Microsoft-Windows-TerminalServices-ServerUSBDevices

20 events across 4 channels

Event ID 2 — message.

Provider
Microsoft-Windows-TerminalServices-ServerUSBDevices
Channel
Debug

Message #

%1

Fields #

NameDescription
message AnsiString

Event ID 3 — message.

Provider
Microsoft-Windows-TerminalServices-ServerUSBDevices
Channel
Debug

Message #

%1

Fields #

NameDescription
message AnsiString

Event ID 4 — message.

Provider
Microsoft-Windows-TerminalServices-ServerUSBDevices
Channel
Analytic

Message #

%1

Fields #

NameDescription
message AnsiString

Event ID 5 — message.

Provider
Microsoft-Windows-TerminalServices-ServerUSBDevices
Channel
Analytic

Message #

%1

Fields #

NameDescription
message AnsiString

Event ID 6 — message.

Provider
Microsoft-Windows-TerminalServices-ServerUSBDevices
Channel
Debug

Message #

%1

Fields #

NameDescription
message AnsiString

Event ID 7 — message.

Provider
Microsoft-Windows-TerminalServices-ServerUSBDevices
Channel
Debug

Message #

%1

Fields #

NameDescription
message AnsiString

Event ID 8 — message.

Provider
Microsoft-Windows-TerminalServices-ServerUSBDevices
Channel
Analytic

Message #

%1

Fields #

NameDescription
message AnsiString

Event ID 9 — message.

Provider
Microsoft-Windows-TerminalServices-ServerUSBDevices
Channel
Analytic

Message #

%1

Fields #

NameDescription
message AnsiString

Event ID 32 — Failed to create Physical Device Object for device objectPointer.

Provider
Microsoft-Windows-TerminalServices-ServerUSBDevices
Channel
Analytic

Description

Failed to create Physical Device Object for device objectPointer.

Message #

Failed to create Physical Device Object for device %1.

Fields #

NameDescription
objectPointer Pointer

Event ID 34 — Driver for device objectPointer failed to load.

Provider
Microsoft-Windows-TerminalServices-ServerUSBDevices
Channel
Analytic

Description

Driver for device objectPointer failed to load. Timeout period has expired.

Message #

Driver for device %1 failed to load. Timeout period has expired.

Fields #

NameDescription
objectPointer Pointer

Event ID 35 — Device deviceName is not supported on this machine, a generic driver is loaded.

Provider
Microsoft-Windows-TerminalServices-ServerUSBDevices
Channel
Admin

Description

Device deviceName is not supported on this machine, a generic driver is loaded.

Message #

Device %1 is not supported on this machine, a generic driver is loaded.

Fields #

NameDescription
deviceName UnicodeString

Event ID 36 — Redirection of additional supported devices is disabled by policy.

Provider
Microsoft-Windows-TerminalServices-ServerUSBDevices
Channel
Admin
Level
Warning

Description

Redirection of additional supported devices is disabled by policy.

Message #

Redirection of additional supported devices is disabled by policy.

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-TerminalServices-ServerUSBDevices",
    "guid": "DCBE5AAA-16E2-457C-9337-366950045F0A",
    "event_source_name": "",
    "event_id": 36,
    "version": 0,
    "level": 3,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2026-03-11T06:31:09.458920+00:00",
    "event_record_id": 10,
    "correlation": {},
    "execution": {
      "process_id": 2044,
      "thread_id": 800
    },
    "channel": "Microsoft-Windows-TerminalServices-ServerUSBDevices/Admin",
    "computer": "LAB-WIN11",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 37 — Device deviceName is successfully installed.

Provider
Microsoft-Windows-TerminalServices-ServerUSBDevices
Channel
Operational

Description

Device deviceName is successfully installed.

Message #

Device %1 is successfully installed

Fields #

NameDescription
deviceName UnicodeString

Event ID 38 — Client requests to redirect device objectPointer.

Provider
Microsoft-Windows-TerminalServices-ServerUSBDevices
Channel
Debug

Description

Client requests to redirect device objectPointer. NtStatus = ntStatus.

Message #

Client requests to redirect device %1.  NtStatus = %2.

Fields #

NameDescription
objectPointer Pointer
ntStatus HexInt32

Event ID 39 — Client requests to remove a redirected device objectPointer.

Provider
Microsoft-Windows-TerminalServices-ServerUSBDevices
Channel
Debug

Description

Client requests to remove a redirected device objectPointer. NtStatus = ntStatus.

Message #

Client requests to remove a redirected device %1.  NtStatus = %2.

Fields #

NameDescription
objectPointer Pointer
ntStatus HexInt32

Event ID 40 — Dynamic virtual channel objectPointer is connected.

Provider
Microsoft-Windows-TerminalServices-ServerUSBDevices
Channel
Debug

Description

Dynamic virtual channel objectPointer is connected. NtStatus = ntStatus.

Message #

Dynamic virtual channel %1 is connected.  NtStatus = %2.

Fields #

NameDescription
objectPointer Pointer
ntStatus HexInt32

Event ID 41 — Dynamic virtual channel objectPointer is disconnected.

Provider
Microsoft-Windows-TerminalServices-ServerUSBDevices
Channel
Debug

Description

Dynamic virtual channel objectPointer is disconnected. NtStatus = ntStatus.

Message #

Dynamic virtual channel %1 is disconnected.  NtStatus = %2.

Fields #

NameDescription
objectPointer Pointer
ntStatus HexInt32

Event ID 42 — Redirected device objectPointer name is nameString.

Provider
Microsoft-Windows-TerminalServices-ServerUSBDevices
Channel
Debug

Description

Redirected device objectPointer name is nameString.

Message #

Redirected device %1 name is %2.

Fields #

NameDescription
objectPointer Pointer
nameString UnicodeString

Event ID 43 — Redirected device objectPointer is starting.

Provider
Microsoft-Windows-TerminalServices-ServerUSBDevices
Channel
Debug

Description

Redirected device objectPointer is starting. NtStatus = ntStatus.

Message #

Redirected device %1 is starting. NtStatus = %2

Fields #

NameDescription
objectPointer Pointer
ntStatus HexInt32

Event ID 44 — Redirected device objectPointer is stopping.

Provider
Microsoft-Windows-TerminalServices-ServerUSBDevices
Channel
Debug

Description

Redirected device objectPointer is stopping. NtStatus = ntStatus.

Message #

Redirected device %1 is stopping. NtStatus = %2

Fields #

NameDescription
objectPointer Pointer
ntStatus HexInt32