Microsoft-Windows-DSC
255 events across 3 channels
Event ID 4097: Job <JobId>: This event indicates that failure happens when <ComponentName> is processing the configuration.
#Description
Job <JobId>: This event indicates that failure happens when <ComponentName> is processing the configuration. Error Id is <ErrorId>. Error Detail is <ErrorDetail>. Resource Id is <ResourceId> and Source Info is <SourceInfo>. Error Message is <ErrorMessage>.
Message #
Fields #
| Name | Description |
|---|---|
JobId UnicodeString | |
ComponentName UnicodeString | |
ErrorId HexInt32 | |
ErrorDetail UnicodeString | |
ResourceId UnicodeString | |
SourceInfo UnicodeString | |
ErrorMessage UnicodeString |
Event ID 4098: Job <JobId>: Displaying messages from built-in DSC resources: WMI channel <WMIMessageChannel> ResourceID: <ResourceId> Message: <MessageBody>.
#Event ID 4099: Job <JobId>: Method <MethodName> started.
#Event ID 4100: Job <JobId>: Displaying messages from the engine: WMI channel <WMIMessageChannel> ResourceID: <ResourceId> Message: <MessageBody>.
#Event ID 4101: Job <JobId>: From <ClassName>, message is <MessageBody>.
#Event ID 4102: Job <JobId>: Operation <Operation> started by user sid <UserSid> from computer <ComputerName>.
#Description
Job <JobId>: Operation <Operation> started by user sid <UserSid> from computer <ComputerName>.
Message #
Fields #
| Name | Description |
|---|---|
JobId UnicodeString | |
Operation UnicodeString | Known values
|
UserSid UnicodeString | |
ComputerName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DSC",
"guid": "{50DF9E12-A8C4-4939-B281-47E1325BA63E}",
"event_source_name": "",
"event_id": 4102,
"version": 0,
"level": 4,
"task": 1,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-30T02:28:34.2131871+00:00",
"event_record_id": 24,
"correlation": {
"ActivityID": "{DC261B5A-AEBD-41EB-ACFE-F2646C1474A8}"
},
"execution": {
"process_id": 11004,
"thread_id": 12916
},
"channel": "Microsoft-Windows-DSC/Operational",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"JobId": "{3C5F9840-5BCF-11F1-9661-9BD2E82CF0EE}",
"Operation": "Consistency Check or Pull",
"UserSid": "S-1-5-20",
"ComputerName": "NULL"
},
"message": "Job {3C5F9840-5BCF-11F1-9661-9BD2E82CF0EE} : \r\nOperation Consistency Check or Pull started by user sid S-1-5-20 from computer NULL."
}
Event ID 4103: Job <JobId>: This event indicates that a non-terminating error was thrown when <ComponentName> was executing <OperationCmd> on <ProviderName> DSC r...
#Description
Job <JobId>: This event indicates that a non-terminating error was thrown when <ComponentName> was executing <OperationCmd> on <ProviderName> DSC resource. FullyQualifiedErrorId is <FullyQualifiedErrorId>. Error Message is <ErrorMessage>.
Message #
Fields #
| Name | Description |
|---|---|
JobId UnicodeString | |
ComponentName UnicodeString | |
OperationCmd UnicodeString | |
ProviderName UnicodeString | |
FullyQualifiedErrorId UnicodeString | |
ErrorMessage UnicodeString |
Event ID 4104: Job <JobId>: This event indicates that failure happens when <ComponentName> is trying to get the configuration from pull server using download mana...
#Description
Job <JobId>: This event indicates that failure happens when <ComponentName> is trying to get the configuration from pull server using download manager <DownloadManagerName>. ErrorId is <ErrorId>. ErrorDetail is <ErrorDetail>
Message #
Fields #
| Name | Description |
|---|---|
JobId UnicodeString | |
ComponentName UnicodeString | |
DownloadManagerName UnicodeString | |
ErrorId HexInt32 | |
ErrorDetail UnicodeString |
Event ID 4105: Job <JobId>: Attempting to get the configuration from pull server using Download Manager <DownloadManagerName>.
#Event ID 4106: Job <JobId>: Attempting to get the modules from pull server using Download Manager <DownloadManagerName>.
#Description
Job <JobId>: Attempting to get the modules from pull server using Download Manager <DownloadManagerName>. Configuration Id is <ConfigurationId>. Modules are <Modules>.
Message #
Fields #
| Name | Description |
|---|---|
JobId UnicodeString | |
DownloadManagerName UnicodeString | |
ConfigurationId UnicodeString | |
Modules UnicodeString |
Event ID 4107: Job <JobId>: Attempting to get the action from pull server using Download Manager <DownloadManagerName>.
#Description
Job <JobId>: Attempting to get the action from pull server using Download Manager <DownloadManagerName>. Configuration Id is <ConfigurationId>. Checksum is <Checksum>. Compliance status is <Compliant>.
Message #
Fields #
| Name | Description |
|---|---|
JobId UnicodeString | |
DownloadManagerName UnicodeString | |
ConfigurationId UnicodeString | |
Checksum UnicodeString | |
Compliant Boolean |
Event ID 4108: Job <JobId>: Successfully got the configuration from pull server using Download Manager <DownloadManagerName>.
#Event ID 4109: Job <JobId>: Successfully got the modules from pull server using Download Manager <DownloadManagerName>.
#Event ID 4110: Job <JobId>: Successfully got the action <ActionStatus> from pull server using Download Manager <DownloadManagerName>.
#Event ID 4111: Job <JobId>: Successfully installed the certificate <Thumbprint> from <Path>.
#Event ID 4112: Job <JobId>: Skipping installing certificate <Thumbprint> as it is already installed.
#Event ID 4113: Job <JobId>: Successfully deleted certificate file <Path>.
#Event ID 4114: Job <JobId>: Running consistency engine.
#Description
Job <JobId>: Running consistency engine.
Message #
Fields #
| Name | Description |
|---|---|
JobId UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DSC",
"guid": "{50DF9E12-A8C4-4939-B281-47E1325BA63E}",
"event_source_name": "",
"event_id": 4114,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-30T02:28:34.2244131+00:00",
"event_record_id": 26,
"correlation": {
"ActivityID": "{DC261B5A-AEBD-41EB-ACFE-F2646C1474A8}"
},
"execution": {
"process_id": 11004,
"thread_id": 12916
},
"channel": "Microsoft-Windows-DSC/Operational",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"JobId": "{3C5F9840-5BCF-11F1-9661-9BD2E82CF0EE}"
},
"message": "Job {3C5F9840-5BCF-11F1-9661-9BD2E82CF0EE} : \r\nRunning consistency engine."
}
Event ID 4115: Job <JobId>: Consistency engine was run successfully.
