Microsoft-Windows-UserModePowerService

59 events across 2 channels

Event ID	Title	Channel
1		Diagnostic
2		Diagnostic
3		Diagnostic
4		Diagnostic
5		Diagnostic
7		Diagnostic
8		Diagnostic
9		Diagnostic
10		Diagnostic
11		Diagnostic
12	Process ProcessPath (process ID:ProcessPid) reset policy scheme from …	System
13		Diagnostic
14		Diagnostic
15		Diagnostic
16		Diagnostic
17		Diagnostic
18		Diagnostic
19		Diagnostic
22	Reapply power settings upon completion of the provisioning engine's turn Turn.	System
23		Diagnostic
24		Diagnostic
25		Diagnostic
26		Diagnostic
27		Diagnostic
28		Diagnostic
29		Diagnostic
30		Diagnostic
31		Diagnostic
32		Diagnostic
33		Diagnostic
34		Diagnostic
35		Diagnostic
36		Diagnostic
37		Diagnostic
38		Diagnostic
39		Diagnostic
40		Diagnostic
41		Diagnostic
42		Diagnostic
43		Diagnostic
44		Diagnostic
45		Diagnostic
46		Diagnostic
47		Diagnostic
48		Diagnostic
49		Diagnostic
50		Diagnostic
51	Process ProcessPath (process ID:ProcessPid) reset overlay policy scheme from …	System
52		Diagnostic
53		Diagnostic
54		Diagnostic
55		Diagnostic
56		Diagnostic
57		Diagnostic
58		Diagnostic
59		Diagnostic
60		Diagnostic
61		Diagnostic
62		Diagnostic

Event ID 1 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: RundownPlatformRole

Fields #

Name	Description
`PlatformRole` UInt32	—

Event ID 2 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: RundownPowerScheme

Fields #

Name	Description
`SchemeGuid` GUID	—

Event ID 3 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: RundownAcPowerSetting

Fields #

Name	Description
`SubgroupGuid` GUID	—
`SettingGuid` GUID	—
`ValueIndex` UInt32	—
`Type` UInt32	—
`DataSize` UInt32	—
`Data` Binary	—
`Altitude` UInt32	—

Event ID 4 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: RundownDcPowerSetting

Fields #

Name	Description
`SubgroupGuid` GUID	—
`SettingGuid` GUID	—
`ValueIndex` UInt32	—
`Type` UInt32	—
`DataSize` UInt32	—
`Data` Binary	—
`Altitude` UInt32	—

Event ID 5 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: AdaptiveDimTimeout

Fields #

Name	Description
`Timeout` UInt32	—

Event ID 7 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Opcode: Info

Fields #

Name	Description
`Name` UnicodeString	—

Event ID 8 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: RundownBatteryInformation

Fields #

Name	Description
`DeviceName` UnicodeString	—
`ManufacturerName` UnicodeString	—
`ManufactureDay` UInt8	—
`ManufactureMonth` UInt8	—
`ManufactureYear` UInt16	—
`SerialNumber` UnicodeString	—
`Capabilities` UInt32	—
`Technology` UInt8	—
`Pad` Binary	—
`Chemistry` AnsiString	—
`DesignCapacity` UInt32	—
`FullChargeCapacity` UInt32	—
`DefaultAlert1` UInt32	—
`DefaultAlert2` UInt32	—
`CriticalBias` UInt32	—
`CycleCount` UInt32	—
`GranularityScaleCount` UInt32	—
`GranularityScale` SID	—
`UniqueId` UnicodeString	—

Event ID 9 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: RundownBatteryStatus

Fields #

Name	Description
`State` UInt32	—
`Capacity` UInt32	—
`Voltage` UInt32	—
`Rate` Int32	—
`EstimatedRuntime` UInt32	—
`UniqueId` UnicodeString	—

Event ID 10 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: RundownBrightnessCapability

Fields #

Name	Description
`BrightnessCapable` Boolean	—

Event ID 11 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: RundownPowerSource

Fields #

Name	Description
`AcOnline` Boolean	—

Event ID 12 — Process ProcessPath (process ID:ProcessPid) reset policy scheme from OldSchemeGuid to NewSchemeGuid.

