Microsoft-Windows-ShellCommon-StartLayoutPopulation

126 events across 2 channels

Event ID	Title	Channel
1	Initialization of collection: %1 has started.	Operational
2	The collection named %1 is being reset.	Operational
3	The following selection data was used to choose an initial collection.	Operational
4	Initialization of the Start collection has started in the logon tasks	Operational
5	Initialization of the Start collection has finished in the logon tasks with the …	Operational
6	The collection initialization pipeline is attempting to find an initial …	Operational
7	The collection initialization pipeline got an initial collection from the …	Operational
8	The collection initialization pipeline got an initial collection from the …	Operational
9	The collection initialization pipeline failed to find an initial collection that …	Operational
10	Starting post processing of the selected initial collection.	Operational
11	The %1 post processor has succesfully completed its post processing of the …	Operational
12	The %1 post processor encountered the following error when post processing the …	Operational
13	Post processing of the selection initial collection complete.	Operational
14	The collection initialization pipeline is starting to write the collection data …	Operational
15	The collection is being written to the %1 data store.	Operational
16	The %1 tile was successfully written to storage.	Operational
17	Attempting to write the %1 tile to storage encountered the following error: %2.	Operational
18	The collection initialization pipeline has finished writing the collection data …	Operational
19	A secondary tile in the chosen layout with the following information is being …	Operational
20	Secondary tile initialization complete.	Operational
21	The following error occurred while initializing a secondary tile.	Operational
22	The following error occurred while initializing parsing an xml file.	Operational
23	The installation of the app for the placeholder tile %1 has been initiated due …	Operational
24	Placeholder tile app installation has completed.	Operational
25	The lifecycle event indicating a placeholder tile installation has succeeded was …	Operational
26	The automatic installation of placeholder tiles has started.	Operational
27	The automatic installation of placeholder tiles is complete.	Operational
28	The following placeholder tile's automatic installation was filtered out as the …	Operational
29	The following placeholder tile's automatic installation was skipped due to the …	Operational
30	The installation of the app for placeholder tile %1 has been successfully queued …	Operational
31	%1 apps have been queued for auto-install.	Operational
32	The installation of the app for placeholder tile %1 encountered an error.	Operational
33	Starting to retrieve Store metadata for the following applications.	Operational
34	Store app metadata retrieval successful.	Operational
35	An error occurred while retrieving Store metadata.	Operational
36	The CDSLayoutInitializationPolicy is determining whether is should provide the …	Operational
37	The CDSLayoutInitializationPolicy has completed determining whether is should …	Operational
38	The following tile was detected in the cloud CDS collection but did not appear …	Operational
39	Starting to retrieve Store assets for the following applications.	Operational
40	Finished retrieving Store assets for the applications.	Operational
41	The following asset was downloaded.	Operational
42	The UnattendLayoutParser encountered an error processing the following tile.	Operational
43	Registry keys indicate an OS upgrade needs to be processed.	Operational
44	There was a data inconsistency in the upgrade registry keys.	Operational
45	The following folder was successfully writen to the collection: %1 X:%2 Y:%3.	Operational
46	An error occurred writing the following folder to the collection: %1 X:%2 Y:%3 …	Operational
47	The collection initialization background task has started processing.	Operational
48	The collection initialization background task has completed processing.	Operational
49	The following tile was registered for background processing.	Operational
50	The TDLMigrationInitialCollectionProvider is attempting to create an initial …	Operational
51	The TDLMigrationInitialCollectionProvider is has successfully created an initial …	Operational
52	A tile with the following data was migrated from TDL.	Operational
53	A tile with the following identifier failed to migrate due to invalid …	Operational
54	A group with the following data was migrated from TDL.	Operational
55	A group with the following data failed to migrate.	Operational
56	The following group was successfully writen to the collection: %1 X:%2 Y:%3.	Operational
57	An error occurred writing the following group to the collection: %1 X:%2 Y:%3 …	Operational
58	StartNonLayoutProperties migration failed with HRESULT.	Operational
59	TryMigrateTDLData was called even though the migration is already complete.	Operational
60	The following error occurred trying to parse the local default layout file.	Operational
61	No layouts were found in the local default layout file.	Operational
62	None of the layouts in the local default layout file matched the selection …	Operational
63	GetCollection was called for collection %1 which does not exist and will be …	Operational
64	The following error occurred while parsing a layout xml file.	Operational
65	The collection '.	Operational
66	The Start tile layout was reset to recover from reliability issues.	Operational
1000	CuratedTileCollectionTransformer is creating a container for collection it …	Diagnostic
1001	CuratedTileCollectionTransformer has created a container for collection it …	Diagnostic
1002	A CuratedTile has been initialized for the identifier:%1 with GUID :%2.	Diagnostic
1004	A CuratedGroup has been initialized for the identifier:%1 with Name :%2, …	Diagnostic
1005	A CuratedRoot has been initialized for the identifier:%1 with Name :%2, …	Diagnostic
1100	Created group with guid:%1 under parent %2 in collection: %3.	Operational
1101	Removed group named:%1 with guid:%2 from parent: %3 in collection: %4.	Operational
1102	Created tile identifier:%1 and guid:%2 and added it to parent: %3 in collection: …	Operational
1103	Added tile identifier:%1 and guid:%2 to parent: %3 in collection: %4.	Operational
1104	Removed tile identifier:%1 and guid:%2 from parent: %3 in collection: %4.	Operational
1105	Added group named:%1 with guid:%2 to parent: %3 in collection: %4.	Operational
1106	Item added to root named.	Operational
1107	Item removed from root named.	Operational
1200	An update to the tile with identifier:%1 and guid:%2 was saved locally and …	Diagnostic
1202	An update to the group with identifier:%1 and guid:%2 was saved locally and …	Diagnostic
1203	An update to the root with identifier:%1 and guid:%2 was saved locally and …	Diagnostic
1204	The container %2 could not find the group with GUID:%1 in collection: %3.	Operational
1205	A container %2 could not find the tile with GUID:%1 in collection: %3.	Operational
1206	A missing item with GUID:%1 was created.	Operational
1207	A container %2 was able to resolve the missing group with GUID:%1 in collection: …	Operational
1208	A container %2 was able to resolve the missing tile with GUID:%1 in collection: …	Operational
1209	A container %1 was waiting to fire a change notification, but was destroyed.	Operational
1250	An update to the tile with identifier:%1 and guid:%2 was saved to CDS.	Diagnostic
1252	An update to the group with identifier:%1 and guid:%2 was saved to CDS.	Diagnostic
1253	An update to the root with identifier:%1 and guid:%2 was saved to CDS.	Diagnostic
1254	An update to the root container was saved to CDS.	Operational
1300	An update to the root with identifier:%1 and guid:%2 was received from CDS.	Diagnostic
1301	An update to the group with identifier:%1 and guid:%2 was received from CDS.	Diagnostic
1303	An update to the tile with identifier:%1 and guid:%2 was received from CDS.	Diagnostic
1400	Removed %1 due to data source reconciliation.	Operational
1401	Tile %1 was resurrected into collection %2.	Operational
1402	Data Store Cache secondary data reconciliation start.	Operational
1403	Data Store Cache secondary data reconciliation end.	Operational
1404	Unified Tile %1 appeared in the UTM.	Operational
1405	Unified Tile %1 removed from the UTM.	Operational
1900	A failed update to the tile with identifier:%1 and guid:%2 was received from …	Operational
1901	The Start Layout Root is pinned, but is missing from its collection container.	Operational
1902	A failed update to the tile with identifier:%1 and guid:%2 was received from …	Operational
1903	A failed update to the tile with identifier:%1 and guid:%2 was received from …	Operational
1904	A tile with the following data ID is supposed to exist, but has no data.	Operational
1905	A group with the following data ID is supposed to exist, but has no data.	Operational
1906	A tile with the following data ID exists, but has default data.	Operational
2052	The CloudInitialCollectionProvider encountered a retrieval error: …	Diagnostic
2053	An error occurred trying to parse the content from the subscription: …	Diagnostic
2101	An update to the placeholder tile with identifier:%1 and guid:%2 was saved …	Diagnostic
2102	An update to the placeholder tile with identifier:%1 and guid:%2 was saved to …	Diagnostic
2103	An update to the placeholder tile with identifier:%1 and guid:%2 was received …	Diagnostic
2110	The data for the logo of placeholder tile with identifier:%1 was loaded.	Diagnostic
2111	The logo of placeholder tile with identifier:%1 and size:%2 was saved locally …	Diagnostic
2112	The logo of placeholder tile with identifier:%1 and size:%2 was saved to CDS.	Diagnostic
2150	A failed update to the placeholder tile with identifier:%1 and guid:%2 was …	Operational
2151	An image asset was successfully download to the following location.	Operational
2152	Install progress state changed for package:%1 to state:%2.	Operational
2153	Install completed for package:%1 with state: %2.	Operational
2154	Pacakge:%1 is already installed, installation cancelled.	Operational
3000	RetailDemoCollectionProvider is attempting to determine if it can provide an …	Diagnostic
3001	RetailDemoCollectionProvider has completed determining if it can provide an …	Diagnostic
3002	RetailDemoCollectionProvider successfully parsed an initial collection.	Diagnostic
3050	RetailDemoCollectionProvider hit an error parsing the xml.	Operational
3051	RetailDemoCollectionProvider successfully parsed the xml but found no valid …	Operational

