Microsoft-Windows-Hyper-V-UiDevices

70 events across 3 channels

Event	Title	Channel
1500	[Virtual machine VmId]	Operational
1500	[Virtual machine VmId] TraceData.	Microsoft-Windows-Hyper-V-Worker-Analytic
1510	[Virtual machine VmId]	Operational
1510	[Virtual machine VmId] TraceData.	Microsoft-Windows-Hyper-V-Worker-Analytic
1520	[Virtual machine VmId]	Operational
1520	[Virtual machine VmId] TraceData.	Microsoft-Windows-Hyper-V-Worker-Analytic
1530	[Virtual machine VmId]	Operational
1530	[Virtual machine VmId] TraceData.	Microsoft-Windows-Hyper-V-Worker-Analytic
12460	'VmName' could not initialize machine remoting system	Operational
12460	'VmName' could not initialize machine remoting system.	Microsoft-Windows-Hyper-V-Worker-Admin
12461	Could not initialize machine remoting system	Operational
12461	Could not initialize machine remoting system.	Microsoft-Windows-Hyper-V-Worker-Admin
12480	'VmName' failure in machine remoting system	Operational
12480	'VmName' failure in machine remoting system.	Microsoft-Windows-Hyper-V-Worker-Admin
12481	Failure in machine remoting system	Operational
12481	Failure in machine remoting system.	Microsoft-Windows-Hyper-V-Worker-Admin
12530	'VmName' device Device could not allocate guest physical address space	Operational
12530	'VmName' device Device could not allocate guest physical address space.	Microsoft-Windows-Hyper-V-Worker-Admin
12531	Device Device could not allocate guest physical address space	Operational
12531	Device Device could not allocate guest physical address space.	Microsoft-Windows-Hyper-V-Worker-Admin
12540	'VmName' device Device experienced a protocol error indicative of a deep system …	Operational
12540	'VmName' device Device experienced a protocol error indicative of a deep system …	Microsoft-Windows-Hyper-V-Worker-Admin
12541	Device Device experienced a protocol error indicative of a deep system problem	Operational
12541	Device Device experienced a protocol error indicative of a deep system problem.	Microsoft-Windows-Hyper-V-Worker-Admin
12550	'VmName' device Device found bad data on restoring	Operational
12550	'VmName' device Device found bad data on restoring.	Microsoft-Windows-Hyper-V-Worker-Admin
12551	Device Device found bad data on restoring	Operational
12551	Device Device found bad data on restoring.	Microsoft-Windows-Hyper-V-Worker-Admin
32700	The Device device on VmName virtual machine experienced an error ErrorCode when …	Operational
32700	The Device device on VmName virtual machine experienced an error ErrorCode when …	Microsoft-Windows-Hyper-V-Worker-Admin
32701	The Device device on VmName virtual machine experienced an error ErrorCode when …	Operational
32701	The Device device on VmName virtual machine experienced an error ErrorCode when …	Microsoft-Windows-Hyper-V-Worker-Admin
32702	The Device device on VmName virtual machine experienced an error ErrorCode when …	Operational
32702	The Device device on VmName virtual machine experienced an error ErrorCode when …	Microsoft-Windows-Hyper-V-Worker-Admin
32703	The Device device on VmName virtual machine experienced a VMBus pipe error	Operational
32703	The Device device on VmName virtual machine experienced a VMBus pipe error …	Microsoft-Windows-Hyper-V-Worker-Admin
32704	The Device device on VmName virtual machine experienced an error ErrorCode when …	Operational
32704	The Device device on VmName virtual machine experienced an error ErrorCode when …	Microsoft-Windows-Hyper-V-Worker-Admin
32705	The Device device on VmName virtual machine experienced an error ErrorCode when …	Operational
32705	The Device device on VmName virtual machine experienced an error ErrorCode when …	Microsoft-Windows-Hyper-V-Worker-Admin
32706	The horizontal resolution is below the minimum value of 100	Operational
32706	The horizontal resolution is below the minimum value of 100.	Microsoft-Windows-Hyper-V-Worker-Admin
32707	The horizontal resolution is above the maximum value of 7680	Operational
32707	The horizontal resolution is above the maximum value of 7680.	Microsoft-Windows-Hyper-V-Worker-Admin
32708	The horizontal resolution must be an even number	Operational
32708	The horizontal resolution must be an even number.	Microsoft-Windows-Hyper-V-Worker-Admin
32709	The vertical resolution is below the minimum value of 100	Operational
32709	The vertical resolution is below the minimum value of 100.	Microsoft-Windows-Hyper-V-Worker-Admin
32710	The vertical resolution is above the maximum value of 7680	Operational
32710	The vertical resolution is above the maximum value of 7680.	Microsoft-Windows-Hyper-V-Worker-Admin
32711	The vertical resolution must be an even number	Operational
32711	The vertical resolution must be an even number.	Microsoft-Windows-Hyper-V-Worker-Admin
32712	At least one of horizontal and vertical resolutions must be equal to or larger …	Operational
32712	At least one of horizontal and vertical resolutions must be equal to or larger …	Microsoft-Windows-Hyper-V-Worker-Admin
32713	At least one of horizontal and vertical resolutions must be equal to or smaller …	Operational
32713	At least one of horizontal and vertical resolutions must be equal to or smaller …	Microsoft-Windows-Hyper-V-Worker-Admin
32714	The resolution type must be Maximum (2), Single (3) or Default (4)	Operational
32714	The resolution type must be Maximum (2), Single (3) or Default (4).	Microsoft-Windows-Hyper-V-Worker-Admin
32715	The VmName virtual machine must be turned off when setting resolution type, …	Operational
32715	The VmName virtual machine must be turned off when setting resolution type, …	Microsoft-Windows-Hyper-V-Worker-Admin
32716	The configuration version of VmName virtual machine does not support setting …	Operational
32716	The configuration version of VmName virtual machine does not support setting …	Microsoft-Windows-Hyper-V-Worker-Admin
32717	The configuration version of the virtual machine does not support setting the …	Operational
32717	The configuration version of the virtual machine does not support setting the …	Microsoft-Windows-Hyper-V-Worker-Admin
32718	HorizontalResolution or VerticalResolution cannot be set when ResolutionType is …	Operational
32718	HorizontalResolution or VerticalResolution cannot be set when ResolutionType is …	Microsoft-Windows-Hyper-V-Worker-Admin
32719	The virtual machine VmName cannot load device Device because there are no …	Operational
32719	The virtual machine VmName cannot load device Device because there are no …	Microsoft-Windows-Hyper-V-Worker-Admin
32720	The device Device cannot be loaded because there are no mutually support …	Operational
32720	The device Device cannot be loaded because there are no mutually support …	Microsoft-Windows-Hyper-V-Worker-Admin

