Microsoft-Windows-TerminalServices-RdpSoundDriver

17 events across 2 channels

Event ID	Title	Channel
1000	Server version: UInt32_1.	Playback
1001	Playback format.	Playback
1002	Playback format changed to: Format: UINT16_FORMAT_TAG Channels: …	Playback
1003	Audio playback redirection is enabled.	Playback
1004	Audio playback redirection was disabled by the client computer.	Playback
1005	Audio playback redirection was disabled because of a licensing issue.	Playback
1006	Audio playback redirection was disabled by using Group Policy.	Playback
1007	Audio playback redirection was disabled by using the Windows Registry.	Playback
1008	Audio playback redirection was disabled by an administrator.	Playback
1009	Audio playback redirection quality mode: UInt32Parameter Quality mode is a …	Playback
2003	Audio recording redirection is enabled.	Capture
2004	Audio recording redirection was disabled by the client computer.	Capture
2005	Audio recording redirection was disabled because of a licensing issue.	Capture
2006	Audio recording redirection was disabled by using Group Policy.	Capture
2007	Audio recording redirection was disabled by using the Windows Registry.	Capture
2008	Audio recording redirection was disabled by an administrator.	Capture
2009	Audio recording redirection is not available when the account is using session …	Capture

Event ID 1000 — Server version: UInt32_1.

Provider: Microsoft-Windows-TerminalServices-RdpSoundDriver
Channel: Playback
Task: SettingsCheck

Description

Server version: UInt32_1.

Message #

Server version: %1
Client version: %2

Fields #

Name	Description
`UInt32_1` UInt32	—
`UInt32_2` UInt32	—
`SessionID` UInt32	—

Event ID 1001 — Playback format.

Provider: Microsoft-Windows-TerminalServices-RdpSoundDriver
Channel: Playback
Task: StreamSetup

Description

Playback format.

Message #

Playback format:

Format: %1
Channels: %2
Samples per second: %3
Avg. Bytes per second: %4
Block align: %5
Bits per sample: %6

Fields #

Name	Description
`UINT16_FORMAT_TAG` UInt16	—
`UINT16_NUM_CHANNELS` UInt16	—
`UINT32_SAMPLES_PER_SECOND` UInt32	—
`UINT32_AVERAGE_BYTES_PER_SECOND` UInt32	—
`UINT16_BLOCK_ALIGN` UInt16	—
`UINT16_BITS_PER_SAMPLE` UInt16	—
`UINT16_STRUCTURE_SIZE` UInt16	—
`SessionID` UInt32	—

Event ID 1002 — Playback format changed to: Format: UINT16_FORMAT_TAG Channels: UINT16_NUM_CHANNELS Samples per second: UINT32_SAMPLES_PER_SECOND Avg.

Provider: Microsoft-Windows-TerminalServices-RdpSoundDriver
Channel: Playback
Task: SettingsChange

Description

Playback format changed to.

Message #

Playback format changed to:

Format: %1
Channels: %2
Samples per second: %3
Avg. Bytes per second: %4
Block align: %5
Bits per sample: %6

Fields #

Name	Description
`UINT16_FORMAT_TAG` UInt16	—
`UINT16_NUM_CHANNELS` UInt16	—
`UINT32_SAMPLES_PER_SECOND` UInt32	—
`UINT32_AVERAGE_BYTES_PER_SECOND` UInt32	—
`UINT16_BLOCK_ALIGN` UInt16	—
`UINT16_BITS_PER_SAMPLE` UInt16	—
`UINT16_STRUCTURE_SIZE` UInt16	—
`SessionID` UInt32	—

Event ID 1003 — Audio playback redirection is enabled.

Provider: Microsoft-Windows-TerminalServices-RdpSoundDriver
Channel: Playback
Task: SettingsCheck

Description

Audio playback redirection is enabled.

Message #

Audio playback redirection is enabled.

Fields #

Name	Description
`StringParameter` UnicodeString	—
`UInt32Parameter` UInt32	—
`SessionID` UInt32	—

Event ID 1004 — Audio playback redirection was disabled by the client computer.

Provider: Microsoft-Windows-TerminalServices-RdpSoundDriver
Channel: Playback
Task: SettingsCheck

Description

Audio playback redirection was disabled by the client computer.

Message #

Audio playback redirection was disabled by the client computer.

Fields #

Name	Description
`StringParameter` UnicodeString	—
`UInt32Parameter` UInt32	—
`SessionID` UInt32	—

Event ID 1005 — Audio playback redirection was disabled because of a licensing issue.

Provider: Microsoft-Windows-TerminalServices-RdpSoundDriver
Channel: Playback
Task: SettingsCheck

Description

Audio playback redirection was disabled because of a licensing issue.

Message #

Audio playback redirection was disabled because of a licensing issue.

Fields #

Name	Description
`StringParameter` UnicodeString	—
`UInt32Parameter` UInt32	—
`SessionID` UInt32	—

Event ID 1006 — Audio playback redirection was disabled by using Group Policy.

Provider: Microsoft-Windows-TerminalServices-RdpSoundDriver
Channel: Playback
Task: SettingsCheck

Description

Audio playback redirection was disabled by using Group Policy.

