Microsoft-Windows-Privacy-Auditing-PermissiveLearningMode

1 events across 1 channel

Event ID	Title	Channel
2000	App AppPackageFamilyName running as user TargetUserSid was allowed access to …	Operational

Event ID 2000 — App AppPackageFamilyName running as user TargetUserSid was allowed access to capability CapabilityName due to Permissive Learning Mode.

Provider: Microsoft-Windows-Privacy-Auditing-PermissiveLearningMode
Channel: Operational
Task: AccessCheck

Description

App AppPackageFamilyName running as user TargetUserSid was allowed access to capability CapabilityName due to Permissive Learning Mode. App must manifest CapabilityName to function outside of Permissive Learning Mode.

Message #

App %4 running as user %1 was allowed access to capability %2 due to Permissive Learning Mode. App must manifest %2 to function outside of Permissive Learning Mode.

Fields #

Name	Description
`TargetUserSid` SID	—
`CapabilityName` UnicodeString	—
`CapabilitySid` SID	—
`AppPackageFamilyName` UnicodeString	—
`PackageSid` SID	—