Event ID 1500: [Virtual machine VmId]

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

[Virtual machine ].

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 1500: [Virtual machine VmId] TraceData.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Analytic

Description

[Virtual machine VmId] TraceData.

Message #

[Virtual machine %3] %1

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 1510: [Virtual machine VmId]

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

[Virtual machine ].

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 1510: [Virtual machine VmId] TraceData.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Analytic

Description

[Virtual machine VmId] TraceData.

Message #

[Virtual machine %3] %1

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 1520: [Virtual machine VmId]

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

[Virtual machine ].

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 1520: [Virtual machine VmId] TraceData.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Analytic

Description

[Virtual machine VmId] TraceData.

Message #

[Virtual machine %3] %1

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 1530: [Virtual machine VmId]

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

[Virtual machine ].

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 1530: [Virtual machine VmId] TraceData.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Analytic

Description

[Virtual machine VmId] TraceData.

Message #

[Virtual machine %3] %1

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 12460: 'VmName' could not initialize machine remoting system

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

'VmName' could not initialize machine remoting system. Error: 'ErrorCodeString'(ErrorCode). (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString

Event ID 12460: 'VmName' could not initialize machine remoting system.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' could not initialize machine remoting system. Error: 'ErrorCodeString'(ErrorCode). (Virtual machine ID VmId).

Message #

'%1' could not initialize machine remoting system. Error: '%3'(%4). (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString

Event ID 12461: Could not initialize machine remoting system

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

Could not initialize machine remoting system. Error: 'ErrorCodeString' (ErrorCode).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString

Event ID 12461: Could not initialize machine remoting system.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

Could not initialize machine remoting system. Error: 'ErrorCodeString' (ErrorCode).

Message #

Could not initialize machine remoting system. Error: '%3' (%4).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString

Event ID 12480: 'VmName' failure in machine remoting system

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

'VmName' failure in machine remoting system. Error: 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString

Event ID 12480: 'VmName' failure in machine remoting system.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' failure in machine remoting system. Error: 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).