#Description
Job <JobId>: Consistency engine was run successfully.
Message #
Fields #
| Name | Description |
|---|---|
JobId UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DSC",
"guid": "{50DF9E12-A8C4-4939-B281-47E1325BA63E}",
"event_source_name": "",
"event_id": 4115,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-30T02:28:34.4789520+00:00",
"event_record_id": 29,
"correlation": {
"ActivityID": "{CEFBC89A-D2FC-0007-6EE6-13CFFCD2DC01}"
},
"execution": {
"process_id": 11004,
"thread_id": 12916
},
"channel": "Microsoft-Windows-DSC/Operational",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"JobId": "{3C5F9840-5BCF-11F1-9661-9BD2E82CF0EE}"
},
"message": "Job {3C5F9840-5BCF-11F1-9661-9BD2E82CF0EE} : \r\nConsistency engine was run successfully."
}
Event ID 4116: Job <JobId>: This event indicates that failure happened while trying to run consistency engine.
#Event ID 4117: Job <JobId>: Displaying verbose messages from Powershell DSC resource: ResourceID: <ResourceId> Message: <MessageBody>.
#Event ID 4118: Job <JobId>: Displaying debug messages from Powershell DSC resource: ResourceID: <ResourceId> Message: <MessageBody>.
#Event ID 4119: Job <JobId>: Method <MethodName> started with parameters Class name: <ClassName> Resource ID: <ResourceID> Flags: <Flags> Execution Mode: <Executio...
#Description
Job <JobId>: Method <MethodName> started with parameters Class name: <ClassName> Resource ID: <ResourceID> Flags: <Flags> Execution Mode: <ExecutionMode> DSC resource Namespace: <ProviderNamespace>
Message #
Fields #
| Name | Description |
|---|---|
JobId UnicodeString | |
MethodName UnicodeString | |
ClassName UnicodeString | |
ResourceID UnicodeString | |
Flags UInt32 | Class name. |
ExecutionMode UInt32 | |
ProviderNamespace UnicodeString |
Event ID 4120: Job <JobId>: Method <MethodName> ended successfully.
#Event ID 4121: Job <JobId>: Current configuration is cancelled.
#Event ID 4128: Job <JobId>: Configuration is stopped when Powershell DSC resource is executing.
#Event ID 4129: Job <JobId>: Write progress failed with error code <ErrorCode>.
#Event ID 4130: Job <JobId>: Current configuration is forcely stopped.
#Event ID 4131: Job <JobId>: DSC Engine Error: Error Message: <ErrorMessage> Error Code: <ErrorCode>.
#Event ID 4132: Job <JobId>: Getting a registration instance for <param1>.
#Event ID 4133: Job <JobId>: Module manager is loading instance document from location <param1>.
#Event ID 4134: Job <JobId>: Validating instance document.
#Event ID 4135: Job <JobId>: Deleting instance document from location <param1> since it is invalid.
#Event ID 4136: Job <JobId>: Parsing the configuration to apply.
#Event ID 4137: Job <JobId>: Resolving Dependencies inside the configuration document.
#Event ID 4144: Job <JobId>: Setting resources in order.
#Event ID 4145: Job <JobId>: Processing resource index <param1>, name <param2>.
#Event ID 4146: Job <JobId>: Getting Metaconfiguration details.
#Event ID 4147: Job <JobId>: Moving the resource <param1> of class <param2> to desired state.
#Event ID 4148: Job <JobId>: Setting Metaconfiguration instance.
#Event ID 4149: Job <JobId>: Saving configuration instance into <param1>.
#Event ID 4150: Job <JobId>: Copying configuration file from <param1> to <param2>.
#Event ID 4151: Job <JobId>: Applying configuration from <param1>.
#Event ID 4152: Job <JobId>: Waiting for the current configuration to stop.
#Event ID 4153: Job <JobId>: Deleting file from <param1>.
#Event ID 4160: Job <JobId>: Registering the task with task scheduler after rebooting the machine.
#Event ID 4161: Job <JobId>: Scheduling a restart of the machine.
#Event ID 4162: Job <JobId>: Executing operations for PS DSC resource <param1> with resource name <param2>.
#Event ID 4163: Job <JobId>: Executing operations for WMIv2 DSC resource <param1>s with resource name <param2>.
#Event ID 4164: Job <JobId>: Executing GET for PS DSC resource <param1> with resource name <param2>.
#Event ID 4165: Job <JobId>: Executing GET for WMIv2 DSC resource <param1> with resource name <param2>.
#Event ID 4166: Job <JobId>: Invoking session and getting result for namespace <param1>, classname <param2> for method <param3>.
#Event ID 4167: Job <JobId>: Getting PS DSC resource schema path and registration information.
#Event ID 4168: Job <JobId>: Function <FunctionName> started with parameters Class name: <ClassName> Method Name: <MethodName> Namespace: <Namespace>.
#Description
Job <JobId>: Function <FunctionName> started with parameters Class name: <ClassName> Method Name: <MethodName> Namespace: <Namespace>
Message #
Fields #
| Name | Description |
|---|---|
JobId UnicodeString | |
FunctionName UnicodeString | |
ClassName UnicodeString | |
MethodName UnicodeString | |
Namespace UnicodeString | Class name. |
Event ID 4169: Job <JobId>: Function <MethodName> started with parameters DataSize: <DataSize> Flags: <Flags> Execution Mode: <ExecutionMode>.
#Event ID 4176: Job <JobId>: Validating infrastructure schema.
#Event ID 4177: Job <JobId>: Validating DSC resource registration against schema Number of classes: <param1> Number of Registrations: <param2>.
#Event ID 4178: Job <JobId>: Validating DSC resource schema against a class array of size <param1>.
#Event ID 4179: Job <JobId>: Validating Schema of class <param1> which is class index <param2> in an array of classes of size <param3>.
#Event ID 4180: Job <JobId>: Validating DSC Document instance with instance array size of <param1> and flags <param2>.
#Event ID 4181: Job <JobId>: Validating DSC resource registration instance for class: <param1>.
#Event ID 4182: Job <JobId>: Validating Class property <param1> for class <param2>.
#Event ID 4183: Job JobId : Failed attempt number ParamNumber : Couldn't delete file ParamText .
#Description
Job JobId : Failed attempt number ParamNumber : Couldn't delete file ParamText . The error code is ParamErrorCode. The error message is: ParamErrorMessage.
Message #
Fields #
| Name | Description |
|---|---|
JobId UnicodeString | |
ParamNumber UInt32 | |
ParamText UnicodeString | |
ParamErrorCode UInt32 | |
ParamErrorMessage UnicodeString |
Event ID 4184: Job <JobId>: The current metaconfiguration is not registered for Pull configuration mode.
