Microsoft-Windows-LiveId
235 events across 2 channels
Event ID 1002 — LsaApLogonUserEx2_Stop.
Description
LsaApLogonUserEx2_Stop.Status: {Status}.
Message #
Fields #
| Name | Description |
|---|---|
Status | — NTSTATUS reference |
Event ID 1004 — SpOnProfileLoaded_Stop.
Description
SpOnProfileLoaded_Stop.ServiceCalled: {ServiceCalled} Status: {Status}.
Message #
Fields #
| Name | Description |
|---|---|
ServiceCalled | — |
Status | — NTSTATUS reference |
Event ID 1005 — ConnectIdentity_Start
Description
ConnectIdentity_Start.
Message #
Event ID 1006 — ConnectIdentity_Stop.
Description
ConnectIdentity_Stop.
Message #
Fields #
| Name | Description |
|---|---|
Status Int32 | — NTSTATUS reference |
Result Int32 | — |
Event ID 1007 — DisconnectIdentity_Start
Description
DisconnectIdentity_Start.
Message #
Event ID 1008 — DisconnectIdentity_Stop.
Description
DisconnectIdentity_Stop.
Message #
Fields #
| Name | Description |
|---|---|
Status Int32 | — NTSTATUS reference |
Result Int32 | — |
Event ID 1010 — LiveDoCachedLogon_Stop.
Event ID 1012 — LiveAuthenticate_Stop.
Description
LiveAuthenticate_Stop.Status: {Status}.
Message #
Fields #
| Name | Description |
|---|---|
Status | — NTSTATUS reference |
Event ID 1013 — NetworkCall_Start
Description
NetworkCall_Start.
Message #
Event ID 1014 — NetworkCall_Stop.
Event ID 1015 — DeviceAuth_Start
Description
DeviceAuth_Start.
Message #
Event ID 1016 — DeviceAuth_Stop.
Description
DeviceAuth_Stop.
Message #
Fields #
| Name | Description |
|---|---|
Status | — NTSTATUS reference |
TicketsCached Boolean | — |
Result HexInt32 | — |
Event ID 1017 — UserAuth_Start
Description
UserAuth_Start.
Message #
Event ID 1018 — UserAuth_Stop.
Description
UserAuth_Stop.
Message #
Fields #
| Name | Description |
|---|---|
Status | — NTSTATUS reference |
TicketsCached Boolean | — |
Result HexInt32 | — |
Event ID 1019 — PromptForCredentials_Start
Description
PromptForCredentials_Start.
Message #
Event ID 1020 — PromptForCredentials_Stop.
Description
PromptForCredentials_Stop.
Message #
Fields #
| Name | Description |
|---|---|
Status Int32 | — NTSTATUS reference |
Result Int32 | — |
Event ID 1021 — SignOutUser_RegistryOpenOrReadFailure.
Description
SignOutUser_RegistryOpenOrReadFailure.
Message #
Fields #
| Name | Description |
|---|---|
RegistryLocation UnicodeString | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 1022 — SignOutUser_RegistryWriteFailure.
Description
SignOutUser_RegistryWriteFailure.
Message #
Fields #
| Name | Description |
|---|---|
RegistryLocation UnicodeString | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 2008 — DeviceAuthAsync_Start
Description
DeviceAuthAsync_Start.
Message #
Event ID 2009 — DeviceAuthAsync_Stop
Description
DeviceAuthAsync_Stop.
Message #
Event ID 2010 — UserAuthAsync_Start
Description
UserAuthAsync_Start.
Message #
Event ID 2011 — UserAuthAsync_Stop
Description
UserAuthAsync_Stop.
Message #
Event ID 2012 — SignOutUser_Start
Description
SignOutUser_Start.
Message #
Event ID 2013 — SignOutUser_Stop
Description
SignOutUser_Stop.
Message #
Event ID 2014 — WLIDSvcReady
Description
WLIDSvcReady.