Message #

'%1' failure in machine remoting system. Error: '%3' (%4). (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString

Event ID 12481: Failure in machine remoting system

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

Failure in machine remoting system. Error: 'ErrorCodeString' (ErrorCode).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString

Event ID 12481: Failure in machine remoting system.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

Failure in machine remoting system. Error: 'ErrorCodeString' (ErrorCode).

Message #

Failure in machine remoting system. Error: '%3' (%4).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString

Event ID 12530: 'VmName' device Device could not allocate guest physical address space

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

'VmName' device Device could not allocate guest physical address space. (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString

Event ID 12530: 'VmName' device Device could not allocate guest physical address space.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' device Device could not allocate guest physical address space. (Virtual machine ID VmId).

Message #

'%1' device %3 could not allocate guest physical address space. (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString

Event ID 12531: Device Device could not allocate guest physical address space

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

Device could not allocate guest physical address space.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString

Event ID 12531: Device Device could not allocate guest physical address space.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

Device Device could not allocate guest physical address space.

Message #

Device %3 could not allocate guest physical address space.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString

Event ID 12540: 'VmName' device Device experienced a protocol error indicative of a deep system problem

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

'VmName' device Device experienced a protocol error indicative of a deep system problem. (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString

Event ID 12540: 'VmName' device Device experienced a protocol error indicative of a deep system problem.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' device Device experienced a protocol error indicative of a deep system problem. (Virtual machine ID VmId).

Message #

'%1' device %3 experienced a protocol error indicative of a deep system problem. (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString

Event ID 12541: Device Device experienced a protocol error indicative of a deep system problem

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

Device experienced a protocol error indicative of a deep system problem.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString

Event ID 12541: Device Device experienced a protocol error indicative of a deep system problem.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

Device Device experienced a protocol error indicative of a deep system problem.

Message #

Device %3 experienced a protocol error indicative of a deep system problem.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString

Event ID 12550: 'VmName' device Device found bad data on restoring

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

'VmName' device Device found bad data on restoring. (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString

Event ID 12550: 'VmName' device Device found bad data on restoring.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' device Device found bad data on restoring. (Virtual machine ID VmId).

Message #

'%1' device %3 found bad data on restoring. (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString

Event ID 12551: Device Device found bad data on restoring

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

Device found bad data on restoring.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString

Event ID 12551: Device Device found bad data on restoring.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

Device Device found bad data on restoring.

Message #

Device %3 found bad data on restoring.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString

Event ID 32700: The Device device on VmName virtual machine experienced an error ErrorCode when sending a VMBus message

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The device on virtual machine experienced an error when sending a VMBus message. (Virtual machine ID ).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`ContextParam1` UInt32
`ContextParam2` UInt32
`ContextParam3` UInt32

Event ID 32700: The Device device on VmName virtual machine experienced an error ErrorCode when sending a VMBus message.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The Device device on VmName virtual machine experienced an error ErrorCode when sending a VMBus message. (Virtual machine ID VmId).

Message #

The %3 device on %1 virtual machine experienced an error %5 when sending a VMBus message. (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`ContextParam1` UInt32
`ContextParam2` UInt32
`ContextParam3` UInt32

Event ID 32701: The Device device on VmName virtual machine experienced an error ErrorCode when processing an incoming message

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The device on virtual machine experienced an error when processing an incoming message. (Virtual machine ID ).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`ContextParam1` UInt32
`ContextParam2` UInt32
`ContextParam3` UInt32

Event ID 32701: The Device device on VmName virtual machine experienced an error ErrorCode when processing an incoming message.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The Device device on VmName virtual machine experienced an error ErrorCode when processing an incoming message. (Virtual machine ID VmId).

Message #

The %3 device on %1 virtual machine experienced an error %5 when processing an incoming message. (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`ContextParam1` UInt32
`ContextParam2` UInt32
`ContextParam3` UInt32

Event ID 32702: The Device device on VmName virtual machine experienced an error ErrorCode when completing an outgoing message

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The device on virtual machine experienced an error when completing an outgoing message. (Virtual machine ID ).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`ContextParam1` UInt32
`ContextParam2` UInt32
`ContextParam3` UInt32

Event ID 32702: The Device device on VmName virtual machine experienced an error ErrorCode when completing an outgoing message.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The Device device on VmName virtual machine experienced an error ErrorCode when completing an outgoing message. (Virtual machine ID VmId).

