Microsoft-Windows-Subsys-SMSS

32 events across 2 channels

Event ID	Title	Channel
1		Operational
2		Operational
3		Operational
4		Operational
5		Operational
6		Operational
7		Operational
8		Operational
9		Operational
10		Operational
11		Operational
12	The crash dump file could not be created due to a lack of free space on the …	System
13	A run level switch from the CurrentRunLevel level to the TargetRunLevel level …	System
14	A run level switch from the CurrentRunLevel level to the TargetRunLevel level …	System
15	A run level switch from the CurrentRunLevel level to the TargetRunLevel level …	System
16	A run level switch from the CurrentRunLevel level to the TargetRunLevel level …	System
17	A platform binary was successfully executed.	System
18	An attempt to execute a platform binary failed with error code Status.	System
19		Operational
20		Operational
21		Operational
22		Operational
23		Operational
24		Operational
25		Operational
26		Operational
27		Operational
28		Operational
29		Operational
30		Operational
31		Operational
32		Operational

Event ID 1 —

Provider: Microsoft-Windows-Subsys-SMSS
Channel: Operational
Task: smss:ExecuteImage
Opcode: Start

Fields #

Name	Description
`Flags` UInt32	—
`ImageNameLength` UInt16	—
`ImageName` UnicodeString	—

Event ID 2 —

Provider: Microsoft-Windows-Subsys-SMSS
Channel: Operational
Task: smss:ExecuteImage
Opcode: Stop

Fields #

Name	Description
`ProcessId` UInt32	—

Event ID 3 —

Provider: Microsoft-Windows-Subsys-SMSS
Channel: Operational
Task: smss:InitializeRegistry
Opcode: Start

Event ID 4 —

Provider: Microsoft-Windows-Subsys-SMSS
Channel: Operational
Task: smss:InitializeRegistry
Opcode: Stop

Event ID 5 —

Provider: Microsoft-Windows-Subsys-SMSS
Channel: Operational
Task: smss:SetupExecuteList
Opcode: Start

Event ID 6 —

Provider: Microsoft-Windows-Subsys-SMSS
Channel: Operational
Task: smss:SetupExecuteList
Opcode: Stop

Event ID 7 —

Provider: Microsoft-Windows-Subsys-SMSS
Channel: Operational
Task: smss:BootExecuteList
Opcode: Start

Event ID 8 —

Provider: Microsoft-Windows-Subsys-SMSS
Channel: Operational
Task: smss:BootExecuteList
Opcode: Stop

Event ID 9 —

Provider: Microsoft-Windows-Subsys-SMSS
Channel: Operational
Task: smss:ProcessFileRenames
Opcode: Start

Event ID 10 —

Provider: Microsoft-Windows-Subsys-SMSS
Channel: Operational
Task: smss:ProcessFileRenames
Opcode: Stop

Event ID 11 —

Provider: Microsoft-Windows-Subsys-SMSS
Channel: Operational
Task: smss:FileRename

Fields #

Name	Description
`FromNameLength` UInt16	—
`ToNameLength` UInt16	—
`FromName` UnicodeString	—
`ToName` UnicodeString	—

Event ID 12 — The crash dump file could not be created due to a lack of free space on the destination drive.

Provider: Microsoft-Windows-Subsys-SMSS
Channel: System
Opcode: Info

Description

The crash dump file could not be created due to a lack of free space on the destination drive. Increasing the amount of free space on the destination drive may help prevent this error.

Message #

The crash dump file could not be created due to a lack of free space on the destination drive. Increasing the amount of free space on the destination drive may help prevent this error.

Fields #

Name	Description
`FileNameLength` UInt16	—
`FileName` UnicodeString	—

Event ID 13 — A run level switch from the CurrentRunLevel level to the TargetRunLevel level has started.

Provider: Microsoft-Windows-Subsys-SMSS
Channel: System
Opcode: Info

Description

A run level switch from the CurrentRunLevel level to the TargetRunLevel level has started.

Message #

A run level switch from the %1 level to the %2 level has started.

Fields #

Name	Description
`CurrentRunLevel` UnicodeString	—
`TargetRunLevel` UnicodeString	—

Event ID 14 — A run level switch from the CurrentRunLevel level to the TargetRunLevel level has ended successfully.

Provider: Microsoft-Windows-Subsys-SMSS
Channel: System
Opcode: Info

Description

A run level switch from the CurrentRunLevel level to the TargetRunLevel level has ended successfully.

Message #

A run level switch from the %1 level to the %2 level has ended successfully.

Fields #

Name	Description
`CurrentRunLevel` UnicodeString	—
`TargetRunLevel` UnicodeString	—

Event ID 15 — A run level switch from the CurrentRunLevel level to the TargetRunLevel level was failed by AgentName with the following error: Error For more details, please refer to events logged ...