Message #
Event ID 2015 — CommandLinkClicked_Start
Description
CommandLinkClicked_Start.
Message #
Event ID 2016 — CommandLinkClicked_Stop.
Description
CommandLinkClicked_Stop.
Message #
Fields #
| Name | Description |
|---|---|
Status Int32 | — NTSTATUS reference |
Result Int32 | — |
Event ID 2017 — UserImageGetBitmapValue_Start
Description
UserImageGetBitmapValue_Start.
Message #
Event ID 2018 — UserImageGetBitmapValue_Stop.
Description
UserImageGetBitmapValue_Stop.
Message #
Fields #
| Name | Description |
|---|---|
Status Int32 | — NTSTATUS reference |
Result Int32 | — |
Event ID 2019 — CredProvSetSerialization_Start
Description
CredProvSetSerialization_Start.
Message #
Event ID 2020 — CredProvSetSerialization_Stop.
Description
CredProvSetSerialization_Stop.
Message #
Fields #
| Name | Description |
|---|---|
Status Int32 | — NTSTATUS reference |
Result Int32 | — |
Event ID 2021 — CredProvGetSerialization_Start
Description
CredProvGetSerialization_Start.
Message #
Event ID 2022 — CredProvGetSerialization_Stop.
Description
CredProvGetSerialization_Stop.
Message #
Fields #
| Name | Description |
|---|---|
Status Int32 | — NTSTATUS reference |
Result Int32 | — |
Event ID 2023 — Operation: Operation.
Description
Operation: Operation.
Message #
Fields #
| Name | Description |
|---|---|
Operation UnicodeString | — Known values
|
Details UnicodeString | — |
Status HexInt32 | — NTSTATUS reference |
Target UnicodeString | — |
Result HexInt32 | — |
Event ID 2024 — Operation: Operation.
#Description
Operation: Operation.
Message #
Fields #
| Name | Description |
|---|---|
Operation UnicodeString | — Known values
|
Details UnicodeString | — |
Status HexInt32 | — NTSTATUS reference |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-LiveId",
"guid": "05F02597-FE85-4E67-8542-69567AB8FD4F",
"event_source_name": "",
"event_id": 2024,
"version": 0,
"level": 4,
"task": 101,
"opcode": 0,
"keywords": 4611686018427387920,
"time_created": "2023-11-06T06:25:38.920252+00:00",
"event_record_id": 264,
"correlation": {},
"execution": {
"process_id": 1612,
"thread_id": 1804
},
"channel": "Microsoft-Windows-LiveId/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Operation": "Service started",
"Details": "The service will auto stop if no requests received for some period of time.",
"Status": "0x0"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 2025 — WLIDSvc service failed to start.
Description
WLIDSvc service failed to start.
Message #
Fields #
| Name | Description |
|---|---|
Function UnicodeString | — |
Reason UnicodeString | — |
Status HexInt32 | — NTSTATUS reference |
Operation UnicodeString | — Known values
|
Result HexInt32 | — |
Event ID 2026 — Generic telemetry trigger event.
Event ID 2027 — User specific telemetry trigger event for CID cid.
Event ID 2028 — ErrorVerifier in function FunctionName encountered unexpected error code (ErrorCode).
#Description
ErrorVerifier in function FunctionName encountered unexpected error code (ErrorCode).
Message #
Fields #
| Name | Description |
|---|---|
FunctionName AnsiString | — |
ErrorCode Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-LiveId",
"guid": "05F02597-FE85-4E67-8542-69567AB8FD4F",
"event_source_name": "",
"event_id": 2028,
"version": 0,
"level": 2,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387907,
"time_created": "2023-10-25T22:54:26.591047+00:00",
"event_record_id": 263,
"correlation": {
"ActivityID": "00CC000C-001A-0000-B413-F819803D1770"
},
"execution": {
"process_id": 5044,
"thread_id": 5856
},
"channel": "Microsoft-Windows-LiveId/Operational",
"computer": "WinDevEval",
"security": {
"user_id": "S-1-5-21-2533829718-189860685-2477588761-500"
}
},
"event_data": {
"FunctionName": "TokenProviderImplementation::GetTokensFromService",
"ErrorCode": -2147187452
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 2029 — Assertion failure for expression ({Expression}) in function {FunctionName} @{FileName}_{LineNumber}.