Message #

The %3 device on %1 virtual machine experienced an error %5 when completing an outgoing message. (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`ContextParam1` UInt32
`ContextParam2` UInt32
`ContextParam3` UInt32

Event ID 32703: The Device device on VmName virtual machine experienced a VMBus pipe error

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The device on virtual machine experienced a VMBus pipe error . (Virtual machine ID ).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`ContextParam1` UInt32
`ContextParam2` UInt32
`ContextParam3` UInt32

Event ID 32703: The Device device on VmName virtual machine experienced a VMBus pipe error ErrorCode.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The Device device on VmName virtual machine experienced a VMBus pipe error ErrorCode. (Virtual machine ID VmId).

Message #

The %3 device on %1 virtual machine experienced a VMBus pipe error %5. (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`ContextParam1` UInt32
`ContextParam2` UInt32
`ContextParam3` UInt32

Event ID 32704: The Device device on VmName virtual machine experienced an error ErrorCode when processing a cursor shape update message

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The device on virtual machine experienced an error when processing a cursor shape update message. (Virtual machine ID ).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`ContextParam1` UInt32
`ContextParam2` UInt32
`ContextParam3` UInt32

Event ID 32704: The Device device on VmName virtual machine experienced an error ErrorCode when processing a cursor shape update message.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The Device device on VmName virtual machine experienced an error ErrorCode when processing a cursor shape update message. (Virtual machine ID VmId).

Message #

The %3 device on %1 virtual machine experienced an error %5 when processing a cursor shape update message. (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`ContextParam1` UInt32
`ContextParam2` UInt32
`ContextParam3` UInt32

Event ID 32705: The Device device on VmName virtual machine experienced an error ErrorCode when processing a dirty region message

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The device on virtual machine experienced an error when processing a dirty region message. (Virtual machine ID ).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`ContextParam1` UInt32
`ContextParam2` UInt32
`ContextParam3` UInt32

Event ID 32705: The Device device on VmName virtual machine experienced an error ErrorCode when processing a dirty region message.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The Device device on VmName virtual machine experienced an error ErrorCode when processing a dirty region message. (Virtual machine ID VmId).

Message #

The %3 device on %1 virtual machine experienced an error %5 when processing a dirty region message. (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`ContextParam1` UInt32
`ContextParam2` UInt32
`ContextParam3` UInt32

Event ID 32706: The horizontal resolution is below the minimum value of 100

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The horizontal resolution is below the minimum value of 100.

Event ID 32706: The horizontal resolution is below the minimum value of 100.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The horizontal resolution is below the minimum value of 100.

Message #

The horizontal resolution is below the minimum value of 100.

Event ID 32707: The horizontal resolution is above the maximum value of 7680

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The horizontal resolution is above the maximum value of 7680.

Event ID 32707: The horizontal resolution is above the maximum value of 7680.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The horizontal resolution is above the maximum value of 7680.

Message #

The horizontal resolution is above the maximum value of 7680.

Event ID 32708: The horizontal resolution must be an even number

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The horizontal resolution must be an even number.

Event ID 32708: The horizontal resolution must be an even number.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The horizontal resolution must be an even number.

Message #

The horizontal resolution must be an even number.

Event ID 32709: The vertical resolution is below the minimum value of 100

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The vertical resolution is below the minimum value of 100.

Event ID 32709: The vertical resolution is below the minimum value of 100.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The vertical resolution is below the minimum value of 100.

Message #

The vertical resolution is below the minimum value of 100.

Event ID 32710: The vertical resolution is above the maximum value of 7680

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The vertical resolution is above the maximum value of 7680.

Event ID 32710: The vertical resolution is above the maximum value of 7680.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The vertical resolution is above the maximum value of 7680.

Message #

The vertical resolution is above the maximum value of 7680.

Event ID 32711: The vertical resolution must be an even number

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The vertical resolution must be an even number.

Event ID 32711: The vertical resolution must be an even number.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The vertical resolution must be an even number.

Message #

The vertical resolution must be an even number.

Event ID 32712: At least one of horizontal and vertical resolutions must be equal to or larger than 640

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

At least one of horizontal and vertical resolutions must be equal to or larger than 640.

Event ID 32712: At least one of horizontal and vertical resolutions must be equal to or larger than 640.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

At least one of horizontal and vertical resolutions must be equal to or larger than 640.

