Microsoft-Windows-Privacy-Auditing-Activity-History-Privacy-Settings

8 events across 1 channel

Event ID 0 — Cloud sync allowed value changed, setting SettingName, from OldConsentValue to NewConsentValue.

Provider
Microsoft-Windows-Privacy-Auditing-Activity-History-Privacy-Settings
Channel
Operational
Task
ValueChanged

Description

Cloud sync allowed value changed, setting SettingName, from OldConsentValue to NewConsentValue.

Message #

Cloud sync allowed value changed, setting %12, from %4 to %5

Fields #

NameDescription
CallerUserSid UnicodeString
CallerProcessName UnicodeString
CallerAppPackageFamilyName UnicodeString
OldConsentValue UInt16
NewConsentValue UInt16
SetByHigherAuthority Boolean
EffectiveConsentValue UInt16
TargetUserSid UnicodeString
ConsentID UnicodeString
AppPackageFamilyName UnicodeString
HResult HexInt32
SettingName UnicodeString

Event ID 1 — Cloud sync allowed value change, setting SettingName, failed.

Provider
Microsoft-Windows-Privacy-Auditing-Activity-History-Privacy-Settings
Channel
Operational
Task
ValueChanged

Description

Cloud sync allowed value change, setting SettingName, failed.

Message #

Cloud sync allowed value change, setting %12, failed

Fields #

NameDescription
CallerUserSid UnicodeString
CallerProcessName UnicodeString
CallerAppPackageFamilyName UnicodeString
OldConsentValue UInt16
NewConsentValue UInt16
SetByHigherAuthority Boolean
EffectiveConsentValue UInt16
TargetUserSid UnicodeString
ConsentID UnicodeString
AppPackageFamilyName UnicodeString
HResult HexInt32
SettingName UnicodeString

Event ID 2 — History collection allowed value changed, setting SettingName, from OldConsentValue to NewConsentValue.

Provider
Microsoft-Windows-Privacy-Auditing-Activity-History-Privacy-Settings
Channel
Operational
Task
ValueChanged

Description

History collection allowed value changed, setting SettingName, from OldConsentValue to NewConsentValue.

Message #

History collection allowed value changed, setting %12, from %4 to %5

Fields #

NameDescription
CallerUserSid UnicodeString
CallerProcessName UnicodeString
CallerAppPackageFamilyName UnicodeString
OldConsentValue UInt16
NewConsentValue UInt16
SetByHigherAuthority Boolean
EffectiveConsentValue UInt16
TargetUserSid UnicodeString
ConsentID UnicodeString
AppPackageFamilyName UnicodeString
HResult HexInt32
SettingName UnicodeString

Event ID 3 — History collection allowed value change, setting SettingName, failed.

Provider
Microsoft-Windows-Privacy-Auditing-Activity-History-Privacy-Settings
Channel
Operational
Task
ValueChanged

Description

History collection allowed value change, setting SettingName, failed.

Message #

History collection allowed value change, setting %12, failed

Fields #

NameDescription
CallerUserSid UnicodeString
CallerProcessName UnicodeString
CallerAppPackageFamilyName UnicodeString
OldConsentValue UInt16
NewConsentValue UInt16
SetByHigherAuthority Boolean
EffectiveConsentValue UInt16
TargetUserSid UnicodeString
ConsentID UnicodeString
AppPackageFamilyName UnicodeString
HResult HexInt32
SettingName UnicodeString

Event ID 4 — Clear activity history, setting SettingName, sucess.

Provider
Microsoft-Windows-Privacy-Auditing-Activity-History-Privacy-Settings
Channel
Operational
Task
ClearActivityHistory

Description

Clear activity history, setting SettingName, sucess.

Message #

Clear activity history, setting %12, sucess

Fields #

NameDescription
CallerUserSid UnicodeString
CallerProcessName UnicodeString
CallerAppPackageFamilyName UnicodeString
OldConsentValue UnicodeString
NewConsentValue UnicodeString
SetByHigherAuthority Boolean
EffectiveConsentValue UnicodeString
TargetUserSid UnicodeString
ConsentID UnicodeString
AppPackageFamilyName UnicodeString
HResult HexInt32
SettingName UnicodeString

Event ID 5 — Clear activity history, setting SettingName, failed.

Provider
Microsoft-Windows-Privacy-Auditing-Activity-History-Privacy-Settings
Channel
Operational
Task
ClearActivityHistory

Description

Clear activity history, setting SettingName, failed.

Message #

Clear activity history, setting %12, failed

Fields #

NameDescription
CallerUserSid UnicodeString
CallerProcessName UnicodeString
CallerAppPackageFamilyName UnicodeString
OldConsentValue UnicodeString
NewConsentValue UnicodeString
SetByHigherAuthority Boolean
EffectiveConsentValue UnicodeString
TargetUserSid UnicodeString
ConsentID UnicodeString
AppPackageFamilyName UnicodeString
HResult HexInt32
SettingName UnicodeString

Event ID 6 — Account filter value changed, setting SettingName, from OldConsentValue to NewConsentValue.

Provider
Microsoft-Windows-Privacy-Auditing-Activity-History-Privacy-Settings
Channel
Operational
Task
FilterAccount

Description

Account filter value changed, setting SettingName, from OldConsentValue to NewConsentValue.

Message #

Account filter value changed, setting %12, from %4 to %5

Fields #

NameDescription
CallerUserSid UnicodeString
CallerProcessName UnicodeString
CallerAppPackageFamilyName UnicodeString
OldConsentValue Boolean
NewConsentValue Boolean
SetByHigherAuthority Boolean
EffectiveConsentValue Boolean
TargetUserSid UnicodeString
ConsentID UnicodeString
AppPackageFamilyName UnicodeString
HResult HexInt32
SettingName UnicodeString

Event ID 7 — Account filter value changed, setting SettingName, failed.

Provider
Microsoft-Windows-Privacy-Auditing-Activity-History-Privacy-Settings
Channel
Operational
Task
FilterAccount

Description

Account filter value changed, setting SettingName, failed.

Message #

Account filter value changed, setting %12, failed

Fields #

NameDescription
CallerUserSid UnicodeString
CallerProcessName UnicodeString
CallerAppPackageFamilyName UnicodeString
OldConsentValue Boolean
NewConsentValue Boolean
SetByHigherAuthority Boolean
EffectiveConsentValue Boolean
TargetUserSid UnicodeString
ConsentID UnicodeString
AppPackageFamilyName UnicodeString
HResult HexInt32
SettingName UnicodeString