dataDetail Binary | |
Error_Link UnicodeString |
Event ID 1002: task_01002
#Fields #
| Name | Description |
|---|---|
Event_DUID GUID | |
Event_Partnership GUID | |
Event_Code UInt8 | |
Event_Time FILETIME |
Provenance
Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.
ETW provider GUID 09ec9687-d7ad-40ca-9c5e-78a04a5ae993
Defined in syncinfrastructure.dll, which carries the event manifest.
Observed on:
- WS2022-20348.4893 · schema read from the registered manifest · binary version 10.0.20348.1 · captured 2026-06-02
- Win11-26200.6584 · schema read from the registered manifest · binary version 10.0.26100.1 · captured 2026-06-02
Downloads
- Microsoft-Windows-DeviceSync registered manifest XML (WS2022-20348.4893) manifest-xml
- Microsoft-Windows-DeviceSync registered manifest XML (Win11-26200.6584) manifest-xml