Event ID 3000 — description @FileName_LineNumber.
Event ID 3001 — description @FileName_LineNumber.
Event ID 3002 — description @FileName_LineNumber.
Event ID 3003 — description @FileName_LineNumber.
Event ID 3004 — description @FileName_LineNumber.
Event ID 3005 — description @FileName_LineNumber.
Event ID 3006 — description @FileName_LineNumber.
Event ID 3007 — description @FileName_LineNumber.
Event ID 3008 — +.
Event ID 3012 — Process name ProcessName.
Event ID 3013 — IF_FAILEXIT failure: (Expression), hr = ErrorCode, in FunctionName @FileName_LineNumber.
Event ID 3015 — description @FileName_LineNumber.
Event ID 3016 — description @FileName_LineNumber.
Event ID 4000 — description @FileName_LineNumber.
Event ID 4001 — description @FileName_LineNumber.
Event ID 4002 — description @FileName_LineNumber.
Event ID 4003 — description @FileName_LineNumber.
Event ID 4004 — description @FileName_LineNumber.
Event ID 4005 — description @FileName_LineNumber.
Event ID 4006 — description @FileName_LineNumber.
Event ID 4007 — description @FileName_LineNumber.
Event ID 4008 — +.
Event ID 4012 — Process name ProcessName.
Event ID 4013 — IF_FAILEXIT failure: (Expression), hr = ErrorCode, in FunctionName @FileName_LineNumber.
Event ID 4015 — description @FileName_LineNumber.
Event ID 4016 — description @FileName_LineNumber.
Event ID 5000 — description @FileName_LineNumber.
Event ID 5001 — description @FileName_LineNumber.
Event ID 5002 — description @FileName_LineNumber.
Event ID 5003 — description @FileName_LineNumber.
Event ID 5004 — description @FileName_LineNumber.
Event ID 5005 — description @FileName_LineNumber.
Event ID 5006 — description @FileName_LineNumber.
Event ID 5007 — description @FileName_LineNumber.
Event ID 5008 — +.
Event ID 5012 — Process name ProcessName.
Event ID 5013 — IF_FAILEXIT failure: (Expression), hr = ErrorCode, in FunctionName @FileName_LineNumber.
Event ID 5015 — description @FileName_LineNumber.
Event ID 5016 — description @FileName_LineNumber.
Event ID 6000 — description @FileName_LineNumber.
Event ID 6001 — description @FileName_LineNumber.
Event ID 6002 — description @FileName_LineNumber.
Event ID 6003 — description @FileName_LineNumber.
Event ID 6004 — description @FileName_LineNumber.
Event ID 6005 — description @FileName_LineNumber.
Event ID 6006 — description @FileName_LineNumber.
Event ID 6007 — description @FileName_LineNumber.
Event ID 6008 — +.
Event ID 6012 — Process name ProcessName.
Event ID 6013 — IF_FAILEXIT failure: (Expression), hr = ErrorCode, in FunctionName @FileName_LineNumber.
Event ID 6015 — description @FileName_LineNumber.
Event ID 6016 — description @FileName_LineNumber.
Event ID 6100 — Service Create Context for [value].
Event ID 6101 — Token with target [TargetName] expired on ExpiryTime, Deleting it from CredMan.
Event ID 6102 — Certificate (target = [value]) has expired.
Event ID 6103 — RemoveCachedAuthInfo Deleting item for target [value] from CredMan.
Event ID 6104 — RemoveCachedAuthInfo ALL Deleting [value] items from CredMan.
