Microsoft-Windows-NetworkAccessProtection
45 events across 2 channels
Event ID 1 — The System Health Agent {ComponentId} is installed but not registered with the NAP agent.
Message
Fields
| Name | Description |
|---|---|
ComponentId | — |
Event ID 2 — The System Health Agent {ComponentId} attempted to initialize; but failed because it has initialized already.
Message
Fields
| Name | Description |
|---|---|
ComponentId | — |
Event ID 3 — The System Health Agent {ComponentId} attempted to uninitialize but failed because it was not initialized.
Message
Fields
| Name | Description |
|---|---|
ComponentId | — |
Event ID 4 — The System Health Agent {ComponentId} successfully initialized.
Message
Fields
| Name | Description |
|---|---|
ComponentId | — |
Event ID 5 — The System Health Agent {ComponentId} successfully uninitialized.
Message
Fields
| Name | Description |
|---|---|
ComponentId | — |
Event ID 6 — The enforcement client {ComponentId} attempted to initialize but failed because it is not registered with the NAP agent.
Message
Fields
| Name | Description |
|---|---|
ComponentId | — |
Event ID 7 — The enforcement client {ComponentId} attempted to initialize but failed because it has already initialized.
Message
Fields
| Name | Description |
|---|---|
ComponentId | — |
Event ID 8 — The enforcement client {ComponentId} attempted to uninitialize but failed because it was not initialized.
Message
Fields
| Name | Description |
|---|---|
ComponentId | — |
Event ID 9 — The enforcement client {ComponentId} successfully initialized.
Message
Fields
| Name | Description |
|---|---|
ComponentId | — |
Event ID 10 — The enforcement client {ComponentId} successfully uninitialized.
Message
Fields
| Name | Description |
|---|---|
ComponentId | — |
Event ID 11 — Call to {FunctionName} on System Health Agent {ComponentId} failed with error {HResult}.
Message
Fields
| Name | Description |
|---|---|
FunctionName | — |
ComponentId | — |
HResult | — |
Event ID 12 — The enforcement client {ComponentId} failed the call to {FunctionName}.
Message
Fields
| Name | Description |
|---|---|
ComponentId | — |
FunctionName | — |
Event ID 13 — The Network Access Protection Agent failed to load the peripheral component {PeripheralName}.
Message
Fields
| Name | Description |
|---|---|
PeripheralName | — |
HResult | — |
Event ID 14 — A Statement of Health with correlation ID {CorrelationId} could not be created because the maximum size of the connection is too small.
Message
Fields
| Name | Description |
|---|---|
CorrelationId | — |
Event ID 15 — A Statement of Health Request with correlation ID {CorrelationId} could not include the following System Health Agents in the statement of Health: ...
Message
Fields
| Name | Description |
|---|---|
CorrelationId | — |
OverflowingShas | — |
Event ID 16 — A packet has been received with an unexpected correlation of {CorrelationIdReceived} instead of {CorrelationIdExpected}.
Message
Fields
| Name | Description |
|---|---|
CorrelationIdReceived | — |
CorrelationIdExpected | — |
Event ID 17 — The Statement of Health Response received configuration for the following SHAs that are not installed on this computer: {ComponentId}.
Message
Fields
| Name | Description |
|---|---|
ComponentId | — |
Event ID 18 — System Isolation State Change.
Message
Fields
| Name | Description |
|---|---|
CurrentIsolationState | — |
CurrentIsolationStateNumeric | — |
CurrentProbationTime | — |
CurrentFixupUrl | — |
PreviousIsolationState | — |
PreviousIsolationStateNumeric | — |
PreviousProbationTime | — |
PreviousFixupUrl | — |
Event ID 19 — The Network Access Protection Agent failed to acquire a certificate for the request with the correlation-id {CorrelationId} from {URL}.
Message
Fields
| Name | Description |
|---|---|
CorrelationId | — |
URL | — |
HResult | — |
Blackout | — |
Event ID 20 — The Network Access Protection Agent failed to acquire a certificate for the request with the correlation-id {CorrelationId} from {URL}.
Message
Fields
| Name | Description |
|---|---|
CorrelationId | — |
URL | — |
HResult | — |
Blackout | — |
Event ID 21 — The Network Access Protection Agent failed to acquire a certificate for the request with the correlation-id {CorrelationId} from {URL}.
Message
Fields
| Name | Description |
|---|---|
CorrelationId | — |
URL | — |
HResult | — |
Blackout | — |
Event ID 22 — The Network Access Protection Agent successfully acquired a certificate for the request with the correlation-id {CorrelationId} from {URL}.
Message
Fields
| Name | Description |
|---|---|
CorrelationId | — |
URL | — |
Thumbprint | — |
Event ID 23 — The Network Access Protection Agent successfully deleted the certificate with the thumbprint of {Thumbprint}.
Message
Fields
| Name | Description |
|---|---|
Thumbprint | — |
Event ID 24 — The Network Access Protection Agent failed to delete the certificate with the thumbprint of {Thumbprint}.