Message #

At least one of horizontal and vertical resolutions must be equal to or larger than 640.

Event ID 32713: At least one of horizontal and vertical resolutions must be equal to or smaller than 4320

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

At least one of horizontal and vertical resolutions must be equal to or smaller than 4320.

Event ID 32713: At least one of horizontal and vertical resolutions must be equal to or smaller than 4320.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

At least one of horizontal and vertical resolutions must be equal to or smaller than 4320.

Message #

At least one of horizontal and vertical resolutions must be equal to or smaller than 4320.

Event ID 32714: The resolution type must be Maximum (2), Single (3) or Default (4)

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The resolution type must be Maximum (2), Single (3) or Default (4). Please run 'Get-Help Set-VMVideo -Detailed' for details.

Event ID 32714: The resolution type must be Maximum (2), Single (3) or Default (4).

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The resolution type must be Maximum (2), Single (3) or Default (4). Please run 'Get-Help Set-VMVideo -Detailed' for details.

Message #

The resolution type must be Maximum (2), Single (3) or Default (4). Please run 'Get-Help Set-VMVideo -Detailed' for details.

Event ID 32715: The VmName virtual machine must be turned off when setting resolution type, horizontal resolution or vertical resolution

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The virtual machine must be turned off when setting resolution type, horizontal resolution or vertical resolution. (Virtual machine ID ).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString

Event ID 32715: The VmName virtual machine must be turned off when setting resolution type, horizontal resolution or vertical resolution.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The VmName virtual machine must be turned off when setting resolution type, horizontal resolution or vertical resolution. (Virtual machine ID VmId).

Message #

The %1 virtual machine must be turned off when setting resolution type, horizontal resolution or vertical resolution. (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString

Event ID 32716: The configuration version of VmName virtual machine does not support setting resolution type, horizontal resolution or vertical resolution

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The configuration version of virtual machine does not support setting resolution type, horizontal resolution or vertical resolution. (Virtual machine ID ).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString

Event ID 32716: The configuration version of VmName virtual machine does not support setting resolution type, horizontal resolution or vertical resolution.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The configuration version of VmName virtual machine does not support setting resolution type, horizontal resolution or vertical resolution. (Virtual machine ID VmId).

Message #

The configuration version of %1 virtual machine does not support setting resolution type, horizontal resolution or vertical resolution. (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString

Event ID 32717: The configuration version of the virtual machine does not support setting the property LockOnDisconnect to non-default value

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The configuration version of the virtual machine does not support setting the property LockOnDisconnect to non-default value.

Event ID 32717: The configuration version of the virtual machine does not support setting the property LockOnDisconnect to non-default value.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The configuration version of the virtual machine does not support setting the property LockOnDisconnect to non-default value.

Message #

The configuration version of the virtual machine does not support setting the property LockOnDisconnect to non-default value.

Event ID 32718: HorizontalResolution or VerticalResolution cannot be set when ResolutionType is Default

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

HorizontalResolution or VerticalResolution cannot be set when ResolutionType is Default.

Event ID 32718: HorizontalResolution or VerticalResolution cannot be set when ResolutionType is Default.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

HorizontalResolution or VerticalResolution cannot be set when ResolutionType is Default.

Message #

HorizontalResolution or VerticalResolution cannot be set when ResolutionType is Default.

Event ID 32719: The virtual machine VmName cannot load device Device because there are no mutually supported protocol versions

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The virtual machine cannot load device because there are no mutually supported protocol versions. The server version is and the client version is (Virtual machine ID ).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ServerVersion` UnicodeString
`ClientVersion` UnicodeString

Event ID 32719: The virtual machine VmName cannot load device Device because there are no mutually supported protocol versions.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The virtual machine VmName cannot load device Device because there are no mutually supported protocol versions. The server version is ServerVersion and the client version is ClientVersion (Virtual machine ID VmId).

Message #

The virtual machine %1 cannot load device %3 because there are no mutually supported protocol versions. The server version is %4 and the client version is %5 (Virtual machine ID %2).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ServerVersion` UnicodeString
`ClientVersion` UnicodeString

Event ID 32720: The device Device cannot be loaded because there are no mutually support protocol versions between the server and client

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The device cannot be loaded because there are no mutually support protocol versions between the server and client.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ServerVersion` UnicodeString
`ClientVersion` UnicodeString

Event ID 32720: The device Device cannot be loaded because there are no mutually support protocol versions between the server and client.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The device Device cannot be loaded because there are no mutually support protocol versions between the server and client.