Event ID 6105 — RemovePersistedTokens Deleting item for target [value] from CredMan.
Event ID 6106 — Attempting to delete for target [.
Event ID 6107 — Write to CredMan failed for target [.
Event ID 6108 — Writing Token for target [.
Event ID 6109 — CredEnumerateW failed for target [.
Event ID 6110 — CredEnumerateW found no match for target [.
Event ID 6111 — DeleteStoredCredential Deleting item for target [.
Event ID 6112 — CredMan activity skipped.
Event ID 6113 — RPC call to function FunctionName returned the following error code: ErrorCode.
#Description
RPC call to function FunctionName returned the following error code: ErrorCode.
Message #
Fields #
| Name | Description |
|---|---|
FunctionName AnsiString | — |
ErrorCode UInt32 | 1 returned the following error code. |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-LiveId",
"guid": "05F02597-FE85-4E67-8542-69567AB8FD4F",
"event_source_name": "",
"event_id": 6113,
"version": 0,
"level": 2,
"task": 0,
"opcode": 0,
"keywords": 4611686018431584274,
"time_created": "2023-11-06T06:25:46.083912+00:00",
"event_record_id": 267,
"correlation": {},
"execution": {
"process_id": 1612,
"thread_id": 1804
},
"channel": "Microsoft-Windows-LiveId/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"FunctionName": "WLIDCleanupIdentity",
"ErrorCode": 2147942487
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 6114 — SOAP Request of type RequestType for user CID 'cid' in MachineEnvironment environment received the following error code from the Microsoft Account server: ErrorCode.
#Description
SOAP Request of type RequestType for user CID 'cid' in MachineEnvironment environment received the following error code from the Microsoft Account server: ErrorCode.
Message #
Fields #
| Name | Description |
|---|---|
RequestType UInt32 | — |
cid AnsiString | — |
ErrorCode UInt32 | 4 environment received the following error code from the Microsoft Account server. |
MachineEnvironment AnsiString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-LiveId",
"guid": "05F02597-FE85-4E67-8542-69567AB8FD4F",
"event_source_name": "",
"event_id": 6114,
"version": 0,
"level": 2,
"task": 0,
"opcode": 0,
"keywords": 4611686018429487122,
"time_created": "2023-11-05T22:32:46.332962+00:00",
"event_record_id": 329,
"correlation": {},
"execution": {
"process_id": 7324,
"thread_id": 7420
},
"channel": "Microsoft-Windows-LiveId/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-19"
}
},
"event_data": {
"RequestType": 2,
"cid": "NULL",
"ErrorCode": 2147759380,
"MachineEnvironment": "production"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 6115 — ## SOAP Request: Value.
#Description
## SOAP Request: Value.
Message #
Fields #
| Name | Description |
|---|---|
Value AnsiString | ## SOAP Request. |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-LiveId",
"guid": "05F02597-FE85-4E67-8542-69567AB8FD4F",
"event_source_name": "",
"event_id": 6115,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 4611686018429487104,
"time_created": "2023-11-06T06:25:40.033392+00:00",
"event_record_id": 266,
"correlation": {},
"execution": {
"process_id": 1612,
"thread_id": 1816
},
"channel": "Microsoft-Windows-LiveId/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Value": "<DeviceAddRequest><ClientInfo name=\"IDCRL\" version=\"1.0\"><BinaryVersion>*</BinaryVersion></ClientInfo><Authentication><Membername>*</Membername><Password>*</Password></Authentication><OldMembername>*</OldMembername><ReprovisionReason>*</ReprovisionReason></DeviceAddRequest>"
},
"message": ""
}
Community Notes #
Windows LiveId sign-in activity.
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 6116 — ## SOAP Response: Value.