Message
Fields
| Name | Description |
|---|---|
Thumbprint | — |
HResult | — |
Event ID 25 — The client loaded NAP group policy.
Message
Event ID 26 — The NAP service has started.
Message
Fields
| Name | Description |
|---|---|
ComputerName | — |
DomainJoined | — |
OSSKU | — |
ProcessorType | — |
SP | — |
Event ID 27 — A Statement of Health with correlation ID {CorrelationId} was received from the System Health Agent {SHAId}.
Message
Fields
| Name | Description |
|---|---|
CorrelationId | — |
SHAId | — |
Duration | — |
Event ID 28 — A Statement of Health with correlation ID {CorrelationId} was sent to the enforcment client {QECId}.
Message
Fields
| Name | Description |
|---|---|
CorrelationId | — |
QECId | — |
Event ID 29 — A Statement of Health Response with correlation ID {CorrelationId} was received from the enforcement client {QECId}.
Message
Fields
| Name | Description |
|---|---|
CorrelationId | — |
QECId | — |
HealthState | — |
Shas | — |
FCS | — |
ProbationExpiry | — |
Help | — |
Duration | — |
Event ID 30 — The System Health Agent {SHAId} has returned an error code {Error}.
Message
Fields
| Name | Description |
|---|---|
SHAId | — |
Error | — |
Event ID 31 — The Network Access Protection agent failed to initialize the following enrollment configuration.
Message
Fields
| Name | Description |
|---|---|
Group | — |
CSP | — |
KeySpec | — |
Length | — |
SignatureAlgorithm | — |
Error | — |
Event ID 32 — The Network Access Protection Agent failed to acquire a certificate for the request with the correlation-id {CorrelationId} from {URL}.
Message
Fields
| Name | Description |
|---|---|
CorrelationId | — |
URL | — |
HResult | — |
Event ID 33 — The Network Access Protection Agent failed to acquire a certificate for the request with the correlation-id {CorrelationId} from {URL}.
Message
Fields
| Name | Description |
|---|---|
CorrelationId | — |
URL | — |
HResult | — |
Event ID 34 — The Network Access Protection Agent failed to acquire a certificate for the request with the correlation-id {CorrelationId} from {URL}.
Message
Fields
| Name | Description |
|---|---|
CorrelationId | — |
URL | — |
HResult | — |
Event ID 35 — The Network Access Protection agent failed to get a certificate for the request with correlation-id {CorrelationId} from {URL}.
Message
Fields
| Name | Description |
|---|---|
CorrelationId | — |
URL | — |
Blackout | — |
Event ID 36 — The Network Access Protection agent failed to get a certificate for the request with correlation-id {CorrelationId} from {URL}.
Message
Fields
| Name | Description |
|---|---|
CorrelationId | — |
URL | — |
HResult | — |
Blackout | — |
Event ID 37 — The Network Access Protection agent failed to get a certificate for the request with correlation-id {CorrelationId} from {URL}.
Message
Fields
| Name | Description |
|---|---|
CorrelationId | — |
URL | — |
Event ID 38 — The Network Access Protection agent failed to get a certificate for the request with correlation-id {CorrelationId} from {URL}.
Message
Fields
| Name | Description |
|---|---|
CorrelationId | — |
URL | — |
HResult | — |
Event ID 39 — The Network Access Protection Agent was unable to determine which HRAs to request a health certificate from.
Message
Event ID 40 — The Network Access Protection Agent has dynamically discovered the following HRAs for this network (using the query {Method}):{Urls}The DNS servers...
Message
Fields
| Name | Description |
|---|---|
Method | — |
Urls | — |
Dns | — |
Event ID 41 — System Isolation State Change.
Message
Fields
| Name | Description |
|---|---|
CurrentExtendedIsolationState | — |
CurrentExtendedIsolationStateNumeric | — |
PreviousExtendedIsolationState | — |
PreviousExtendedIsolationStateNumeric | — |
Event ID 42 — A Statement of Health Response with correlation ID {CorrelationId} was just received from the enforcement client {QECId}.
Message
Fields
| Name | Description |
|---|---|
CorrelationId | — |
QECId | — |
ExtendedHealthState | — |
Event ID 43 — The Network Access Protection Agent failed to deposit a certificate for the request with the correlation-id {CorrelationId} from {URL}.
Message
Fields
| Name | Description |
|---|---|
CorrelationId | — |
URL | — |
HResult | — |
Event ID 44 — The Network Access Protection Agent received a Statement of Health Response with correlation ID {CorrelationId}; that specified a probation end tim...
Message
Fields
| Name | Description |
|---|---|
CorrelationId | — |
ProbationExpiry | — |
Event ID 100 — Sending Health Information to WHC: {CurrentIsolationState}({hc_stateid}).
Message
Fields
| Name | Description |
|---|---|
CurrentIsolationState | — |
hc_stateid | — |