Microsoft-Windows-SpecialAdministrationConsole

8 events across 1 channel

Event ID	Title	Channel
1	Dispatched command ID Command.	Operational
2	A new channel has been created.	Operational
3	A channel has been closed.	Operational
4	The current channel has been switched.	Operational
5	The user mode SAC service has registered with the driver.	Operational
6	The user mode SAC service has unregistered from the driver.	Operational
7	A new Command Prompt channel could not be launched because launching of Command …	Operational
8	Prohibited command ID Command was not dispatched.	Operational

Event ID 1 — Dispatched command ID Command.

Provider: Microsoft-Windows-SpecialAdministrationConsole
Channel: Operational

Description

Dispatched command ID Command. The command line provided was.

Message #

Dispatched command ID %1. The command line provided was:

%2

Fields #

Name	Description
`Command` UInt32	—
`InputLine` AnsiString	—

Event ID 2 — A new channel has been created.

Provider: Microsoft-Windows-SpecialAdministrationConsole
Channel: Operational

Description

A new channel has been created.

Message #

A new channel has been created.

Name: %1
Channel GUID: %2

Fields #

Name	Description
`Name` UnicodeString	—
`Guid` GUID	—

Event ID 3 — A channel has been closed.

Provider: Microsoft-Windows-SpecialAdministrationConsole
Channel: Operational

Description

A channel has been closed.

Message #

A channel has been closed.

Name: %1
Channel GUID: %2

Fields #

Name	Description
`Name` UnicodeString	—
`Guid` GUID	—

Event ID 4 — The current channel has been switched.

Provider: Microsoft-Windows-SpecialAdministrationConsole
Channel: Operational

Description

The current channel has been switched.

Message #

The current channel has been switched.

Name: %1
Description: %2
Type: %3
Channel GUID: %4
Application Type GUID: %5

Fields #

Name	Description
`Name` UnicodeString	—
`Description` UnicodeString	—
`ChannelType` UnicodeString	—
`Guid` GUID	—
`ApplicationType` GUID	—

Event ID 5 — The user mode SAC service has registered with the driver.

Provider: Microsoft-Windows-SpecialAdministrationConsole
Channel: Operational

Description

The user mode SAC service has registered with the driver.

Message #

The user mode SAC service has registered with the driver.

Event ID 6 — The user mode SAC service has unregistered from the driver.

Provider: Microsoft-Windows-SpecialAdministrationConsole
Channel: Operational

Description

The user mode SAC service has unregistered from the driver.

Message #

The user mode SAC service has unregistered from the driver.

Event ID 7 — A new Command Prompt channel could not be launched because launching of Command Prompt channels is disabled.

Provider: Microsoft-Windows-SpecialAdministrationConsole
Channel: Operational

Description

A new Command Prompt channel could not be launched because launching of Command Prompt channels is disabled.

Message #

A new Command Prompt channel could not be launched because launching of Command Prompt channels is disabled.

Event ID 8 — Prohibited command ID Command was not dispatched.

Provider: Microsoft-Windows-SpecialAdministrationConsole
Channel: Operational

Description

Prohibited command ID Command was not dispatched. The command line provided was.

Message #

Prohibited command ID %1 was not dispatched. The command line provided was:

%2

Fields #

Name	Description
`Command` UInt32	—
`InputLine` AnsiString	—