#Event ID 4185: Job <JobId>: Failed to register the Pull Server Task for the current metaconfiguration.
#Event ID 4192: Job <JobId>: Failed to register the Consistency Task for the current metaconfiguration.
#Event ID 4193: Job <JobId>: Failed to copy the configuration from location <param1> to location <param2>.
#Event ID 4194: Job <JobId>: Failed to delete the current configuration file.
#Event ID 4195: Job <JobId>: Machine was restarted as needed by one or more DSC resources.
#Event ID 4196: Job <JobId>: Restoring the configuration to previous configuration.
#Event ID 4197: Job <JobId>: Reading the file content from <param1>.
#Event ID 4198: Job <JobId>: Consistency Engine did not find a current or pending configuration to apply.
#Event ID 4199: Job <JobId>: The checksum validation for module <param1> completed with status code <param2>.
#Event ID 4200: Job <JobId>: The content validation for module <param1> completed with status code <param2>.
#Event ID 4201: Job <JobId>: The modules <param1> were downloaded to the location <param2>.
#Event ID 4208: Job <JobId>: The modules <param1> were installed at the location <param2>.
#Event ID 4209: Job <JobId>: Attempting to get the modules <param1> from pull server with Server Url <param2> using Web Download Manager.
#Event ID 4210: Job <JobId>: Attempting to get the configuration <param1> from pull server with Server Url <param2> using Web Download Manager.
#Event ID 4211: Job <JobId>: The checksum validation for configuration <param1> completed with status code <param2>.
#Event ID 4212: Job <JobId>: The configuration <param1> has an invalid format.
#Event ID 4213: Job <JobId>: The module <param1> has an invalid version format <param2>.
#Event ID 4214: Job <JobId>: Skipping pulling module <param1> with version <param2> as it already exists in this location <param3>.
#Event ID 4215: Job <JobId>: Extraction for module <param1> failed since module path <param2> already exists.
#Event ID 4216: Job <JobId>: Skipping pulling of modules since all modules specified in configuration <param1> are available.
#Event ID 4217: Job <JobId>: WebDownloadManager for configuration <param1> Get-DscDocument command using certificate id: <param2>.
#Event ID 4224: Job <JobId>: WebDownloadManager processed certificate: <param1> <param2>.
#Event ID 4225: Job <JobId>: WebDownloadManager for configuration s Get-DscDocument command, Http Client failed: <param1>.
#Event ID 4226: Job <JobId>: WebDownloadManager for configuration <param1> Get-DscDocument command, GET Url: <param2>.
#Event ID 4227: Job <JobId>: WebDownloadManager for configuration <param1> Get-DscDocument command, GET call result: <param2>.
#Event ID 4228: Job <JobId>: WebDownloadManager for configuration <param1> Get-DscDocument command, Checksum validation failed: <param2>.
#Event ID 4229: Job <JobId>: WebDownloadManager for configuration <param1> Get-DscDocument command, File save result: <param2>.
#Event ID 4230: Job <JobId>: WebDownloadManager Get-DscModule command, module <param1> using certificate id: <param2>.
#Event ID 4231: Job <JobId>: WebDownloadManager Get-DscModule command, module <param1>, Http Client failed: <param2>.
#Event ID 4232: Job <JobId>: WebDownloadManager Get-DscModule command, module <param1>, GET Url: <param2>.
#Event ID 4233: Job <JobId>: WebDownloadManager Get-DscModule command, module <param1>, GET call result: <param2>.
#Event ID 4240: Job <JobId>: WebDownloadManager Get-DscModule command, module <param1>, Checksum validation failed: <param2>.
#Event ID 4241: Job <JobId>: WebDownloadManager Get-DscModule command, module <param1>, File save result: <param2>.
#Event ID 4242: Job <JobId>: WebDownloadManager for configuration <param1> Do-DscAction command with server url: <param2>.
#Event ID 4243: Job <JobId>: WebDownloadManager for configuration <param1> Do-DscAction command using certificate id: <param2>.
#Event ID 4244: Job <JobId>: WebDownloadManager for configuration <param1> Do-DscAction command, Http Client failed: <param2>.
#Event ID 4245: Job <JobId>: WebDownloadManager for configuration <param1> Do-DscAction command, GET Url: <param2>.
#Event ID 4246: Job <JobId>: WebDownloadManager for configuration <param1> Do-DscAction command, GET call result: <param2>.
#Event ID 4247: Job <JobId>: Module <param1> is over written with the downloaded module <param2>.
#Event ID 4248: Job <JobId>: Cannot download configuration from <param1>.
#Event ID 4249: Job <JobId>: From <ClassName>, message is <MessageBody>.
#Description
Job <JobId>: From <ClassName>, message is <MessageBody>
Message #
Fields #
| Name | Description |
|---|---|
JobId UnicodeString | |
ClassName UnicodeString | |
MessageBody UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DSC",
"guid": "{50DF9E12-A8C4-4939-B281-47E1325BA63E}",
"event_source_name": "",
"event_id": 4249,
"version": 0,
"level": 3,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-30T02:28:34.4767603+00:00",
"event_record_id": 28,
"correlation": {
"ActivityID": "{CEFBC89A-D2FC-0007-6EE6-13CFFCD2DC01}"
},
"execution": {
"process_id": 11004,
"thread_id": 12916
},
"channel": "Microsoft-Windows-DSC/Operational",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"JobId": "{3C5F9840-5BCF-11F1-9661-9BD2E82CF0EE}",
"ClassName": "LCM",
"MessageBody": "\n Completed processing test operation. The operation returned False."
},
"message": "Job {3C5F9840-5BCF-11F1-9661-9BD2E82CF0EE} : \r\nFrom LCM, message is \n Completed processing test operation. The operation returned False."
}
Event ID 4250: Job <JobId>: Message <Message> HResult <HResult> StackTrack <StackTrace>.
#Event ID 4251: Job <JobId>: Operation <Operation> completed successfully.
#Description
Job <JobId>: Operation <Operation> completed successfully.
Message #
Fields #
| Name | Description |
|---|---|
JobId UnicodeString | |
Operation UnicodeString | Known values
|
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DSC",
"guid": "{50DF9E12-A8C4-4939-B281-47E1325BA63E}",
"event_source_name": "",
"event_id": 4251,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-30T02:28:34.4789633+00:00",
"event_record_id": 31,
"correlation": {
"ActivityID": "{CEFBC89A-D2FC-0007-6EE6-13CFFCD2DC01}"
},
"execution": {
"process_id": 11004,
"thread_id": 12916
},
"channel": "Microsoft-Windows-DSC/Operational",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"JobId": "{3C5F9840-5BCF-11F1-9661-9BD2E82CF0EE}",
"Operation": "Consistency Check or Pull"
},
"message": "Job {3C5F9840-5BCF-11F1-9661-9BD2E82CF0EE} : \r\nOperation Consistency Check or Pull completed successfully."
