Microsoft-Windows-Remote-Desktop-Management-Service
34 events across 4 channels
Event ID 1:
#Description
The Remote Desktop Management service failed to start. Error code.
Fields #
| Name | Description |
|---|---|
Param1 UInt32 |
Event ID 1: The Remote Desktop Management service failed to start.
#Description
The Remote Desktop Management service failed to start. Error code: Param1.
Message #
Fields #
| Name | Description |
|---|---|
EventXML.Param1 UInt32 | |
Param1 UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Remote-Desktop-Management-Service",
"guid": "{05DA6B40-219E-4F17-92E6-D663FD87CBA8}",
"event_source_name": "",
"event_id": 1,
"version": 0,
"level": 2,
"task": 0,
"opcode": 0,
"keywords": -9223372036854775808,
"time_created": "2026-06-13T13:40:35.2735228+00:00",
"event_record_id": 1,
"correlation": {
"ActivityID": "{94E5E6B3-6E2D-4044-BBF8-22895CD42C9C}"
},
"execution": {
"process_id": 4068,
"thread_id": 6348
},
"channel": "Remote-Desktop-Management-Service/Admin",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-20"
}
},
"user_data": {
"EventXML": {
"Param1": "2284126209"
}
},
"message": "The Remote Desktop Management service failed to start. Error code: 0x88250001"
}
Event ID 2:
#Description
Config sync failed with error: . Check database connectivity, connect string: .
Fields #
| Name | Description |
|---|---|
param1 UInt32 | |
param2 UnicodeString |
Event ID 2: Config sync failed with error: ConfigSyncFailedWithError.
#Event ID 3:
#Description
Remote configuration sync on server failed. Following error occurred.
Fields #
| Name | Description |
|---|---|
function UnicodeString | |
param2 UInt32 |
Event ID 3: Remote configuration sync on server function failed.
#Event ID 4:
#Description
Cancelling job on collection and on RDMS server - Failed. Following error occurred.
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param2 UnicodeString | |
param3 UInt32 |
Event ID 4: Cancelling job on collection param1 and on RDMS server param2 - Failed.
#Event ID 5:
#Description
The Remote Desktop Management service Patch Manager failed to start with error code: , will retry.
Fields #
| Name | Description |
|---|---|
Param1 UInt32 |
Event ID 5: The Remote Desktop Management service Patch Manager failed to start with error code: Param1, will retry.
#Event ID 6:
#Description
Config sync failed with error: . Check that Windows Internal Database service is running.
Fields #
| Name | Description |
|---|---|
Param1 UInt32 |
Event ID 6: Config sync failed with error: Param1.
#Event ID 260:
#Description
The Remote Desktop Management service successfully started and is running.
Event ID 260: The Remote Desktop Management service successfully started and is running.
#Description
The Remote Desktop Management service successfully started and is running.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Remote-Desktop-Management-Service",
"guid": "{05DA6B40-219E-4F17-92E6-D663FD87CBA8}",
"event_source_name": "",
"event_id": 260,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-06-13T13:44:11.4395882+00:00",
"event_record_id": 4,
"correlation": {
"ActivityID": "{83B81391-1D74-49F1-A618-674142F6C903}"
},
"execution": {
"process_id": 6544,
"thread_id": 1240
},
"channel": "Remote-Desktop-Management-Service/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-20"
}
},
"event_data": {},
"message": "The Remote Desktop Management service successfully started and is running."
}
Event ID 261:
#Description
The Remote Desktop Management service stopped.
Event ID 261: The Remote Desktop Management service stopped.
#Description
The Remote Desktop Management service stopped.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Remote-Desktop-Management-Service",
"guid": "{05DA6B40-219E-4F17-92E6-D663FD87CBA8}",
"event_source_name": "",
"event_id": 261,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-06-13T13:40:35.4059691+00:00",
"event_record_id": 2,
"correlation": {
"ActivityID": "{94E5E6B3-6E2D-4044-BBF8-22895CD42C9C}"
},
"execution": {
"process_id": 4068,
"thread_id": 6348
},
"channel": "Remote-Desktop-Management-Service/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-20"
}
},
"event_data": {},
"message": "The Remote Desktop Management service stopped."
}
Event ID 262:
#Description
Config last sync timestamp . Database last updated timestamp . Sync started.
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param2 UnicodeString |
Event ID 262: Config last sync timestamp param1.
#Event ID 263:
#Description
Config Sync Succeeded.
Event ID 264:
#Description
Remote configuration sync on server started.
Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 264: Remote configuration sync on server param1 started.
#Event ID 265:
#Description
Remote configuration sync on server succeeded.
Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 265: Remote configuration sync on server param1 succeeded.
#Event ID 266:
#Description
Cancelling job on collection and on RDMS server - Started.
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param2 UnicodeString |
Event ID 266: Cancelling job on collection param1 and on RDMS server param2 - Started.
#Event ID 267:
#Description
Cancelling job on collection and on RDMS server - Succeeded.
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param2 UnicodeString |
Event ID 267: Cancelling job on collection param1 and on RDMS server param2 - Succeeded.
#Event ID 268:
#Description
Couldn't cancel the job on collection as the RDMS server is not reachable. Marking the job as aborted.
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param2 UnicodeString |