#Description
## SOAP Response: Value.
Message #
Fields #
| Name | Description |
|---|---|
Value AnsiString | ## SOAP Response. |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-LiveId",
"guid": "05F02597-FE85-4E67-8542-69567AB8FD4F",
"event_source_name": "",
"event_id": 6116,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 4611686018429487104,
"time_created": "2023-11-06T01:57:51.138250+00:00",
"event_record_id": 405,
"correlation": {},
"execution": {
"process_id": 13988,
"thread_id": 19532
},
"channel": "Microsoft-Windows-LiveId/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-21-1992711665-1655669231-58201500-1000"
}
},
"event_data": {
"Value": "<S:Envelope><S:Header><wsa:Action wsu:Id=\"Action\" S:mustUnderstand=\"1\">*</wsa:Action><wsa:To wsu:Id=\"To\" S:mustUnderstand=\"1\">*</wsa:To><wsse:Security><wsu:Timestamp wsu:Id=\"TS\"><wsu:Created>2023-11-06T01:57:50Z</wsu:Created><wsu:Expires>2023-11-06T02:02:50Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id=\"SignKey\" Algorithm=\"urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED\"><wsse:SecurityTokenReference><wsse:Reference URI=\"V02OjHTFUWobDCwGy07UJ1IBPq4=\"></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wssc:DerivedKeyToken wsu:Id=\"EncKey\" Algorithm=\"urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED\"><wsse:SecurityTokenReference><wsse:Reference URI=\"V02OjHTFUWobDCwGy07UJ1IBPq4=\"></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns=\"http://www.w3.org/2000/09/xmldsig#\"><SignedInfo><CanonicalizationMethod Algorithm=\"http://www.w3.org/2001/10/xml-exc-c14n#\"></CanonicalizationMethod><SignatureMethod Algorithm=\"http://www.w3.org/2001/04/xmldsig-more#hmac-sha256\"></SignatureMethod><Reference URI=\"#EncPsf\"><Transforms><Transform Algorithm=\"http://www.w3.org/2001/10/xml-exc-c14n#\"></Transform></Transforms><DigestMethod Algorithm=\"http://www.w3.org/2001/04/xmlenc#sha256\"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI=\"#Body\"><Transforms><Transform Algorithm=\"http://www.w3.org/2001/10/xml-exc-c14n#\"></Transform></Transforms><DigestMethod Algorithm=\"http://www.w3.org/2001/04/xmlenc#sha256\"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI=\"#To\"><Transforms><Transform Algorithm=\"http://www.w3.org/2001/10/xml-exc-c14n#\"></Transform></Transforms><DigestMethod Algorithm=\"http://www.w3.org/2001/04/xmlenc#sha256\"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI=\"#Action\"><Transforms><Transform Algorithm=\"http://www.w3.org/2001/10/xml-exc-c14n#\"></Transform></Transforms><DigestMethod Algorithm=\"http://www.w3.org/2001/04/xmlenc#sha256\"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI=\"#TS\"><Transforms><Transform Algorithm=\"http://www.w3.org/2001/10/xml-exc-c14n#\"></Transform></Transforms><DigestMethod Algorithm=\"http://www.w3.org/2001/04/xmlenc#sha256\"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI=\"#SignKey\"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo></Signature><e:ReferenceList xmlns:e=\"http://www.w3.org/2001/04/xmlenc#\"><e:DataReference URI=\"#RSTR\"/><e:DataReference URI=\"#EncPsf\"/></e:ReferenceList></wsse:Security><psf:EncryptedPP><EncryptedData xmlns=\"http://www.w3.org/2001/04/xmlenc#\" Id=\"EncPsf\" Type=\"http://www.w3.org/2001/04/xmlenc#Element\"><EncryptionMethod Algorithm=\"http://www.w3.org/2001/04/xmlenc#aes256-cbc\"></EncryptionMethod><KeyInfo xmlns=\"http://www.w3.org/2000/09/xmldsig#\"><wsse:SecurityTokenReference><wsse:Reference URI=\"#EncKey\"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></psf:EncryptedPP></S:Header><S:Body wsu:Id=\"Body\"><EncryptedData xmlns=\"http://www.w3.org/2001/04/xmlenc#\" Id=\"RSTR\" Type=\"http://www.w3.org/2001/04/xmlenc#Element\"><EncryptionMethod Algorithm=\"http://www.w3.org/2001/04/xmlenc#aes256-cbc\"></EncryptionMethod><KeyInfo xmlns=\"http://www.w3.org/2000/09/xmldsig#\"><wsse:SecurityTokenReference><wsse:Reference URI=\"#EncKey\"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></S:Body></S:Envelope>"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 6117 — Acquired Service token.