}
Event ID 4252: Job <JobId>: MIResult: <MIResult> Error Message: <ErrorMessage> Message ID: <MessageID> Error Category: <ErrorCategory> Error Code: <ErrorCode> Err...
#Description
Job <JobId>: MIResult: <MIResult> Error Message: <ErrorMessage> Message ID: <MessageID> Error Category: <ErrorCategory> Error Code: <ErrorCode> Error Type: <ErrorType>
Message #
Fields #
| Name | Description |
|---|---|
JobId UnicodeString | |
MIResult UInt32 | |
ErrorMessage UnicodeString | |
MessageID UnicodeString | |
ErrorCategory UInt32 | |
ErrorCode UInt32 | |
ErrorType UnicodeString |
Event ID 4253: Job <JobId>: WarningMessage <WarningMessage>.
#Event ID 4254: Job <JobId>: DebugMessage <DebugMessage>.
#Event ID 4255: Job <JobId>: Activity <activity> CurrentOperation <currentOperation> StatusDescription <statusDescription> PercentComplete <percentComplete> Second...
#Description
Job <JobId>: Activity <activity> CurrentOperation <currentOperation> StatusDescription <statusDescription> PercentComplete <percentComplete> SecondsRemaining <secondsRemaining>
Message #
Fields #
| Name | Description |
|---|---|
JobId UnicodeString | |
activity UnicodeString | |
currentOperation UnicodeString | |
statusDescription UnicodeString | |
percentComplete UInt32 | |
secondsRemaining UInt32 |
Event ID 4256: Job <JobId>: PromptMessage <PromptMessage>.
#Event ID 4257: Job <JobId>: Job runs under the following LCM setting.
#Description
Job <JobId>: Job runs under the following LCM setting. ConfigurationMode: <configurationMode> ConfigurationModeFrequencyMins: <configurationModeFrequencyMins> RefreshMode: <refreshmode> RefreshFrequencyMins: <refreshFrequencyMins> RebootNodeIfNeeded: <rebootNodeIfNeeded> DebugMode: <debugMode>
Message #
Fields #
| Name | Description |
|---|---|
JobId UnicodeString | |
configurationMode UnicodeString | |
configurationModeFrequencyMins UInt32 | |
refreshmode UnicodeString | |
refreshFrequencyMins UInt32 | |
rebootNodeIfNeeded UnicodeString | |
debugMode UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DSC",
"guid": "{50DF9E12-A8C4-4939-B281-47E1325BA63E}",
"event_source_name": "",
"event_id": 4257,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-30T02:28:34.4789576+00:00",
"event_record_id": 30,
"correlation": {
"ActivityID": "{CEFBC89A-D2FC-0007-6EE6-13CFFCD2DC01}"
},
"execution": {
"process_id": 11004,
"thread_id": 12916
},
"channel": "Microsoft-Windows-DSC/Operational",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"JobId": "{3C5F9840-5BCF-11F1-9661-9BD2E82CF0EE}",
"configurationMode": "ApplyAndMonitor",
"configurationModeFrequencyMins": "15",
"refreshmode": "PUSH",
"refreshFrequencyMins": "30",
"rebootNodeIfNeeded": "NONE",
"debugMode": "False"
},
"message": "Job {3C5F9840-5BCF-11F1-9661-9BD2E82CF0EE} : \r\nJob runs under the following LCM setting. \r\nConfigurationMode: ApplyAndMonitor \r\nConfigurationModeFrequencyMins: 15 \r\nRefreshMode: PUSH \r\nRefreshFrequencyMins: 30 \r\nRebootNodeIfNeeded: NONE \r\nDebugMode: False"
}
Event ID 4258: Job <JobId>: Cannot register at <param1>.
#Description
Job <JobId>: Cannot register at <param1>. Registering over HTTP is not allowed. To ensure security in registration, use an HTTPS address for the ServerUrl in the <param2> of the LocalConfigurationManager resource for this device. If you understand the security implications of using HTTP and want to allow its use on this device, set AllowUnsecureConnection property to true in the <param3> of the LocalConfigurationManager resource for this device.
Message #
Fields #
| Name | Description |
|---|---|
JobId UnicodeString | |
param1 UnicodeString | |
param2 UnicodeString | |
param3 UnicodeString |
Event ID 4260: Job <JobId>: Http Client <param1> failed for WebReportManager for configuration <param2>.
#Event ID 4261: Job <JobId>: WebReportManager for agent <param1> Send-DscStatus command with server url: <param2>.
#Event ID 4262: Job <JobId>: WebReportManager for agent <param1> Send-DscStatus command, POST Url: <param2>.
#Event ID 4263: Job <JobId>: WebReportManager for agent <param1> Send-DscStatus command using certificate id: <param2>.
#Event ID 4264: Job <JobId>: WebReportManager for agent <param1> Send-DscStatus command succeeded.
#Event ID 4265: Job <JobId>: Attempting to send the status report using Report Manager <ReportManagerName>.
#Event ID 4266: Job <JobId>: Successfully sent the status report using Report Manager <ReportManagerName>.
#Event ID 4267: Job <JobId>: Partial Configuration <PartialConfigurationName> not available on configuration server.
#Event ID 4268: Job <JobId>: LCM has resized the resource state cache.
#Event ID 4269: Job <JobId>: Restore default value due to corrupted MOF file <FileName>.
#Event ID 4270: The local configuration manager was shut down.
#Description
The local configuration manager was shut down.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DSC",
"guid": "{50DF9E12-A8C4-4939-B281-47E1325BA63E}",
"event_source_name": "",
"event_id": 4270,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-30T02:44:19.1116750+00:00",
"event_record_id": 48,
"correlation": {
"ActivityID": "{C593B7AD-BB71-4D84-8DDF-486161585923}"
},
"execution": {
"process_id": 6940,
"thread_id": 3036
},
"channel": "Microsoft-Windows-DSC/Operational",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {},
"message": "The local configuration manager was shut down."
}
Event ID 4271: The local configuration manager started.
#Description
The local configuration manager started.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DSC",
"guid": "{50DF9E12-A8C4-4939-B281-47E1325BA63E}",
"event_source_name": "",
"event_id": 4271,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-30T02:28:26.4817259+00:00",
"event_record_id": 3,
"correlation": {
"ActivityID": "{603B392B-5B0C-4D93-A76B-EEADDD96B7E7}"
},
"execution": {
"process_id": 11004,
"thread_id": 9864
},
"channel": "Microsoft-Windows-DSC/Operational",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {},
"message": "The local configuration manager started."