Event ID 1 — Initialization of collection: %1 has started.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

Initialization of collection: %1 has started.  Reason: %2

Fields

Name	Description
`collectionName`	—
`initializationReason`	—

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 1
  version: 0
  level: 4
  task: 1
  opcode: 1
  keywords: 4611686018427387904
  time_created: '2023-11-05T22:29:31.478231+00:00'
  event_record_id: 60
  correlation:
    ActivityID: 59A0D65F-1037-0003-58E5-A0593710DA01
  execution:
    process_id: 8016
    thread_id: 8072
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data:
  collectionName: Start.TileGrid
  initializationReason: 1
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 2 — The collection named %1 is being reset.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The collection named %1 is being reset.

Fields

Name	Description
`value`	—

Event ID 3 — The following selection data was used to choose an initial collection.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

The following selection data was used to choose an initial collection: %1

Fields

Name	Description
`layoutSelectionSerializedString`	—

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 3
  version: 0
  level: 4
  task: 3
  opcode: 1
  keywords: 4611686018427387904
  time_created: '2023-11-05T22:29:31.705908+00:00'
  event_record_id: 61
  correlation:
    ActivityID: 59A0D65F-1037-0003-58E5-A0593710DA01
  execution:
    process_id: 8016
    thread_id: 8072
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data:
  layoutSelectionSerializedString: "\nRegion Codes:US \nSKUs:3 \nOffice SKUs: <not
    set>\nGroup Cell Width: <not set>\nPreInstalledAppsEnabled: 0\nTargetedContentTilesEnabled:
    1\nEducationModeEnabled: 0\nCommercialDevice: 1\n"
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 4 — Initialization of the Start collection has started in the logon tasks

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

Initialization of the Start collection has started in the logon tasks

Event ID 5 — Initialization of the Start collection has finished in the logon tasks with the following result.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

Initialization of the Start collection has finished in the logon tasks with the following result: %1

Fields

Name	Description
`TaskHResultValue`	—

Event ID 6 — The collection initialization pipeline is attempting to find an initial collection.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

The collection initialization pipeline is attempting to find an initial collection.