#Description
Acquired Service token.
Message #
Fields #
| Name | Description |
|---|---|
ResourceURI AnsiString | — |
Created SYSTEMTIME | — |
Expires SYSTEMTIME | — |
TokenType AnsiString | — |
AuthRequired Int32 | — |
RequestStatus Int32 | — |
HasFlowUrl Boolean | — |
HasAuthUrl Boolean | — |
HasEndAuthUrl Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-LiveId",
"guid": "05F02597-FE85-4E67-8542-69567AB8FD4F",
"event_source_name": "",
"event_id": 6117,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 4611686018429487104,
"time_created": "2023-11-06T01:57:51.264021+00:00",
"event_record_id": 406,
"correlation": {},
"execution": {
"process_id": 13988,
"thread_id": 19532
},
"channel": "Microsoft-Windows-LiveId/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-21-1992711665-1655669231-58201500-1000"
}
},
"event_data": {
"ResourceURI": "https://watson.telemetry.microsoft.com",
"Created": "2023-11-05T17:57:50.000000Z",
"Expires": "2023-11-06T17:57:50.000000Z",
"TokenType": "urn:passport:compact",
"AuthRequired": 0,
"RequestStatus": 0,
"HasFlowUrl": false,
"HasAuthUrl": false,
"HasEndAuthUrl": false
},
"message": ""
}
Community Notes #
Windows LiveId sign-in activity.
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 7000 — description @FileName_LineNumber.
Event ID 7001 — description @FileName_LineNumber.
Event ID 7002 — description @FileName_LineNumber.
Event ID 7003 — description @FileName_LineNumber.
Event ID 7004 — description @FileName_LineNumber.
Event ID 7005 — description @FileName_LineNumber.
Event ID 7006 — description @FileName_LineNumber.
Event ID 7007 — description @FileName_LineNumber.
Event ID 7008 — +.
Event ID 7012 — Process name ProcessName.
Event ID 7013 — IF_FAILEXIT failure: (Expression), hr = ErrorCode, in FunctionName @FileName_LineNumber.
Event ID 7015 — description @FileName_LineNumber.
Event ID 7016 — description @FileName_LineNumber.
Event ID 7100 — Cached ticket for site Uri and policy Policy found which is valid for another TimeToLive seconds.
Event ID 7101 — ApplicationId Overwritten [value1] becomes [value2].
Event ID 7102 — ApplicationId [value].
Event ID 7103 — Cached ticket for site value1 and policy value2 not found or has expired.
Event ID 7104 — Attempts = [Attempts], latestIterationResult = [latestIterationResult], continueRetry = [continueRetry], isConnected = [isConnected], flowUrl = [flowUrl], defaultUser = [defaultUser], promptType = ...
Description
Attempts = [Attempts], latestIterationResult = [latestIterationResult], continueRetry = [continueRetry], isConnected = [isConnected], flowUrl = [flowUrl], defaultUser = [defaultUser], promptType = [promptType], authUrl = [authUrl], endAuthUrl = [authUrl].
Message #
Fields #
| Name | Description |
|---|---|
Attempts UInt32 | — |
latestIterationResult UInt32 | — |
continueRetry Boolean | — |
isConnected Boolean | — |
flowUrl UnicodeString | — |
defaultUser UnicodeString | — |
promptType UInt32 | — |
authUrl UnicodeString | — |
endAuthUrl UnicodeString | — |