}
Event ID 4272: One of the input streams to the local configuration manager unexpectedly completed.
#Description
One of the input streams to the local configuration manager unexpectedly completed.
Message #
Event ID 4273: One of the input streams to the local configuration manager unexpectedly failed.
#Description
One of the input streams to the local configuration manager unexpectedly failed.
Message #
Event ID 4274: Job <JobId>: Pulling partial configuration <param1> from the server.
#Event ID 4275: Job <JobId>: Starting to apply partial configuration <param1>.
#Event ID 4276: Job <JobId>: Handling application of configurations in partial configuration mode based on the meta configuration definition.
#Event ID 4277: Job <JobId>: Looking into the partial configuration store to merge any present partial configurations.
#Event ID 4278: Job <JobId>: Merging partial configuration <param1> into pending.
#Event ID 4279: Job <JobId>: Validating the partial configuration <param1> for consistency in configuration Name and exclusive resources.
#Event ID 4280: Job <JobId>: Validating the document got from merging all partial configurations.
#Event ID 4281: Job <JobId>: Validating the partial configuration definition blocks inside the meta configuration.
#Event ID 4282: Job <JobId>: Validating that the name of the partial configuration <partialConfigName> is consistent across the partial configuration.
#Event ID 4283: Job <JobId>: Validating that the configuration source defined in each partial configuration inside the meta configuration are defined as configurat...
#Event ID 4284: Job <JobId>: Validating that the exclusive resources are not conflicting in the meta configuration definition.
#Event ID 4285: Job <JobId>: Validating if the exclusive resource <exclusiveResource> is written in the correct format.
#Event ID 4286: Job <JobId>: The local configuration manager has applied the configuration successfully.
#Event ID 4287: A crash has occured in Local Configuration Manager.
#Description
A crash has occured in Local Configuration Manager.
Message #
Event ID 4288: Job <JobId>: The local configuration manager did not find any current configuration to remove.
#Event ID 4289: Job <JobId>: The local configuration manager failed to remove the current configuration.
#Event ID 4290: Job <JobId>: The local configuration manager was able to successfully remove the current configuration.
#Event ID 4291: Job <JobId>: The local configuration manager is attempting to remove the pending configuration.
#Event ID 4292: Job <JobId>: The local configuration manager did not find any pending configuration to remove.
#Event ID 4293: Job <JobId>: The local configuration manager failed to remove the pending configuration.
#Event ID 4294: Job <JobId>: The local configuration manager was able to successfully remove the pending configuration.
#Event ID 4295: Job <JobId>: The local configuration manager is attempting to remove the previous configuration.
#Event ID 4296: Job <JobId>: The local configuration manager did not find any previous configuration to remove.
#Event ID 4297: Job <JobId>: The local configuration manager failed to remove the previous configuration.
#Event ID 4298: Job <JobId>: The local configuration manager was able to successfully remove the previous configuration.
#Event ID 4299: Job <JobId>: Could not wait for the stopping event.
#Event ID 4300: Job <JobId>: The local configuration manager is attempting to remove the current configuration.
#Event ID 4301: Job <JobId>: The local configuration manager is attempting to remove partial configurations.
#Event ID 4302: Job <JobId>: The local configuration manager was able to successfully remove partial configurations.
#Event ID 4303: Job <JobId>: The local configuration manager failed to remove partial configurations.
#Event ID 4304: Job <JobId>: The local configuration manager did not find any partial configurations to remove.
#Event ID 4305: Job <JobId>: The DownloadManager <Name> is invalid.
#Event ID 4306: Job <JobId>: The ReportManager <Name> is invalid.
#Event ID 4307: The DscTimer is going to start the consistency timer for the first time with value ConsistencyTimerValue minutes.
#Description
The DscTimer is going to start the consistency timer for the first time with value ConsistencyTimerValue minutes.
Message #
Fields #
| Name | Description |
|---|---|
ConsistencyTimerValue UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DSC",
"guid": "{50DF9E12-A8C4-4939-B281-47E1325BA63E}",
"event_source_name": "",
"event_id": 4307,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-30T02:28:29.2142403+00:00",
"event_record_id": 7,
"correlation": {
"ActivityID": "{31A12504-2E43-42ED-89C4-F2768523D20E}"
},
"execution": {
"process_id": 6660,
"thread_id": 14044
},
"channel": "Microsoft-Windows-DSC/Operational",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"ConsistencyTimerValue": "15"
},
"message": "The DscTimer is going to start the consistency timer for the first time with value 15 minutes."
}
Event ID 4308: The DscTimer is going to start the refresh timer for the first time with value RefreshTimerValue minutes.
#Description
The DscTimer is going to start the refresh timer for the first time with value RefreshTimerValue minutes.
Message #
Fields #
| Name | Description |
|---|---|
RefreshTimerValue UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DSC",
"guid": "{50DF9E12-A8C4-4939-B281-47E1325BA63E}",
"event_source_name": "",
"event_id": 4308,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-30T02:28:29.2142548+00:00",
"event_record_id": 9,
"correlation": {
"ActivityID": "{31A12504-2E43-42ED-89C4-F2768523D20E}"
},
"execution": {
"process_id": 6660,
"thread_id": 14044
},
"channel": "Microsoft-Windows-DSC/Operational",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"RefreshTimerValue": "30"
},
"message": "The DscTimer is going to start the refresh timer for the first time with value 30 minutes."
}
Event ID 4309: The DScTimer is updating the consistency timer to the value ConsistencyTimerValue minutes.
#Event ID 4310: The DscTimer is updating the refresh timer to the value RefreshTimerValue minutes.
#Event ID 4311: The DscTimer is going to invoke the consistency check for task of type REBOOT.
#Description
The DscTimer is going to invoke the consistency check for task of type REBOOT.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DSC",
"guid": "{50DF9E12-A8C4-4939-B281-47E1325BA63E}",
"event_source_name": "",
"event_id": 4311,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-30T02:28:34.2045292+00:00",
"event_record_id": 22,
"correlation": {
"ActivityID": "{EF441A92-7AB9-4844-8882-700D1A5FFEF3}"
},
"execution": {
"process_id": 6660,
"thread_id": 14044
},
"channel": "Microsoft-Windows-DSC/Operational",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-20"
}
},
"event_data": {},
"message": "The DscTimer is going to invoke the consistency check for task of type REBOOT."
}
Event ID 4312: The DscTimer is running LCM method PerformRequiredConfigurationChecks with the flag set to flag.
#Description
The DscTimer is running LCM method PerformRequiredConfigurationChecks with the flag set to flag.