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 6
  version: 0
  level: 4
  task: 5
  opcode: 1
  keywords: 4611686018427387904
  time_created: '2023-11-05T22:29:32.529937+00:00'
  event_record_id: 62
  correlation:
    ActivityID: 59A0D65F-1037-0003-58E5-A0593710DA01
  execution:
    process_id: 8016
    thread_id: 8072
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data: {}
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 7 — The collection initialization pipeline got an initial collection from the specified collection provider named.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The collection initialization pipeline got an initial collection from the specified collection provider named: %1

Fields

Name	Description
`layoutProviderName`	—

Event ID 8 — The collection initialization pipeline got an initial collection from the following provider.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

The collection initialization pipeline got an initial collection from the following provider: %1

Fields

Name	Description
`layoutProviderName`	—

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 8
  version: 0
  level: 4
  task: 5
  opcode: 2
  keywords: 4611686018427387904
  time_created: '2023-11-05T22:29:35.128457+00:00'
  event_record_id: 63
  correlation:
    ActivityID: 59A0D65F-1037-0003-58E5-A0593710DA01
  execution:
    process_id: 8016
    thread_id: 8072
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data:
  layoutProviderName: LocalXmlStartCollectionProvider
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 9 — The collection initialization pipeline failed to find an initial collection that matched the selection criteria

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The collection initialization pipeline failed to find an initial collection that matched the selection criteria

Event ID 10 — Starting post processing of the selected initial collection.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

Starting post processing of the selected initial collection.

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 10
  version: 0
  level: 4
  task: 6
  opcode: 1
  keywords: 4611686018427387904
  time_created: '2023-11-05T22:29:35.128460+00:00'
  event_record_id: 64
  correlation:
    ActivityID: 59A0D65F-1037-0003-58E5-A0593710DA01
  execution:
    process_id: 8016
    thread_id: 8072
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data: {}
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 11 — The %1 post processor has succesfully completed its post processing of the initial collection.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

The %1 post processor has succesfully completed its post processing of the initial collection.

Fields

Name	Description
`layoutProviderName`	—

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 11
  version: 0
  level: 4
  task: 6
  opcode: 0
  keywords: 4611686018427387904
  time_created: '2023-11-05T22:29:35.234252+00:00'
  event_record_id: 69
  correlation:
    ActivityID: 59A0D65F-1037-0003-58E5-A0593710DA01
  execution:
    process_id: 8016
    thread_id: 8072
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data:
  layoutProviderName: MfuModificationPostProcessor
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 12 — The %1 post processor encountered the following error when post processing the initial collection: %2.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The %1 post processor encountered the following error when post processing the initial collection: %2

Fields

Name	Description
`layoutProviderName`	—
`HResultValue`	—

Event ID 13 — Post processing of the selection initial collection complete.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

Post processing of the selection initial collection complete.

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 13
  version: 0
  level: 4
  task: 6
  opcode: 2
  keywords: 4611686018427387904
  time_created: '2023-11-05T22:29:35.234254+00:00'
  event_record_id: 70
  correlation:
    ActivityID: 59A0D65F-1037-0003-58E5-A0593710DA01
  execution:
    process_id: 8016
    thread_id: 8072
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data: {}
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 14 — The collection initialization pipeline is starting to write the collection data to permanent storage.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

The collection initialization pipeline is starting to write the collection data to permanent storage.

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 14
  version: 0
  level: 4
  task: 8
  opcode: 1
  keywords: 4611686018427387904
  time_created: '2023-11-05T22:29:35.234705+00:00'
  event_record_id: 71
  correlation:
    ActivityID: 59A0D65F-1037-0003-58E5-A0593710DA01
  execution:
    process_id: 8016
    thread_id: 8072
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data: {}
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 15 — The collection is being written to the %1 data store.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

The collection is being written to the %1 data store

Fields

Name	Description
`value`	—

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 15
  version: 0
  level: 4
  task: 8
  opcode: 0
  keywords: 4611686018427387904
  time_created: '2023-11-05T22:29:35.513863+00:00'
  event_record_id: 73
  correlation:
    ActivityID: 59A0D65F-1037-0003-58E5-A0593710DA01
  execution:
    process_id: 8016
    thread_id: 8072
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data:
  value: CDS
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 16 — The %1 tile was successfully written to storage.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

The %1 tile was successfully written to storage.

Fields

Name	Description
`tileIdentifier`	—

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 16
  version: 0
  level: 4
  task: 8
  opcode: 0
  keywords: 4611686018427387904
  time_created: '2023-11-05T22:29:35.522947+00:00'
  event_record_id: 81
  correlation:
    ActivityID: 59A0D65F-1037-0003-58E5-A0593710DA01
  execution:
    process_id: 8016
    thread_id: 8072
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data:
  tileIdentifier: P~Microsoft.WindowsStore_8wekyb3d8bbwe!App
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 17 — Attempting to write the %1 tile to storage encountered the following error: %2.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

Attempting to write the %1 tile to storage encountered the following error: %2

Fields

Name	Description
`tileIdentifier`	—
`failureDetails`	—

Event ID 18 — The collection initialization pipeline has finished writing the collection data to permanent storage.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

The collection initialization pipeline has finished writing the collection data to permanent storage.

Fields

Name	Description
`TaskHResultValue`	—

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 18
  version: 0
  level: 4
  task: 8
  opcode: 2
  keywords: 4611686018427387904
  time_created: '2023-11-05T22:29:35.523473+00:00'
  event_record_id: 83
  correlation:
    ActivityID: 59A0D65F-1037-0003-58E5-A0593710DA01
  execution:
    process_id: 8016
    thread_id: 8072
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data:
  TaskHResultValue: 0
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 19 — A secondary tile in the chosen layout with the following information is being initialized.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

A secondary tile in the chosen layout with the following information is being initialized: %1

Fields

Name	Description
`tileData`	—

Event ID 20 — Secondary tile initialization complete.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

Secondary tile initialization complete.

