Microsoft-Windows-LanguagePackSetup
72 events across 4 channels
Event ID 1000 — CBS Client initialization failed.
Event ID 1001 — Application initialization failed.
Event ID 1002 — The Language Pack for Language has been disabled.
Event ID 1003 — CBS error Error reported while operating on UI Language Pack for Message.
Event ID 1004 — The command line argument Parameter is not valid.
Event ID 1005 — The command line argument Parameter is missing one or more required parameters.
Event ID 1006 — Invalid language Language specified as command line argument.
Event ID 1007 — No languages found or invalid path: Parameter.
Event ID 1008 — The file Language is not a valid Language Pack.
Event ID 1009 — Could not find language Language1.
Event ID 1010 — Error message suppressed from UI: Error.
Event ID 1011 — This computer must be restarted before attempting to install or remove languages
Description
This computer must be restarted before attempting to install or remove languages.
Message #
Event ID 1012 — The user does not have admin privilege.
Description
The user does not have admin privilege. Please run this command using a user account with admin privilege.
Message #
Event ID 1013 — The language pack for Language cannot be installed because it is already installed.
Event ID 1014 — The language pack for Language is not applicable for this system.
Event ID 1015 — The language pack version for Language does not match your current system.
Event ID 1016 — The language pack for Language1 cannot be installed because its parent language Language2 is not installed.
Event ID 1017 — The disk space needed to install language pack Language exceeds the available free disk space.
Event ID 1018 — CBS failed to install the language pack for Language.
Event ID 1040 — Cannot uninstall language pack for Language because it's not installed.
Event ID 1041 — You cannot uninstall language Language1 because the language is the parent language of language Language2.
Event ID 1042 — You cannot uninstall language Language because the language is the system installed UI language.
Event ID 1043 — CBS failed to remove the language pack for Language.
Event ID 1060 — Failed to change user UI language from Language1 to Language2.
Event ID 1061 — Failed to change system UI language from Language1 to Language2.
Event ID 2000 — Install of UI Language Pack for Language succeeded.
Event ID 2001 — Removal of UI Language Pack for Language succeeded.
Event ID 2002 — The call to NotifyUILanguageChange for language Language has failed with error Error.
Event ID 2003 — The call to NotifyUILanguageChange to change Machine UI language from PreviousLanguage to NewLanguage failed with error Error.
Event ID 2004 — Failed to change Machine UI language from PreviousLanguage to NewLanguage failed with error Error.
Event ID 2005 — UI Language Pack cleanup operation completed successfully
Description
UI Language Pack cleanup operation completed successfully.
Message #
Event ID 2006 — UI Language Pack cleanup operation failed
Description
UI Language Pack cleanup operation failed.
Message #
Event ID 2007 — Install of UI Language Pack for Language failed.
Event ID 2008 — Removal of UI Language Pack for Language failed.
Event ID 2009 — CBS installed language pack for Language successfully.
Event ID 2010 — CBS removed language pack for Language successfully.
Event ID 2011 — The call to notify NotifyUILanguageChange that a new language Language has been installed has failed with error Error.
Event ID 2012 — User UI language has been successfully changed from Language1 to Language2.
Event ID 2013 — System UI language has been successfully changed from Language1 to Language2.
Event ID 2014 — LpkSetup wizard operation has failed with error: Error.
Event ID 2015 — Validation for install of language Language has failed with error: Error.
Event ID 2016 — Validation for removal of language Language has failed with error: Error.
Event ID 3000 — Install of UI Language Pack for Language started.
Event ID 3001 — Removal of UI Language Pack for Language started.
Event ID 3002 — Actions for UI Language Pack for Language finished.
Event ID 3003 — Lpksetup wizard starts
Description
Lpksetup wizard starts.
Message #
Event ID 3004 — Lpksetup wizard exits
Description
Lpksetup wizard exits.
Message #
Event ID 3005 — Starts processing lpksetup command line
Description
Starts processing lpksetup command line.
Message #
Event ID 3006 — Finish processing lpksetup command line
Description
Finish processing lpksetup command line.
Message #
Event ID 4000 — LPRemove launched.
#Description
LPRemove launched.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-LanguagePackSetup",
"guid": "7237FFF9-A08A-4804-9C79-4A8704B70B87",
"event_source_name": "",
"event_id": 4000,
"version": 0,
"level": 4,
"task": 35,
"opcode": 1,
"keywords": 4611686018427387904,
"time_created": "2023-10-25T22:53:10.471931+00:00",
"event_record_id": 1,
"correlation": {},
"execution": {
"process_id": 7600,
"thread_id": 7584
},
"channel": "Microsoft-Windows-LanguagePackSetup/Operational",
"computer": "WinDevEval",
"security": {
"user_id": "S-1-5-21-2533829718-189860685-2477588761-500"
}
},
"event_data": {},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 4001 — LPRemove terminating.
#Description
LPRemove terminating.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-LanguagePackSetup",
"guid": "7237FFF9-A08A-4804-9C79-4A8704B70B87",
"event_source_name": "",
"event_id": 4001,
"version": 0,
"level": 4,
"task": 35,
"opcode": 2,
"keywords": 4611686018427387904,
"time_created": "2023-10-25T22:53:10.472288+00:00",
"event_record_id": 2,
"correlation": {},
"execution": {
"process_id": 7600,
"thread_id": 7584
},
"channel": "Microsoft-Windows-LanguagePackSetup/Operational",
"computer": "WinDevEval",
"security": {
"user_id": "S-1-5-21-2533829718-189860685-2477588761-500"
}
},
"event_data": {},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 4002 — Running in new boot (this is BootCount th boot lpremove tries to run).
Event ID 4003 — Run number BootCount across the boot CurrentSessionRunCount.
Event ID 4004 — Resetting run-time data due to new boot
Description
Resetting run-time data due to new boot.
Message #
Event ID 4005 — Maximum run attempt limit for a session (boot) reached.
Description
Maximum run attempt limit for a session (boot) reached. Next run will be attempted on after machine reboots.
Message #
Event ID 4006 — Maximum run attempt limit for overall amoutn of machine boots reached.
Description
Maximum run attempt limit for overall amoutn of machine boots reached. Lpremove won't run again. This is error situation meaning all prior runs have failed.
Message #
Event ID 4007 — LanguageCommitted value isn't set under System\CurrentControlSet\Control\MUI\UILanguages.
Description
LanguageCommitted value isn't set under System\CurrentControlSet\Control\MUI\UILanguages.(lpremove is terminating).
Message #
Event ID 4008 — lpremove failed launching lpksetup failed
Description
lpremove failed launching lpksetup failed.
Message #
Event ID 4009 — lpremove successfully launched lpksetup
Description
lpremove successfully launched lpksetup.
Message #
Event ID 4010 — LPRemove failed to obtain run data from registry.
Description
LPRemove failed to obtain run data from registry. Unscheduling LpRemove.
Message #
Event ID 4011 — LPRemove failed to incement run-data in registry.
Description
LPRemove failed to incement run-data in registry. Unscheduling LpRemove.
Message #
Event ID 4012 — LPRemove task failed to complete.
Description
LPRemove task failed to complete. Next scheduled run will try to complete the task.
Message #
Event ID 4013 — LPRemove encountered internal error.
Description
LPRemove encountered internal error.
Message #
Event ID 4014 — LPRemove failed to create a scheduled task for itself.
Description
LPRemove failed to create a scheduled task for itself.
Message #
Event ID 4015 — LPRemove executed in audit mode.
Description
LPRemove executed in audit mode. No tasks were performed.