Message #
Fields #
| Name | Description |
|---|---|
flag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DSC",
"guid": "{50DF9E12-A8C4-4939-B281-47E1325BA63E}",
"event_source_name": "",
"event_id": 4312,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-30T02:28:34.2075977+00:00",
"event_record_id": 23,
"correlation": {
"ActivityID": "{EF441A92-7AB9-4844-8882-700D1A5FFEF3}"
},
"execution": {
"process_id": 6660,
"thread_id": 14044
},
"channel": "Microsoft-Windows-DSC/Operational",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-20"
}
},
"event_data": {
"flag": "2"
},
"message": "The DscTimer is running LCM method PerformRequiredConfigurationChecks with the flag set to 2."
}
Event ID 4313: The DscTimer successfully created the consistency timer.
#Description
The DscTimer successfully created the consistency timer.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DSC",
"guid": "{50DF9E12-A8C4-4939-B281-47E1325BA63E}",
"event_source_name": "",
"event_id": 4313,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-30T02:28:29.2142508+00:00",
"event_record_id": 8,
"correlation": {
"ActivityID": "{31A12504-2E43-42ED-89C4-F2768523D20E}"
},
"execution": {
"process_id": 6660,
"thread_id": 14044
},
"channel": "Microsoft-Windows-DSC/Operational",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {},
"message": "The DscTimer successfully created the consistency timer."
}
Event ID 4314: The DscTimer successfully created the refresh timer.
#Description
The DscTimer successfully created the refresh timer.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DSC",
"guid": "{50DF9E12-A8C4-4939-B281-47E1325BA63E}",
"event_source_name": "",
"event_id": 4314,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-30T02:28:29.2142606+00:00",
"event_record_id": 10,
"correlation": {
"ActivityID": "{31A12504-2E43-42ED-89C4-F2768523D20E}"
},
"execution": {
"process_id": 6660,
"thread_id": 14044
},
"channel": "Microsoft-Windows-DSC/Operational",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {},
"message": "The DscTimer successfully created the refresh timer."
}
Event ID 4315: Job <JobId>: The local configuration manager is attempting to remove the configuration checksum.
#Event ID 4316: Job <JobId>: The local configuration manager did not find configuration checksum to remove.
#Event ID 4317: Job <JobId>: The local configuration manager failed to remove the configuration checksum.
#Event ID 4318: Job <JobId>: The local configuration manager was able to successfully remove the configuration checksum.
#Event ID 4319: Job <JobId>: The local configuration manager is updating the PSModulePath to <PSModulePath>.
#Description
Job <JobId>: The local configuration manager is updating the PSModulePath to <PSModulePath>.
Message #
Fields #
| Name | Description |
|---|---|
JobId UnicodeString | |
PSModulePath UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DSC",
"guid": "{50DF9E12-A8C4-4939-B281-47E1325BA63E}",
"event_source_name": "",
"event_id": 4319,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-30T02:43:31.2565900+00:00",
"event_record_id": 40,
"correlation": {
"ActivityID": "{D1FD61BC-C8F6-4EBD-9E0C-1264256DA64F}"
},
"execution": {
"process_id": 6940,
"thread_id": 3036
},
"channel": "Microsoft-Windows-DSC/Operational",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"JobId": "{56B1180A-5BD1-11F1-9661-9BD2E82CF0EE}",
"PSModulePath": "C:\\Program Files (x86)\\WindowsPowerShell\\Modules;C:\\Program Files\\WindowsPowerShell\\Modules;C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules"
},
"message": "Job {56B1180A-5BD1-11F1-9661-9BD2E82CF0EE} : \r\nThe local configuration manager is updating the PSModulePath to C:\\Program Files (x86)\\WindowsPowerShell\\Modules;C:\\Program Files\\WindowsPowerShell\\Modules;C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules."
}
Event ID 4320: Job <JobId>: The local configuration manager could not read the system environment registry for PSModulePath.
#Event ID 4321: Job <JobId>: PsDscRunAsCredential has been specified.
#Event ID 4322: Job <JobId>: Impersonation successful.
#Event ID 4323: Job <JobId>: Impersonation reverted.
#Event ID 4324: Job <JobId>: WebDownloadManager for AgentId <param1> Do-DscAction command with server url: <param2>.
#Event ID 4325: Job <JobId>: WebDownloadManager for AgentId <param1> Do-DscAction command using certificate id: <param2>.
#Event ID 4326: Job <JobId>: WebDownloadManager for AgentId <param1> Do-DscAction command, Http Client failed: <param2>.
#Event ID 4327: Job <JobId>: WebDownloadManager for AgentId <param1> Do-DscAction command, GET Url: <param2>.
#Event ID 4328: Job <JobId>: WebDownloadManager for AgentId <param1> Do-DscAction command, GET call result: <param2>.
#Event ID 4329: Job <JobId>: Register-DscAgent command for AgentId <AgentId>.
#Event ID 4332: Job <JobId>: Resource execution sequence:: <ResourceSequence>.
#Description
Job <JobId>: Resource execution sequence:: <ResourceSequence>.
Message #
Fields #
| Name | Description |
|---|---|
JobId UnicodeString | |
ResourceSequence UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DSC",
"guid": "{50DF9E12-A8C4-4939-B281-47E1325BA63E}",
"event_source_name": "",
"event_id": 4332,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-30T02:28:34.3958000+00:00",
"event_record_id": 27,
"correlation": {
"ActivityID": "{CEFBC89A-D2FC-000B-28AF-FECEFCD2DC01}"
},
"execution": {
"process_id": 11004,
"thread_id": 12916
},
"channel": "Microsoft-Windows-DSC/Operational",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"JobId": "{3C5F9840-5BCF-11F1-9661-9BD2E82CF0EE}",
"ResourceSequence": "[File]EvtGenFile, [Registry]EvtGenReg"
},
"message": "Job {3C5F9840-5BCF-11F1-9661-9BD2E82CF0EE} : \r\n Resource execution sequence :: [File]EvtGenFile, [Registry]EvtGenReg."
}
Event ID 4333: Job <JobId>: Attempting to get the configuration from pull server using Download Manager <DownloadManagerName>.
#Description
Job <JobId>: Attempting to get the configuration from pull server using Download Manager <DownloadManagerName>. AssignedConfigurationName is <AssignedConfigurationName>.
Message #
Fields #
| Name | Description |
|---|---|
JobId UnicodeString | |
DownloadManagerName UnicodeString | |
AssignedConfigurationName UnicodeString |
Event ID 4334: Job <JobId>: Attempting to get the modules from pull server using Download Manager <DownloadManagerName>.
#Event ID 4335: Job <JobId>: Checksum Validation failed.
#Event ID 4336: Job <JobId>: Server has returned a response of UpdateMetaConfiguration.