Event ID 21 — The following error occurred while initializing a secondary tile.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The following error occurred while initializing a secondary tile: %1

Fields

Name	Description
`failureDetails`	—

Event ID 22 — The following error occurred while initializing parsing an xml file.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The following error occurred while initializing parsing an xml file: %1

Fields

Name	Description
`TaskHResultValue`	—

Event ID 23 — The installation of the app for the placeholder tile %1 has been initiated due to tile activation.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The installation of the app for the placeholder tile %1 has been initiated due to tile activation.

Fields

Name	Description
`tileIdentifier`	—

Event ID 24 — Placeholder tile app installation has completed.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

Placeholder tile app installation has completed.

Event ID 25 — The lifecycle event indicating a placeholder tile installation has succeeded was seen.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The lifecycle event indicating a placeholder tile installation has succeeded was seen.

Event ID 26 — The automatic installation of placeholder tiles has started.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

The automatic installation of placeholder tiles has started.

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 26
  version: 0
  level: 4
  task: 11
  opcode: 1
  keywords: 4611686018427387904
  time_created: '2023-11-05T22:30:59.904561+00:00'
  event_record_id: 85
  correlation:
    ActivityID: 59A0D65F-1037-0001-8800-A1593710DA01
  execution:
    process_id: 7864
    thread_id: 3512
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data: {}
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 27 — The automatic installation of placeholder tiles is complete.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

The automatic installation of placeholder tiles is complete.

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 27
  version: 0
  level: 4
  task: 11
  opcode: 2
  keywords: 4611686018427387904
  time_created: '2023-11-05T22:30:59.911786+00:00'
  event_record_id: 87
  correlation:
    ActivityID: 59A0D65F-1037-0001-8800-A1593710DA01
  execution:
    process_id: 7864
    thread_id: 3512
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data: {}
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 28 — The following placeholder tile's automatic installation was filtered out as the application is already installed.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The following placeholder tile's automatic installation was filtered out as the application is already installed: %1.

Fields

Name	Description
`tileIdentifier`	—

Event ID 29 — The following placeholder tile's automatic installation was skipped due to the application's size: %1 Application size: %2.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The following placeholder tile's automatic installation was skipped due to the application's size: %1 Application size: %2.

Fields

Name	Description
`tileAumid`	—
`appSize`	—

Event ID 30 — The installation of the app for placeholder tile %1 has been successfully queued with the Store.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The installation of the app for placeholder tile %1 has been successfully queued with the Store.

Fields

Name	Description
`tileAumid`	—
`appSize`	—

Event ID 31 — %1 apps have been queued for auto-install.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

%1 apps have been queued for auto-install.

Fields

Name	Description
`appSize`	—

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 31
  version: 0
  level: 4
  task: 11
  opcode: 0
  keywords: 4611686018427387904
  time_created: '2023-11-05T22:30:59.904580+00:00'
  event_record_id: 86
  correlation:
    ActivityID: 59A0D65F-1037-0001-8800-A1593710DA01
  execution:
    process_id: 7864
    thread_id: 3512
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data:
  appSize: 0
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 32 — The installation of the app for placeholder tile %1 encountered an error.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The installation of the app for placeholder tile %1 encountered an error.

Fields

Name	Description
`tileIdentifier`	—

Event ID 33 — Starting to retrieve Store metadata for the following applications.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

Starting to retrieve Store metadata for the following applications: %1

Fields

Name	Description
`value`	—

Event ID 34 — Store app metadata retrieval successful.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

Store app metadata retrieval successful.

Event ID 35 — An error occurred while retrieving Store metadata.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

An error occurred while retrieving Store metadata: %1

Fields

Name	Description
`TaskHResultValue`	—

Event ID 36 — The CDSLayoutInitializationPolicy is determining whether is should provide the initial collection.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The CDSLayoutInitializationPolicy is determining whether is should provide the initial collection.

Event ID 37 — The CDSLayoutInitializationPolicy has completed determining whether is should provide the initial collection.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The CDSLayoutInitializationPolicy has completed determining whether is should provide the initial collection.

Event ID 38 — The following tile was detected in the cloud CDS collection but did not appear in the final local CDS collection.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The following tile was detected in the cloud CDS collection but did not appear in the final local CDS collection: %1.

Fields

Name	Description
`value`	—

Event ID 39 — Starting to retrieve Store assets for the following applications.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

Starting to retrieve Store assets for the following applications: %1

Fields

Name	Description
`value`	—

Event ID 40 — Finished retrieving Store assets for the applications.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

Finished retrieving Store assets for the applications.

Event ID 41 — The following asset was downloaded.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The following asset was downloaded: %1

Fields

Name	Description
`value`	—

Event ID 42 — The UnattendLayoutParser encountered an error processing the following tile.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The UnattendLayoutParser encountered an error processing the following tile: %1.

Fields

Name	Description
`value`	—

Event ID 43 — Registry keys indicate an OS upgrade needs to be processed.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

Registry keys indicate an OS upgrade needs to be processed.

Event ID 44 — There was a data inconsistency in the upgrade registry keys.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

There was a data inconsistency in the upgrade registry keys.  The OS upgrade will not be processed.

Event ID 45 — The following folder was successfully writen to the collection: %1 X:%2 Y:%3.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The following folder was successfully writen to the collection: %1 X:%2 Y:%3.

Fields

Name	Description
`containerName`	—
`containerXPosition`	—
`containerYPosition`	—

Event ID 46 — An error occurred writing the following folder to the collection: %1 X:%2 Y:%3 Error:%4.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

An error occurred writing the following folder to the collection: %1 X:%2 Y:%3 Error:%4.

Fields

Name	Description
`containerName`	—
`containerXPosition`	—
`containerYPosition`	—
`failureDetails`	—

Event ID 47 — The collection initialization background task has started processing.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

The collection initialization background task has started processing.