Provider: Microsoft-Windows-Subsys-SMSS
Channel: System
Opcode: Info

Description

A run level switch from the CurrentRunLevel level to the TargetRunLevel level was failed by.

Message #

A run level switch from the %1 level to the %2 level was failed by 
%3 with the following error: 

%4

For more details, please refer to events logged by this agent.

Fields #

Name	Description
`CurrentRunLevel` UnicodeString	—
`TargetRunLevel` UnicodeString	—
`AgentName` UnicodeString	—
`Error` UnicodeString	—

Event ID 16 — A run level switch from the CurrentRunLevel level to the TargetRunLevel level was succeeded by AgentName with the following warning: Error For more details, please refer to events lo...

Provider: Microsoft-Windows-Subsys-SMSS
Channel: System
Opcode: Info

Description

A run level switch from the CurrentRunLevel level to the TargetRunLevel level was succeeded by.

Message #

A run level switch from the %1 level to the %2 level was succeeded by 
%3 with the following warning: 

%4

For more details, please refer to events logged by this agent.

Fields #

Name	Description
`CurrentRunLevel` UnicodeString	—
`TargetRunLevel` UnicodeString	—
`AgentName` UnicodeString	—
`Error` UnicodeString	—

Event ID 17 — A platform binary was successfully executed.

Provider: Microsoft-Windows-Subsys-SMSS
Channel: System
Opcode: Info

Description

A platform binary was successfully executed.

Message #

A platform binary was successfully executed.

Event ID 18 — An attempt to execute a platform binary failed with error code Status.

Provider: Microsoft-Windows-Subsys-SMSS
Channel: System
Opcode: Info

Description

An attempt to execute a platform binary failed with error code Status.

Message #

An attempt to execute a platform binary failed with error code %1.

Fields #

Name	Description
`Status` UInt32	— NTSTATUS reference

Event ID 19 —

Provider: Microsoft-Windows-Subsys-SMSS
Channel: Operational
Task: smss:BootExecuteNoPnpSyncList
Opcode: Start

Event ID 20 —

Provider: Microsoft-Windows-Subsys-SMSS
Channel: Operational
Task: smss:BootExecuteNoPnpSyncList
Opcode: Stop

Event ID 21 —

Provider: Microsoft-Windows-Subsys-SMSS
Channel: Operational
Task: smss:SerializeBoot
Opcode: Start

Event ID 22 —

Provider: Microsoft-Windows-Subsys-SMSS
Channel: Operational
Task: smss:SerializeBoot
Opcode: Stop

Fields #

Name	Description
`Status` UInt32	— NTSTATUS reference

Event ID 23 —

Provider: Microsoft-Windows-Subsys-SMSS
Channel: Operational
Task: smss:LoadSubsystem
Opcode: Start

Fields #

Name	Description
`SessionId` UInt32	—
`ImageNameLength` UInt16	—
`ImageName` UnicodeString	—

Event ID 24 —

Provider: Microsoft-Windows-Subsys-SMSS
Channel: Operational
Task: smss:LoadSubsystem
Opcode: Stop

Fields #

Name	Description
`Status` UInt32	— NTSTATUS reference

Event ID 25 —

Provider: Microsoft-Windows-Subsys-SMSS
Channel: Operational
Task: smss:InitializeKnownDlls
Opcode: Start

Event ID 26 —

Provider: Microsoft-Windows-Subsys-SMSS
Channel: Operational
Task: smss:InitializeKnownDlls
Opcode: Stop

Fields #

Name	Description
`Status` UInt32	— NTSTATUS reference

Event ID 27 —

Provider: Microsoft-Windows-Subsys-SMSS
Channel: Operational
Task: smss:PlatformExecuteList
Opcode: Start

Event ID 28 —

Provider: Microsoft-Windows-Subsys-SMSS
Channel: Operational
Task: smss:PlatformExecuteList
Opcode: Stop

Event ID 29 —

Provider: Microsoft-Windows-Subsys-SMSS
Channel: Operational
Task: smss:SetupExecuteNoPnpSyncList
Opcode: Start

Event ID 30 —

Provider: Microsoft-Windows-Subsys-SMSS
Channel: Operational
Task: smss:SetupExecuteNoPnpSyncList
Opcode: Stop

Event ID 31 —

Provider: Microsoft-Windows-Subsys-SMSS
Channel: Operational
Task: smss:RunSecureKernelTrustlets
Opcode: Start

Event ID 32 —

Provider: Microsoft-Windows-Subsys-SMSS
Channel: Operational
Task: smss:RunSecureKernelTrustlets
Opcode: Stop