#Event ID 4337: Job <JobId>: A ServerUrl was not located in the metaconfiguration for AgentId <AgentId>.
#Event ID 4338: Job <JobId>: The current pull request-id is <requestId>.
#Event ID 4339: Job <JobId>: The server response was Header: <header> and Content:<content>.
#Event ID 4340: The DscTimer is going to start the timer to create task for sending pending report for the first time with value ReportingTimerValue minutes.
#Event ID 4341: The DScTimer is updating the timer to create task to send pending report to the value ConsistencyTimerValue minutes.
#Event ID 4342: The DscTimer successfully created the timer to create task for sending pending report.
#Description
The DscTimer successfully created the timer to create task for sending pending report.
Message #
Event ID 4343: The DscTimer has successfully run LCM method PerformRequiredConfigurationChecks with flag flag.
#Description
The DscTimer has successfully run LCM method PerformRequiredConfigurationChecks with flag flag.
Message #
Fields #
| Name | Description |
|---|---|
flag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DSC",
"guid": "{50DF9E12-A8C4-4939-B281-47E1325BA63E}",
"event_source_name": "",
"event_id": 4343,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-30T02:28:34.4834011+00:00",
"event_record_id": 33,
"correlation": {
"ActivityID": "{EF441A92-7AB9-4844-8882-700D1A5FFEF3}"
},
"execution": {
"process_id": 6660,
"thread_id": 14044
},
"channel": "Microsoft-Windows-DSC/Operational",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-20"
}
},
"event_data": {
"flag": "2"
},
"message": "The DscTimer has successfully run LCM method PerformRequiredConfigurationChecks with flag 2."
}
Event ID 4344: The DscTimer is already performing operation with flag flag,ignoring new request.
#Event ID 4345: The DSCStatusHistory.
#Event ID 4346: The DSCConfigurationStatus mof file not found at path.
#Event ID 4347: Deserializing mof path failed.
#Event ID 4348: Failed to process non-terminating error from resource 'resourceName'.
#Event ID 4349: Job <JobId>: The local configuration manager is attempting to remove the configuration state cache.
#Event ID 4350: Job <JobId>: The local configuration manager did not find any configuration state cache file to remove.
#Event ID 4351: Job <JobId>: The local configuration manager failed to remove the configuration state cache file.
#Event ID 4352: Job <JobId>: The local configuration manager was able to successfully remove the configuration state cache file.
#Event ID 4353: Job <JobId>: LCM has released the resource state cache.
#Event ID 4401: Job <JobId>: Attempting to register the Dsc agent with AgentId <AgentId> with the server <server> using Download Manager <DownloadManagerName>.
#Event ID 4402: Job <JobId>: Successfully registered the Dsc agent with AgentId <AgentId> with the server <server> using Download Manager <DownloadManagerName>.
#Event ID 4403: Job <JobId>: Registering Dsc Agent with Agent Id <AgentId>.
#Event ID 4404: Job <JobId>: Http Client <AgentId> failed to register Dsc Agent: <error>.
#Event ID 4405: Job <JobId>: Register-DscAgent command for AgentId <AgentId> succeeded.
#Event ID 4406: Job <JobId>: Register-DscAgent command for AgentId <AgentId> using certificate id: <CertId>.
#Event ID 4407: Job <JobId>: The Dsc Agent will generate a new AgentId.
#Description
Job <JobId>: The Dsc Agent will generate a new AgentId.
Message #
Fields #
| Name | Description |
|---|---|
JobId UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DSC",
"guid": "{50DF9E12-A8C4-4939-B281-47E1325BA63E}",
"event_source_name": "",
"event_id": 4407,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-30T02:28:26.4687680+00:00",
"event_record_id": 1,
"correlation": {
"ActivityID": "{603B392B-5B0C-4D93-A76B-EEADDD96B7E7}"
},
"execution": {
"process_id": 11004,
"thread_id": 9864
},
"channel": "Microsoft-Windows-DSC/Operational",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"JobId": "{3C5F9839-5BCF-11F1-9661-9BD2E82CF0EE}"
},
"message": "Job {3C5F9839-5BCF-11F1-9661-9BD2E82CF0EE} : \r\nThe Dsc Agent will generate a new AgentId."
}
Event ID 4408: Job <JobId>: Unable to write AgentId <AgentId> to registry.
#Event ID 4409: Job <JobId>: The Dsc Agent with AgentId <AgentId> has already been registered for the Server URL <Server>.
#Event ID 4410: Job <JobId>: Using Version 1 protocol of Dsc PULL.
#Event ID 4411: Job <JobId>: Attempt to register the Dsc Agent AgentId <AgentId> with Server URL <Server> since RegistrationKey was specified.
#Event ID 4412: Job <JobId>: The Dsc Agent with AgentId <AgentId> failed to create a self-signed certificate.
#Event ID 4413: Job <JobId>: The AgentId <AgentId> was written to the registry.
#Description
Job <JobId>: The AgentId <AgentId> was written to the registry.
Message #
Fields #
| Name | Description |
|---|---|
JobId UnicodeString | |
AgentId UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DSC",
"guid": "{50DF9E12-A8C4-4939-B281-47E1325BA63E}",
"event_source_name": "",
"event_id": 4413,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-30T02:28:26.4692240+00:00",
"event_record_id": 2,
"correlation": {
"ActivityID": "{603B392B-5B0C-4D93-A76B-EEADDD96B7E7}"
},
"execution": {
"process_id": 11004,
"thread_id": 9864
},
"channel": "Microsoft-Windows-DSC/Operational",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"JobId": "{3C5F9839-5BCF-11F1-9661-9BD2E82CF0EE}",
"AgentId": "3C5F983A-5BCF-11F1-9661-9BD2E82CF0EE"
},
"message": "Job {3C5F9839-5BCF-11F1-9661-9BD2E82CF0EE} : \r\nThe AgentId 3C5F983A-5BCF-11F1-9661-9BD2E82CF0EE was written to the registry."
}
Event ID 4501: Telemetry assembly assemblyName does not successfully load.
#Event ID 4502: Cannot get type typeName from loaded Dsc Telemetry assembly.
#Event ID 4503: An error occured when initializing event source instance for Dsc Telemetry assembly.
#Event ID 4504: Job <JobId>: WebDownloadManager for configuration associated with AgentId <param1> Get-DscDocument command, File save result: <param2>.
#Event ID 4505: Job <JobId>: WebDownloadManager for configuration associated with AgentId <param1> Get-DscDocument command, Checksum validation failed: <param2>.
#Event ID 4506: Job <JobId>: WebDownloadManager for configuration associated with AgentId <param1> Get-DscDocument command, GET Url: <param2>.
#Event ID 4507: Job <JobId>: WebDownloadManager for configuration associated with AgentId <param1> Get-DscDocument command, GET call result: <param2>.