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 47
  version: 0
  level: 4
  task: 17
  opcode: 1
  keywords: 4611686018427387904
  time_created: '2023-11-05T22:30:59.766792+00:00'
  event_record_id: 84
  correlation:
    ActivityID: 59A0D65F-1037-0001-8800-A1593710DA01
  execution:
    process_id: 7864
    thread_id: 3512
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data: {}
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 48 — The collection initialization background task has completed processing.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

The collection initialization background task has completed processing.

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 48
  version: 0
  level: 4
  task: 17
  opcode: 2
  keywords: 4611686018427387904
  time_created: '2023-11-05T22:30:59.917069+00:00'
  event_record_id: 88
  correlation:
    ActivityID: 59A0D65F-1037-0001-8800-A1593710DA01
  execution:
    process_id: 7864
    thread_id: 3512
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data: {}
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 49 — The following tile was registered for background processing.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The following tile was registered for background processing: %1

Fields

Name	Description
`value`	—

Event ID 50 — The TDLMigrationInitialCollectionProvider is attempting to create an initial collection from the TDL data.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The TDLMigrationInitialCollectionProvider is attempting to create an initial collection from the TDL data.

Event ID 51 — The TDLMigrationInitialCollectionProvider is has successfully created an initial collection from the TDL data.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The TDLMigrationInitialCollectionProvider is has successfully created an initial collection from the TDL data.

Event ID 52 — A tile with the following data was migrated from TDL.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

A tile with the following data was migrated from TDL: %1

Fields

Name	Description
`tileData`	—

Event ID 53 — A tile with the following identifier failed to migrate due to invalid properties.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

A tile with the following identifier failed to migrate due to invalid properties: %1

Fields

Name	Description
`tileIdentifier`	—

Event ID 54 — A group with the following data was migrated from TDL.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

A group with the following data was migrated from TDL: %1

Fields

Name	Description
`groupData`	—

Event ID 55 — A group with the following data failed to migrate.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

A group with the following data failed to migrate: %1

Fields

Name	Description
`groupData`	—

Event ID 56 — The following group was successfully writen to the collection: %1 X:%2 Y:%3.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

The following group was successfully writen to the collection: %1 X:%2 Y:%3.

Fields

Name	Description
`containerName`	—
`containerXPosition`	—
`containerYPosition`	—

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 56
  version: 0
  level: 4
  task: 8
  opcode: 0
  keywords: 4611686018427387904
  time_created: '2023-11-05T22:29:35.522967+00:00'
  event_record_id: 82
  correlation:
    ActivityID: 59A0D65F-1037-0003-58E5-A0593710DA01
  execution:
    process_id: 8016
    thread_id: 8072
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data:
  containerName: Productivity
  containerXPosition: 4294967295
  containerYPosition: 4294967295
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 57 — An error occurred writing the following group to the collection: %1 X:%2 Y:%3 Error:%4.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

An error occurred writing the following group to the collection: %1 X:%2 Y:%3 Error:%4.

Fields

Name	Description
`containerName`	—
`containerXPosition`	—
`containerYPosition`	—
`failureDetails`	—

Event ID 58 — StartNonLayoutProperties migration failed with HRESULT.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

StartNonLayoutProperties migration failed with HRESULT: %1

Fields

Name	Description
`TaskHResultValue`	—

Event ID 59 — TryMigrateTDLData was called even though the migration is already complete.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

TryMigrateTDLData was called even though the migration is already complete.

Event ID 60 — The following error occurred trying to parse the local default layout file.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The following error occurred trying to parse the local default layout file.  Result: %1

Fields

Name	Description
`TaskHResultValue`	—

Event ID 61 — No layouts were found in the local default layout file.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

No layouts were found in the local default layout file.

Event ID 62 — None of the layouts in the local default layout file matched the selection criteria.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

None of the layouts in the local default layout file matched the selection criteria.  Result: %1

Fields

Name	Description
`TaskHResultValue`	—

Event ID 63 — GetCollection was called for collection %1 which does not exist and will be initialized.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

GetCollection was called for collection %1 which does not exist and will be initialized.

Fields

Name	Description
`value`	—

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 63
  version: 0
  level: 4
  task: 20
  opcode: 0
  keywords: 4611686018427387904
  time_created: '2023-11-05T22:29:30.653201+00:00'
  event_record_id: 59
  correlation:
    ActivityID: 59A0D65F-1037-0003-58E5-A0593710DA01
  execution:
    process_id: 8016
    thread_id: 8072
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data:
  value: Start.TileGrid
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 64 — The following error occurred while parsing a layout xml file.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The following error occurred while parsing a layout xml file: %1

Fields

Name	Description
`value`	—

Event ID 65 — The collection '.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The collection '%1' was initialized from process '%2' without explicit permission.

Fields

Name	Description
`value1`	—
`value2`	—

Event ID 66 — The Start tile layout was reset to recover from reliability issues.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The Start tile layout was reset to recover from reliability issues.

Event ID 1000 — CuratedTileCollectionTransformer is creating a container for collection it hasn't seen before.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Diagnostic

Message

CuratedTileCollectionTransformer is creating a container for collection it hasn't seen before.

Event ID 1001 — CuratedTileCollectionTransformer has created a container for collection it hasn't seen before.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Diagnostic

Message

CuratedTileCollectionTransformer has created a container for collection it hasn't seen before.

Event ID 1002 — A CuratedTile has been initialized for the identifier:%1 with GUID :%2.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Diagnostic

Message

A CuratedTile has been initialized for the identifier:%1 with GUID :%2.

Fields

Name	Description
`itemName`	—
`itemId`	—

Event ID 1004 — A CuratedGroup has been initialized for the identifier:%1 with Name :%2, contained group count:%3, contained tile count: %4.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Diagnostic

Message

A CuratedGroup has been initialized for the identifier:%1 with Name :%2, contained group count:%3, contained tile count: %4.