Message #

The device %3 cannot be loaded because there are no mutually support protocol versions between the server and client.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ServerVersion` UnicodeString
`ClientVersion` UnicodeString

Provenance

Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.

ETW provider GUID 339aad0a-4124-4968-8147-4cbbb1f8b3d5

Defined in VmUiDevices.dll, which carries the event manifest.

Observed on:

Win11-26200.6584 · schema read from the registered manifest · binary version 10.0.26100.1 · captured 2026-06-02

Downloads

Microsoft-Windows-Hyper-V-UiDevices registered manifest XML (Win11-26200.6584) manifest-xml

Credits

Microsoft - authored the ETW manifests and PDBs the schema comes from
jdu2600 - the event-schema TSV format this catalog adopted
nasbench - the tool that dumps registered providers and manifests

`j` / `k`	Scroll down / up
`d` / `u`	Half-page down / up
`gg` / `G`	Top / bottom
`h` / `l`	History back / forward
`f`	Follow link (`Shift` = new tab)
`/`	Focus search
`?`	Toggle this help
`↑` / `↓`	Navigate search results
`Enter`	Open highlighted result
`Esc`	Close results / dialog

`type:`	`events` / `rules` / `providers`
`vendor:`	`sigma` / `elastic` / `splunk` / `kusto` / `chronicle` (vendor name alone also works: `sigma:`, `kql:`, `secops:`…)
`tactic:`	TA-id, slug, or name: `credential_access`, `TA0006`
`technique:`	technique or sub-technique ID: `T1003`, `T1003.001` (alias `tech:`)
`severity:`	`critical` / `high` / `medium` / `low` / `informational` (alias `sev:`)
`stages:`	Rules with exactly N pipeline stages
`correlation:`	`single_event` / `sequence` / `alternatives` / `alternatives_cross_log` / `all_required` / `correlated`
`with:`	Co-occurrence event-id; stacks (`with:4624 with:4769`) to require all, while a comma list in one occurrence (`with:4624,4769`) is an either-or group. Implies multi-event
`like:`	Structural neighbors of a rule slug (equivalents + subsumption stricter / broader): `like:comsvcs_lsass_memory_dump-splunk-sysmon`
`groupby:`	Entity-grouping substring match against `group_by_keys`: `groupby:user`, `groupby:host`
`uses:`	Rules whose predicate tree touches the field (any kind, any value): `uses:CommandLine`
`excludes:`	Rules with top-level `not()` clauses on the field (FP whitelists): `excludes:ParentImage`
`field:` / `value:`	Predicate search; narrows rule cards to those with a matching leaf and drives the indicator tier. Unquoted = substring, wildcards allowed (`value:mimikatz`)
`indicator:`	Shorthand for `field:F value:V`: `indicator:Image=*\powershell.exe`
`kind:`	Filter by predicate kind. Narrows rule cards to those carrying a matching predicate leaf (`vendor:elastic kind:cidr_match`) and drives the indicator tier: `contains` / `starts_with` / `ends_with` / `regex` / `cidr` / `eq` / `in` … (operator aliases `op:`/`match:`)
`has:` / `no:`	`sample`, `field`, `notes`, `refs`, `trace`, `thirdparty`, `rule`, `pattern`, `timewindow`, `threshold`, `newterms`, `sigma`/`elastic`/`splunk`/`kusto`/`chronicle`
`-op:val`	Exclude matches; works on most operators but not `type:`/`like:`/`has:`/`no:` (use `no:<flag>` to exclude a rule flag): `tactic:execution -vendor:splunk`. Standalone `-kind:`/`-field:`/`-value:` drop every rule carrying a matching predicate leaf (`type:rules -kind:is_null`)
`field:"…"` / `value:"…"`	Quoted value = anchored exact match (also allows spaces): `value:"net user"`
`a,b`	Comma = OR inside one operator (`vendor:sigma,elastic`, `severity:high,critical`); repeating a facet merges the same way. `field:`/`value:` never split (literal commas)
`vendors:` / `stage:`	Singular and plural spellings fold to the canonical operator and value: `tactics:` = `tactic:`, `type:event` = `type:events`, `correlation:sequences` = `correlation:sequence`, `has:thresholds` = `has:threshold`
`"quoted phrase"`	Exact-match a multi-word phrase (free text)