Message #

Audio playback redirection was disabled by using Group Policy.

Fields #

Name	Description
`StringParameter` UnicodeString	—
`UInt32Parameter` UInt32	—
`SessionID` UInt32	—

Event ID 1007 — Audio playback redirection was disabled by using the Windows Registry.

Provider: Microsoft-Windows-TerminalServices-RdpSoundDriver
Channel: Playback
Task: SettingsCheck

Description

Audio playback redirection was disabled by using the Windows Registry.

Message #

Audio playback redirection was disabled by using the Windows Registry.

Fields #

Name	Description
`StringParameter` UnicodeString	—
`UInt32Parameter` UInt32	—
`SessionID` UInt32	—

Event ID 1008 — Audio playback redirection was disabled by an administrator.

Provider: Microsoft-Windows-TerminalServices-RdpSoundDriver
Channel: Playback
Task: SettingsCheck

Description

Audio playback redirection was disabled by an administrator.

Message #

Audio playback redirection was disabled by an administrator.

Fields #

Name	Description
`StringParameter` UnicodeString	—
`UInt32Parameter` UInt32	—
`SessionID` UInt32	—

Event ID 1009 — Audio playback redirection quality mode: UInt32Parameter Quality mode is a bitmask where Dynamic=0x01, Medium=0x02, and High Quality = 0x04.

Provider: Microsoft-Windows-TerminalServices-RdpSoundDriver
Channel: Playback
Task: SettingsCheck

Description

Audio playback redirection quality mode: UInt32Parameter.

Message #

Audio playback redirection quality mode: %2

Quality mode is a bitmask where Dynamic=0x01, Medium=0x02, and High Quality = 0x04.

Fields #

Name	Description
`StringParameter` UnicodeString	—
`UInt32Parameter` UInt32	—
`SessionID` UInt32	—

Event ID 2003 — Audio recording redirection is enabled.

Provider: Microsoft-Windows-TerminalServices-RdpSoundDriver
Channel: Capture
Task: SettingsCheck

Description

Audio recording redirection is enabled.

Message #

Audio recording redirection is enabled.

Fields #

Name	Description
`StringParameter` UnicodeString	—
`UInt32Parameter` UInt32	—
`SessionID` UInt32	—

Event ID 2004 — Audio recording redirection was disabled by the client computer.

Provider: Microsoft-Windows-TerminalServices-RdpSoundDriver
Channel: Capture
Task: SettingsCheck

Description

Audio recording redirection was disabled by the client computer.

Message #

Audio recording redirection was disabled by the client computer.

Fields #

Name	Description
`StringParameter` UnicodeString	—
`UInt32Parameter` UInt32	—
`SessionID` UInt32	—

Event ID 2005 — Audio recording redirection was disabled because of a licensing issue.

Provider: Microsoft-Windows-TerminalServices-RdpSoundDriver
Channel: Capture
Task: SettingsCheck

Description

Audio recording redirection was disabled because of a licensing issue.

Message #

Audio recording redirection was disabled because of a licensing issue.

Fields #

Name	Description
`StringParameter` UnicodeString	—
`UInt32Parameter` UInt32	—
`SessionID` UInt32	—

Event ID 2006 — Audio recording redirection was disabled by using Group Policy.

Provider: Microsoft-Windows-TerminalServices-RdpSoundDriver
Channel: Capture
Task: SettingsCheck

Description

Audio recording redirection was disabled by using Group Policy.

Message #

Audio recording redirection was disabled by using Group Policy.

Fields #

Name	Description
`StringParameter` UnicodeString	—
`UInt32Parameter` UInt32	—
`SessionID` UInt32	—

Event ID 2007 — Audio recording redirection was disabled by using the Windows Registry.

Provider: Microsoft-Windows-TerminalServices-RdpSoundDriver
Channel: Capture
Task: SettingsCheck

Description

Audio recording redirection was disabled by using the Windows Registry.

Message #

Audio recording redirection was disabled by using the Windows Registry.

Fields #

Name	Description
`StringParameter` UnicodeString	—
`UInt32Parameter` UInt32	—
`SessionID` UInt32	—

Event ID 2008 — Audio recording redirection was disabled by an administrator.

Provider: Microsoft-Windows-TerminalServices-RdpSoundDriver
Channel: Capture
Task: SettingsCheck

Description

Audio recording redirection was disabled by an administrator.

Message #

Audio recording redirection was disabled by an administrator.

Fields #

Name	Description
`StringParameter` UnicodeString	—
`UInt32Parameter` UInt32	—
`SessionID` UInt32	—

Event ID 2009 — Audio recording redirection is not available when the account is using session zero.

Provider: Microsoft-Windows-TerminalServices-RdpSoundDriver
Channel: Capture
Task: SettingsCheck

Description

Audio recording redirection is not available when the account is using session zero.

Message #

Audio recording redirection is not available when the account is using session zero.

Fields #

Name	Description
`StringParameter` UnicodeString	—
`UInt32Parameter` UInt32	—
`SessionID` UInt32	—