Fields

Name	Description
`itemId`	—
`itemName`	—
`groupCount`	—
`tileCount`	—

Event ID 1005 — A CuratedRoot has been initialized for the identifier:%1 with Name :%2, contained group count:%3, contained tile count: %4.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Diagnostic

Message

A CuratedRoot has been initialized for the identifier:%1 with Name :%2, contained group count:%3, contained tile count: %4.

Fields

Name	Description
`itemId`	—
`itemName`	—
`groupCount`	—
`tileCount`	—

Event ID 1100 — Created group with guid:%1 under parent %2 in collection: %3.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

Created group with guid:%1 under parent %2 in collection: %3.

Fields

Name	Description
`itemId`	—
`containerId`	—
`collectionName`	—

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 1100
  version: 0
  level: 4
  task: 1001
  opcode: 0
  keywords: 4611686018427387904
  time_created: '2023-11-05T22:29:35.520502+00:00'
  event_record_id: 75
  correlation:
    ActivityID: 59A0D65F-1037-0003-58E5-A0593710DA01
  execution:
    process_id: 8016
    thread_id: 8072
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data:
  itemId: 063A7277-5D2A-47C9-BE79-DBED598C456E
  containerId: 00000000-0000-0000-0000-000000000000
  collectionName: Start.TileGrid
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 1101 — Removed group named:%1 with guid:%2 from parent: %3 in collection: %4.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

Removed group named:%1 with guid:%2 from parent: %3 in collection: %4.

Fields

Name	Description
`itemName`	—
`itemId`	—
`containerId`	—
`collectionName`	—

Event ID 1102 — Created tile identifier:%1 and guid:%2 and added it to parent: %3 in collection: %4.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

Created tile identifier:%1 and guid:%2 and added it to parent: %3 in collection: %4.

Fields

Name	Description
`itemName`	—
`itemId`	—
`containerId`	—
`collectionName`	—

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 1102
  version: 0
  level: 4
  task: 1001
  opcode: 0
  keywords: 4611686018427387904
  time_created: '2023-11-05T22:31:05.507941+00:00'
  event_record_id: 90
  correlation: {}
  execution:
    process_id: 5484
    thread_id: 3168
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data:
  itemName: W~MSEdge
  itemId: FCBDF7B6-1920-469A-BA30-56E0FBFE67DB
  containerId: 063A7277-5D2A-47C9-BE79-DBED598C456E
  collectionName: Start.TileGrid
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 1103 — Added tile identifier:%1 and guid:%2 to parent: %3 in collection: %4.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

Added tile identifier:%1 and guid:%2 to parent: %3 in collection: %4.

Fields

Name	Description
`itemName`	—
`itemId`	—
`containerId`	—
`collectionName`	—

Event ID 1104 — Removed tile identifier:%1 and guid:%2 from parent: %3 in collection: %4.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

Removed tile identifier:%1 and guid:%2 from parent: %3 in collection: %4.

Fields

Name	Description
`itemName`	—
`itemId`	—
`containerId`	—
`collectionName`	—

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 1104
  version: 0
  level: 4
  task: 1001
  opcode: 0
  keywords: 4611686018427387904
  time_created: '2023-11-05T22:31:05.500051+00:00'
  event_record_id: 89
  correlation: {}
  execution:
    process_id: 5484
    thread_id: 3168
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data:
  itemName: P~Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge
  itemId: EF66609D-0926-4126-A9BD-C551B16F89A6
  containerId: 063A7277-5D2A-47C9-BE79-DBED598C456E
  collectionName: Start.TileGrid
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 1105 — Added group named:%1 with guid:%2 to parent: %3 in collection: %4.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

Added group named:%1 with guid:%2 to parent: %3 in collection: %4.

Fields

Name	Description
`itemName`	—
`itemId`	—
`containerId`	—
`collectionName`	—

Event ID 1106 — Item added to root named.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

Item added to root named:%1.

Fields

Name	Description
`value`	—

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 1106
  version: 0
  level: 4
  task: 1002
  opcode: 0
  keywords: 4611686018427387904
  time_created: '2023-11-05T22:29:35.513521+00:00'
  event_record_id: 72
  correlation:
    ActivityID: 59A0D65F-1037-0003-58E5-A0593710DA01
  execution:
    process_id: 8016
    thread_id: 8072
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data:
  value: Start.TileGrid
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 1107 — Item removed from root named.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

Item removed from root named:%1.

Fields

Name	Description
`value`	—

Event ID 1200 — An update to the tile with identifier:%1 and guid:%2 was saved locally and communicated to listeners.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Diagnostic

Message

An update to the tile with identifier:%1 and guid:%2 was saved locally and communicated to listeners.

Fields

Name	Description
`itemName`	—
`itemId`	—

Event ID 1202 — An update to the group with identifier:%1 and guid:%2 was saved locally and communicated to listeners.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Diagnostic

Message

An update to the group with identifier:%1 and guid:%2 was saved locally and communicated to listeners.

Fields

Name	Description
`itemName`	—
`itemId`	—

Event ID 1203 — An update to the root with identifier:%1 and guid:%2 was saved locally and communicated to listeners.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Diagnostic

Message

An update to the root with identifier:%1 and guid:%2 was saved locally and communicated to listeners.

Fields

Name	Description
`itemName`	—
`itemId`	—

Event ID 1204 — The container %2 could not find the group with GUID:%1 in collection: %3.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The container %2 could not find the group with GUID:%1 in collection: %3.  Attempting resolution...

Fields

Name	Description
`itemId`	—
`containerId`	—
`collectionName`	—

Event ID 1205 — A container %2 could not find the tile with GUID:%1 in collection: %3.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

A container %2 could not find the tile with GUID:%1 in collection: %3.  Attempting resolution...

