Microsoft-Windows-ParentalControls

21 events across 1 channel

Event ID 1 — A Setting changed inside of the parental controls settings

Provider
Microsoft-Windows-ParentalControls
Channel
Operational

Message

A Setting changed inside of the parental controls settings

Fields

NameDescription
Class
Setting
AccountOwner
OldValue
NewValue
Reason
Optional

Event ID 2 — Generated when a game is run

Provider
Microsoft-Windows-ParentalControls
Channel
Operational

Message

Generated when a game is run

Fields

NameDescription
AppID
InstanceID
Version
Path
Rating
RatingsSystem
Reason
DescriptorCount
Descriptor
PID

Event ID 3 — Generated when a URL is visited

Provider
Microsoft-Windows-ParentalControls
Channel
Operational

Message

Generated when a URL is visited

Fields

NameDescription
URL
Application
Version
Reason
RatingSystemID
CategoryCount
Category

Event ID 4 — Generated with an Email is Received

Provider
Microsoft-Windows-ParentalControls
Channel
Operational

Message

Generated with an Email is Received

Fields

NameDescription
Sender
Application
Version
Subject
Reason
RecipientCount
Recipient
AttachmentCount
AttachmentName
ReceivedTime
EmailAccount

Event ID 5 — Generated with an Email is Sent

Provider
Microsoft-Windows-ParentalControls
Channel
Operational

Message

Generated with an Email is Sent

Fields

NameDescription
Sender
Application
Version
Subject
Reason
RecipientCount
Recipient
AttachmentCount
AttachmentName
EmailAccount

Event ID 6 — Generated when some media is played

Provider
Microsoft-Windows-ParentalControls
Channel
Operational

Message

Generated when some media is played

Fields

NameDescription
Application
Version
MediaType
Path
Title
PML
Album
ExplicitContent
Reason

Event ID 7 — Generated when an IM Invitiation is sent

Provider
Microsoft-Windows-ParentalControls
Channel
Operational

Message

Generated when an IM Invitiation is sent

Fields

NameDescription
Application
Version
AccountName
ConversationID
RequestingIP
Sender
Reason
RecipientCount
Recipient

Event ID 8 — Generated when a user Joins an IM conversation

Provider
Microsoft-Windows-ParentalControls
Channel
Operational

Message

Generated when a user Joins an IM conversation

Fields

NameDescription
Application
Version
AccountName
ConversationID
JoiningIP
JoiningUser
Reason
MemberCount
Member
Sender

Event ID 9 — Generated when a user leaves an IM conversation

Provider
Microsoft-Windows-ParentalControls
Channel
Operational

Message

Generated when a user leaves an IM conversation

Fields

NameDescription
Application
Version
AccountName
ConversationID
LeavingIP
LeavingUser
Reason
MemberCount
Member
Flags

Event ID 10 — Generated when a user downloads a file

Provider
Microsoft-Windows-ParentalControls
Channel
Operational

Message

Generated when a user downloads a file

Fields

NameDescription
URL
Application
Version
Reason
Path

Event ID 11 — Generated when one of the IM features is used, like web chat, audio

Provider
Microsoft-Windows-ParentalControls
Channel
Operational

Message

Generated when one of the IM features is used, like web chat, audio

Fields

NameDescription
Application
Version
AccountName
ConversationID
MediaType
Reason
RecipientCount
Recipient
Sender
SenderIP
Data

Event ID 13 — Generated by external apps that want to log parental control information

Provider
Microsoft-Windows-ParentalControls
Channel
Operational

Message

Generated by external apps that want to log parental control information

Fields

NameDescription
Publisher
Application
Version
Event
Value1
Value2
Value3
Blocked
Reason

Event ID 14 — Generated when an email contact is changed

Provider
Microsoft-Windows-ParentalControls
Channel
Operational

Message

Generated when an email contact is changed

Fields

NameDescription
Application
Version
OldName
OldAddress
NewName
NewAddress
Reason
EmailAccount

Event ID 15 — Generated when an IM contact is changed

Provider
Microsoft-Windows-ParentalControls
Channel
Operational

Message

Generated when an IM contact is changed

Fields

NameDescription
Application
Version
AccountName
OldName
OldID
NewName
NewID
Reason

Event ID 16 — Generated when an application is blocked from running

Provider
Microsoft-Windows-ParentalControls
Channel
Operational

Message

Generated when an application is blocked from running

Fields

NameDescription
Timestamp
UserID
Path
RuleID

Event ID 17 — Generated when an application override is requested

Provider
Microsoft-Windows-ParentalControls
Channel
Operational

Message

Generated when an application override is requested

Fields

NameDescription
UserID
Path
Reason

Event ID 18 — Generated when a url override is requested

Provider
Microsoft-Windows-ParentalControls
Channel
Operational

Message

Generated when a url override is requested

Fields

NameDescription
UserID
URL
Reason

Event ID 19 — Generated when a website is visited

Provider
Microsoft-Windows-ParentalControls
Channel
Operational

Message

Generated when a website is visited

Fields

NameDescription
Url
Decision
Categories
BlockedCategories
SerializedApplication
Title
ContentType
Referrer
Telemetry

Event ID 20 — Generated when an application is started, stopped or blocked

Provider
Microsoft-Windows-ParentalControls
Channel
Operational

Message

Generated when an application is started, stopped or blocked

Fields

NameDescription
SerializedApplication
State
ProcessId
CreationTime
TimeUsed

Event ID 21 — Generated when the computer is used

Provider
Microsoft-Windows-ParentalControls
Channel
Operational

Message

Generated when the computer is used

Fields

NameDescription
Id
TimeUsed

Event ID 22 — Generated when content is used or blocked

Provider
Microsoft-Windows-ParentalControls
Channel
Operational

Message

Generated when content is used or blocked

Fields

NameDescription
ContentProviderId
ContentProviderTitle
Id
Title
Category
Ratings
Decision