Microsoft-Windows-Security-IdentityListener

15 events across 1 channel

Event ID	Title	Channel
0	Successfully imported {Number} identities.	Operation log
1	Failed to importidentities.	Operation log
2	Successfully added {Sid} to homeusers group.	Operation log
3	Failed to add {Sid} to homeusers group.	Operation log
4	Successfully deleted {Sid} from homeusers group.	Operation log
5	Failed to delete {Sid} from homeusers group.	Operation log
6	Machine certificate with {psz} name was created successfully.	Operation log
7	Failed to create Machine certificate.	Operation log
8	Certificate was successfully imported for machine {psz}.	Operation log
9	Importing certificate for machine {RemoteMachineName} failed with error code …	Operation log
10	Importing Identity (Provider GUID: {ProviderGUID}) Identity UID: {IdentityUID} …	Operation log
11	Failed to remove remote identities from the ILR cache.	Operation log
13	Failed to delete machine certificates.	Operation log
14	Handle the remote machine {psz} departure event.	Operation log
15	Failed to handle the remote machine {RemoteMachineName} departure event.	Operation log

Event ID 0 — Successfully imported {Number} identities.

Provider: Microsoft-Windows-Security-IdentityListener
Channel: Operation log

Message

Successfully imported {Number} identities

Fields

Name	Description
`Number`	—

Event ID 1 — Failed to importidentities.

Provider: Microsoft-Windows-Security-IdentityListener
Channel: Operation log

Message

Failed to importidentities. Error code: {LastError}

Fields

Name	Description
`LastError`	—

Event ID 2 — Successfully added {Sid} to homeusers group.

Provider: Microsoft-Windows-Security-IdentityListener
Channel: Operation log

Message

Successfully added {Sid} to homeusers group.

Fields

Name	Description
`Sid`	—

Event ID 3 — Failed to add {Sid} to homeusers group.

Provider: Microsoft-Windows-Security-IdentityListener
Channel: Operation log

Message

Failed to add {Sid} to homeusers group.

Fields

Name	Description
`Sid`	—

Event ID 4 — Successfully deleted {Sid} from homeusers group.

Provider: Microsoft-Windows-Security-IdentityListener
Channel: Operation log

Message

Successfully deleted {Sid} from homeusers group.

Fields

Name	Description
`Sid`	—

Event ID 5 — Failed to delete {Sid} from homeusers group.

Provider: Microsoft-Windows-Security-IdentityListener
Channel: Operation log

Message

Failed to delete {Sid} from homeusers group.

Fields

Name	Description
`Sid`	—

Event ID 6 — Machine certificate with {psz} name was created successfully.

Provider: Microsoft-Windows-Security-IdentityListener
Channel: Operation log

Message

Machine certificate with {psz} name was created successfully.

Fields

Name	Description
`psz`	—

Event ID 7 — Failed to create Machine certificate.

Provider: Microsoft-Windows-Security-IdentityListener
Channel: Operation log

Message

Failed to create Machine certificate. Error code {LastError}

Fields

Name	Description
`LastError`	—

Event ID 8 — Certificate was successfully imported for machine {psz}.

Provider: Microsoft-Windows-Security-IdentityListener
Channel: Operation log

Message

Certificate was successfully imported for machine {psz}.

Fields

Name	Description
`psz`	—

Event ID 9 — Importing certificate for machine {RemoteMachineName} failed with error code {Errorcode}.

Provider: Microsoft-Windows-Security-IdentityListener
Channel: Operation log

Message

Importing certificate for machine {RemoteMachineName} failed with error code {Errorcode}.

Fields

Name	Description
`RemoteMachineName`	—
`Errorcode`	—

Event ID 10 — Importing Identity (Provider GUID: {ProviderGUID}) Identity UID: {IdentityUID} [{IdentityDisplayName}].

Provider: Microsoft-Windows-Security-IdentityListener
Channel: Operation log

Message

Importing Identity (Provider GUID: {ProviderGUID})  Identity UID: {IdentityUID} [{IdentityDisplayName}].

Fields

Name	Description
`ProviderGUID`	—
`IdentityUID`	—
`IdentityDisplayName`	—

Event ID 11 — Failed to remove remote identities from the ILR cache.

Provider: Microsoft-Windows-Security-IdentityListener
Channel: Operation log

Message

Failed to remove remote identities from the ILR cache. Error code {LastError}

Fields

Name	Description
`LastError`	—

Event ID 13 — Failed to delete machine certificates.

Provider: Microsoft-Windows-Security-IdentityListener
Channel: Operation log

Message

Failed to delete machine certificates. Error code {LastError}

Fields

Name	Description
`LastError`	—

Event ID 14 — Handle the remote machine {psz} departure event.

Provider: Microsoft-Windows-Security-IdentityListener
Channel: Operation log

Message

Handle the remote machine {psz} departure event.

Fields

Name	Description
`psz`	—

Event ID 15 — Failed to handle the remote machine {RemoteMachineName} departure event.

Provider: Microsoft-Windows-Security-IdentityListener
Channel: Operation log

Message

Failed to handle the remote machine {RemoteMachineName} departure event. Error code {Errorcode}

Fields

Name	Description
`RemoteMachineName`	—
`Errorcode`	—