Fields

Name	Description
`itemId`	—
`containerId`	—
`collectionName`	—

Event ID 1206 — A missing item with GUID:%1 was created.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

A missing item with GUID:%1 was created.

Fields

Name	Description
`itemId`	—

Event ID 1207 — A container %2 was able to resolve the missing group with GUID:%1 in collection: %3.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

A container %2 was able to resolve the missing group with GUID:%1 in collection: %3.

Fields

Name	Description
`itemId`	—
`containerId`	—
`collectionName`	—

Event ID 1208 — A container %2 was able to resolve the missing tile with GUID:%1 in collection: %3.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

A container %2 was able to resolve the missing tile with GUID:%1 in collection: %3.

Fields

Name	Description
`itemId`	—
`containerId`	—
`collectionName`	—

Event ID 1209 — A container %1 was waiting to fire a change notification, but was destroyed.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

A container %1 was waiting to fire a change notification, but was destroyed.

Fields

Name	Description
`itemId`	—

Event ID 1250 — An update to the tile with identifier:%1 and guid:%2 was saved to CDS.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Diagnostic

Message

An update to the tile with identifier:%1 and guid:%2 was saved to CDS.

Fields

Name	Description
`savedVersion`	—
`itemId`	—

Event ID 1252 — An update to the group with identifier:%1 and guid:%2 was saved to CDS.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Diagnostic

Message

An update to the group with identifier:%1 and guid:%2 was saved to CDS.

Fields

Name	Description
`savedVersion`	—
`itemId`	—

Event ID 1253 — An update to the root with identifier:%1 and guid:%2 was saved to CDS.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Diagnostic

Message

An update to the root with identifier:%1 and guid:%2 was saved to CDS.

Fields

Name	Description
`savedVersion`	—
`itemId`	—

Event ID 1254 — An update to the root container was saved to CDS.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

An update to the root container was saved to CDS.

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 1254
  version: 0
  level: 4
  task: 1002
  opcode: 0
  keywords: 4611686018427387904
  time_created: '2023-11-05T22:29:35.516075+00:00'
  event_record_id: 74
  correlation:
    ActivityID: 59A0D65F-1037-0003-58E5-A0593710DA01
  execution:
    process_id: 8016
    thread_id: 8060
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data: {}
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 1300 — An update to the root with identifier:%1 and guid:%2 was received from CDS.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Diagnostic

Message

An update to the root with identifier:%1 and guid:%2 was received from CDS.

Fields

Name	Description
`itemName`	—
`itemId`	—

Event ID 1301 — An update to the group with identifier:%1 and guid:%2 was received from CDS.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Diagnostic

Message

An update to the group with identifier:%1 and guid:%2 was received from CDS.

Fields

Name	Description
`itemName`	—
`itemId`	—

Event ID 1303 — An update to the tile with identifier:%1 and guid:%2 was received from CDS.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Diagnostic

Message

An update to the tile with identifier:%1 and guid:%2 was received from CDS.

Fields

Name	Description
`itemName`	—
`itemId`	—

Event ID 1400 — Removed %1 due to data source reconciliation.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

Removed %1 due to data source reconciliation.

Fields

Name	Description
`tileIdentifier`	—
`collectionName`	—

Event ID 1401 — Tile %1 was resurrected into collection %2.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

Tile %1 was resurrected into collection %2.

Fields

Name	Description
`tileIdentifier`	—
`collectionName`	—

Event ID 1402 — Data Store Cache secondary data reconciliation start.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

Data Store Cache secondary data reconciliation start.

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 1402
  version: 0
  level: 4
  task: 1002
  opcode: 0
  keywords: 4611686018427387904
  time_created: '2022-04-07T17:34:27.699126+00:00'
  event_record_id: 67
  correlation: {}
  execution:
    process_id: 4636
    thread_id: 4164
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WIN-FPV0DSIC9O6.sigma.fr
  security:
    user_id: S-1-5-21-2121334350-1110938707-2888912545-500
event_data: {}
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 1403 — Data Store Cache secondary data reconciliation end.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

Data Store Cache secondary data reconciliation end.

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 1403
  version: 0
  level: 4
  task: 1002
  opcode: 0
  keywords: 4611686018427387904
  time_created: '2022-04-07T17:34:27.739083+00:00'
  event_record_id: 68
  correlation: {}
  execution:
    process_id: 4636
    thread_id: 4164
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WIN-FPV0DSIC9O6.sigma.fr
  security:
    user_id: S-1-5-21-2121334350-1110938707-2888912545-500
event_data: {}
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 1404 — Unified Tile %1 appeared in the UTM.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

Unified Tile %1 appeared in the UTM.

Fields

Name	Description
`value`	—

Event ID 1405 — Unified Tile %1 removed from the UTM.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

Unified Tile %1 removed from the UTM.

Fields

Name	Description
`value`	—

Event ID 1900 — A failed update to the tile with identifier:%1 and guid:%2 was received from CDS.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

A failed update to the tile with identifier:%1 and guid:%2 was received from CDS.

Fields

Name	Description
`itemName`	—
`itemId`	—

Event ID 1901 — The Start Layout Root is pinned, but is missing from its collection container.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

The Start Layout Root is pinned, but is missing from its collection container.

Event ID 1902 — A failed update to the tile with identifier:%1 and guid:%2 was received from CDS.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

A failed update to the tile with identifier:%1 and guid:%2 was received from CDS.

Fields

Name	Description
`itemName`	—
`itemId`	—

Event ID 1903 — A failed update to the tile with identifier:%1 and guid:%2 was received from CDS.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

A failed update to the tile with identifier:%1 and guid:%2 was received from CDS.