#Event ID 4508: Job <JobId>: Attempting to send the status report using Report Manager <ReportManagerName>.
#Event ID 4509: Job <JobId>: Updating PSModulePath with the current value from the registry failed.
#Event ID 4510: Job JobId : errorno error writing to job details log logName.
#Event ID 4511: Job JobId : errorno error closing job details log logName.
#Event ID 4512: Job JobId : Details logging started to logName.
#Description
Job JobId : Details logging started to logName.
Message #
Fields #
| Name | Description |
|---|---|
JobId UnicodeString | |
logName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DSC",
"guid": "{50DF9E12-A8C4-4939-B281-47E1325BA63E}",
"event_source_name": "",
"event_id": 4512,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-30T02:28:34.2132300+00:00",
"event_record_id": 25,
"correlation": {
"ActivityID": "{DC261B5A-AEBD-41EB-ACFE-F2646C1474A8}"
},
"execution": {
"process_id": 11004,
"thread_id": 12916
},
"channel": "Microsoft-Windows-DSC/Operational",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"JobId": "{3C5F9840-5BCF-11F1-9661-9BD2E82CF0EE}",
"logName": "C:\\Windows\\system32\\configuration\\ConfigurationStatus\\{3C5F9840-5BCF-11F1-9661-9BD2E82CF0EE}-0.details.json"
},
"message": "Job {3C5F9840-5BCF-11F1-9661-9BD2E82CF0EE} : Details logging started to C:\\Windows\\system32\\configuration\\ConfigurationStatus\\{3C5F9840-5BCF-11F1-9661-9BD2E82CF0EE}-0.details.json."
}
Event ID 4513: Job JobId : Details logging completed for logName.
#Description
Job JobId : Details logging completed for logName.
Message #
Fields #
| Name | Description |
|---|---|
JobId UnicodeString | |
logName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DSC",
"guid": "{50DF9E12-A8C4-4939-B281-47E1325BA63E}",
"event_source_name": "",
"event_id": 4513,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-30T02:28:34.4794791+00:00",
"event_record_id": 32,
"correlation": {
"ActivityID": "{CEFBC89A-D2FC-0007-6EE6-13CFFCD2DC01}"
},
"execution": {
"process_id": 11004,
"thread_id": 12916
},
"channel": "Microsoft-Windows-DSC/Operational",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"JobId": "{3C5F9840-5BCF-11F1-9661-9BD2E82CF0EE}",
"logName": "C:\\Windows\\system32\\configuration\\ConfigurationStatus\\{3C5F9840-5BCF-11F1-9661-9BD2E82CF0EE}-0.details.json"
},
"message": "Job {3C5F9840-5BCF-11F1-9661-9BD2E82CF0EE} : Details logging completed for C:\\Windows\\system32\\configuration\\ConfigurationStatus\\{3C5F9840-5BCF-11F1-9661-9BD2E82CF0EE}-0.details.json."
}
Event ID 4514: Validating the signer signature chain failed with the status 'signatureStatus'.
#Event ID 4515: Failed to open trusted publisher store with the error 'message'.
#Event ID 4516: Failed to retrieve signing certificate information from the trusted publisher store with the error 'message'.
#Event ID 4517: Failed to parse trusted publisher store path with the error 'message'.
#Event ID 4518: Trusted publisher store path is : 'storeInfo'.
#Event ID 4519: Signature validation was successful.
#Description
Signature validation was successful. Signer certificate is valid and trusted.
Message #
Event ID 4520: Validating the signer signature trust failed.
#Description
Validating the signer signature trust failed. The signer certificate did not match with any valid code signing certificate that is installed on the node.
Message #
Event ID 4521: Validating the signer signature hash failed with the status 'signatureStatus'.
#Event ID 4522: Validating the signer signature failed with the status 'signatureStatus'.
#Event ID 4523: Validating the signature of the configuration document failed.
#Event ID 4524: Signature validation skipped becouse machine signature verification policy is set to 'currentMachinSignatureVerificationPolicy'.
#Event ID 4525: Extracting the downloaded zip file 'zipFileName' failed.
#Event ID 4526: The downloaded zip file 'zipFileName' does not contain a catalog file.
#Event ID 4527: Catalog signature verification failed for the downloaded zip file 'zipFileName'.
#Event ID 4528: Comparing the module catalalog with current contents of the module succeeded for module 'moduleName'.
#Event ID 4529: Comparing the module catalalog file with current contents of the module failed for the downloaded zip file '<zipFileName>'.
#Description
Comparing the module catalalog file with current contents of the module failed for the downloaded zip file '<zipFileName>'. Verify using 'Test-FileCatalog' cmdlet that contents of the module on the server has not changed after it is signed.
Message #
Fields #
| Name | Description |
|---|---|
zipFileName UnicodeString |
Event ID 4530: The Local Configuration Manager could not find the partial configuration block that matches the server assigned configuration document 'assignedConfigName'.
#Event ID 4531: The uncompressed file size of the downloaded zip file <zipFile>, exceeded the 'MaximumDownloadSizeMB' value of <limit> MB provided in the metaconfi...
#Description
The uncompressed file size of the downloaded zip file <zipFile>, exceeded the 'MaximumDownloadSizeMB' value of <limit> MB provided in the metaconfiguration. Please increase this value in the metaconfiguration if you are expecting module size greater than the current limit.
Message #
Fields #
| Name | Description |
|---|---|
zipFile UnicodeString | |
limit UInt32 |
Event ID 4601: Job <JobId>: Http Client <AgentId> failed to rotate Dsc Agent registration: <error>.
#Event ID 4602: Job <JobId>: Rotating Dsc Agent registration with Agent Id <AgentId>.
#Event ID 4603: Job <JobId>: Http Client <AgentId> received an unknown rotate header with the value: <HeaderValue>.
#Event ID 4604: Job <JobId>: Rotate-DscAgent command for AgentId <AgentId> succeeded.
#Event ID 4605: Job <JobId>: Rotate-DscAgent command for AgentId <AgentId> to certificate id: <CertId>.
#Provenance
Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.
ETW provider GUID 50df9e12-a8c4-4939-b281-47e1325ba63e
Defined in DscCoreR.dll, which carries the event manifest.
Observed on:
- WS2022-20348.4893 · schema read from the registered manifest · binary version 10.0.20348.1 · captured 2026-06-02
- Win11-26200.6584 · schema read from the registered manifest · binary version 10.0.26100.1 · captured 2026-06-02
Downloads
- Microsoft-Windows-DSC registered manifest XML (WS2022-20348.4893) manifest-xml
- Microsoft-Windows-DSC registered manifest XML (Win11-26200.6584) manifest-xml