Fields

Name	Description
`itemName`	—
`itemId`	—

Event ID 1904 — A tile with the following data ID is supposed to exist, but has no data.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

A tile with the following data ID is supposed to exist, but has no data: %1

Fields

Name	Description
`value`	—

Event ID 1905 — A group with the following data ID is supposed to exist, but has no data.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

A group with the following data ID is supposed to exist, but has no data: %1

Fields

Name	Description
`value`	—

Event ID 1906 — A tile with the following data ID exists, but has default data.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

A tile with the following data ID exists, but has default data: %1

Fields

Name	Description
`value`	—

Event ID 2052 — The CloudInitialCollectionProvider encountered a retrieval error: {failureDetails}.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Diagnostic

Message

The CloudInitialCollectionProvider encountered a retrieval error: {failureDetails}

Fields

Name	Description
`failureDetails`	—

Event ID 2053 — An error occurred trying to parse the content from the subscription: {TaskHResultValue}.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Diagnostic

Message

An error occurred trying to parse the content from the subscription: {TaskHResultValue}

Fields

Name	Description
`TaskHResultValue`	—

Event ID 2101 — An update to the placeholder tile with identifier:%1 and guid:%2 was saved locally and communicated to listeners.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Diagnostic

Message

An update to the placeholder tile with identifier:%1 and guid:%2 was saved locally and communicated to listeners.

Fields

Name	Description
`itemName`	—
`itemId`	—

Event ID 2102 — An update to the placeholder tile with identifier:%1 and guid:%2 was saved to CDS with version %3.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Diagnostic

Message

An update to the placeholder tile with identifier:%1 and guid:%2 was saved to CDS with version %3.

Fields

Name	Description
`itemName`	—
`itemId`	—
`savedVersion`	—

Event ID 2103 — An update to the placeholder tile with identifier:%1 and guid:%2 was received from CDS.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Diagnostic

Message

An update to the placeholder tile with identifier:%1 and guid:%2 was received from CDS.

Fields

Name	Description
`itemName`	—
`itemId`	—

Event ID 2110 — The data for the logo of placeholder tile with identifier:%1 was loaded.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Diagnostic

Message

The data for the logo of placeholder tile with identifier:%1 was loaded.  Size was: %2

Fields

Name	Description
`itemName`	—
`size`	—

Event ID 2111 — The logo of placeholder tile with identifier:%1 and size:%2 was saved locally and communicated to listeners.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Diagnostic

Message

The logo of placeholder tile with identifier:%1 and size:%2 was saved locally and communicated to listeners.

Fields

Name	Description
`itemName`	—
`size`	—

Event ID 2112 — The logo of placeholder tile with identifier:%1 and size:%2 was saved to CDS.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Diagnostic

Message

The logo of placeholder tile with identifier:%1 and size:%2 was saved to CDS.

Fields

Name	Description
`itemName`	—
`size`	—
`savedVersion`	—

Event ID 2150 — A failed update to the placeholder tile with identifier:%1 and guid:%2 was received from CDS.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

A failed update to the placeholder tile with identifier:%1 and guid:%2 was received from CDS.

Fields

Name	Description
`itemName`	—
`itemId`	—

Event ID 2151 — An image asset was successfully download to the following location.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

An image asset was successfully download to the following location: %1.

Fields

Name	Description
`value`	—

Event ID 2152 — Install progress state changed for package:%1 to state:%2.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

Install progress state changed for package:%1 to state:%2.

Fields

Name	Description
`packageFamilyName`	—
`InstallState`	—

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 2152
  version: 0
  level: 4
  task: 3002
  opcode: 0
  keywords: 4611686018427387904
  time_created: '2023-11-06T01:39:00.181570+00:00'
  event_record_id: 98
  correlation: {}
  execution:
    process_id: 6356
    thread_id: 14020
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data:
  packageFamilyName: SpotifyAB.SpotifyMusic_zpdnekdrzrea0
  InstallState: 0
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 2153 — Install completed for package:%1 with state: %2.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational
Level: 4
Samples: 1

Message

Install completed for package:%1 with state: %2.

Fields

Name	Description
`packageFamilyName`	—
`InstallState`	—

Example Event

system:
  provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
  guid: 97CA8142-10B1-4BAA-9FBB-70A7D11231C3
  event_source_name: ''
  event_id: 2153
  version: 0
  level: 4
  task: 3002
  opcode: 0
  keywords: 4611686018427387904
  time_created: '2023-11-06T01:42:46.303623+00:00'
  event_record_id: 99
  correlation:
    ActivityID: E4DB489E-1037-0000-5148-EDE43710DA01
  execution:
    process_id: 6356
    thread_id: 20696
  channel: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data:
  packageFamilyName: SpotifyAB.SpotifyMusic_zpdnekdrzrea0
  InstallState: 4
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 2154 — Pacakge:%1 is already installed, installation cancelled.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

Pacakge:%1 is already installed, installation cancelled.

Fields

Name	Description
`value`	—

Event ID 3000 — RetailDemoCollectionProvider is attempting to determine if it can provide an initial collection.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Diagnostic

Message

RetailDemoCollectionProvider is attempting to determine if it can provide an initial collection.

Event ID 3001 — RetailDemoCollectionProvider has completed determining if it can provide an initial collection.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Diagnostic

Message

RetailDemoCollectionProvider has completed determining if it can provide an initial collection.

Event ID 3002 — RetailDemoCollectionProvider successfully parsed an initial collection.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Diagnostic

Message

RetailDemoCollectionProvider successfully parsed an initial collection.

Event ID 3050 — RetailDemoCollectionProvider hit an error parsing the xml.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

RetailDemoCollectionProvider hit an error parsing the xml.

Event ID 3051 — RetailDemoCollectionProvider successfully parsed the xml but found no valid layouts.

Provider: Microsoft-Windows-ShellCommon-StartLayoutPopulation
Channel: Operational

Message

RetailDemoCollectionProvider successfully parsed the xml but found no valid layouts.