Provider: Microsoft-Windows-UserModePowerService
Channel: System
Level: Informational
Task: PowerSchemeChanged

Description

Process ProcessPath (process ID:ProcessPid) reset policy scheme from OldSchemeGuid to NewSchemeGuid.

Message #

Process %1 (process ID:%2) reset policy scheme from %3 to %4

Fields #

Name	Description
`ProcessPath` UnicodeString	—
`ProcessPid` UInt32	—
`OldSchemeGuid` GUID	—
`NewSchemeGuid` GUID	—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-UserModePowerService",
    "guid": "CE8DEE0B-D539-4000-B0F8-77BED049C590",
    "event_source_name": "",
    "event_id": 12,
    "version": 0,
    "level": 4,
    "task": 10,
    "opcode": 0,
    "keywords": 4611686018427387904,
    "time_created": "2022-04-04T13:15:18.534497+00:00",
    "event_record_id": 1678,
    "correlation": {},
    "execution": {
      "process_id": 724,
      "thread_id": 2708
    },
    "channel": "System",
    "computer": "WIN-TKC15D7KHUR",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "ProcessPath": "C:\\Windows\\WinSxS\\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.20348.557_none_f1edaeb8515fa10d\\TiWorker.exe",
    "ProcessPid": 1292,
    "OldSchemeGuid": "381B4222-F694-41F0-9685-FF5BB260DF2E",
    "NewSchemeGuid": "381B4222-F694-41F0-9685-FF5BB260DF2E"
  },
  "message": ""
}

References #

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 13 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: PowerMeterData

Fields #

Name	Description
`MeterId` Pointer	—
`value` UInt32	—

Event ID 14 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: PowerMeterMetaData

Fields #

Name	Description
`MeterId` Pointer	—
`SamplingPeriod` UInt64	—
`MeterNameLength` UInt32	—
`MeterName` UnicodeString	—
`MeteredHardwareCount` UInt32	—
`MeteredHardwareName` UnicodeString	—

Event ID 15 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: RundownOverrideConfiguration

Fields #

Name	Description
`Flags` UInt32	—
`ProcessorVendor` UInt32	—
`ProcessorType` UInt32	—

Event ID 16 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: RundownOverridePowerSetting

Fields #

Name	Description
`SchemeGuid` GUID	—
`SubgroupGuid` GUID	—
`SettingGuid` GUID	—
`Flags` UInt32	—
`DataType` UInt32	—
`DataSize` UInt32	—
`Data` Binary	—
`ProfileGuid` GUID	—

Event ID 17 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: RundownPowerProfileSetting

Fields #

Name	Description
`ProfileGuid` GUID	—
`SubgroupGuid` GUID	—
`SettingGuid` GUID	—
`SchemePersonalityGuid` GUID	—
`Flags` UInt32	—
`ValueIndex` UInt32	—
`Type` UInt32	—
`DataSize` UInt32	—
`Data` Binary	—
`Altitude` UInt32	—

Event ID 18 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: EnergyMeterData

Fields #

Name	Description
`MeterId` Pointer	—
`AbsoluteEnergy` UInt64	—
`AbsoluteTime` UInt64	—

Event ID 19 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: EnergyMeterMetaData

Fields #

Name	Description
`MeterId` Pointer	—
`SamplingPeriod` UInt64	—
`ChannelNameLength` UInt32	—
`ChannelName` UnicodeString	—

Event ID 22 — Reapply power settings upon completion of the provisioning engine's turn Turn.

Provider: Microsoft-Windows-UserModePowerService
Channel: System
Level: Informational
Task: ProvEngineTurnApply

Description

Reapply power settings upon completion of the provisioning engine's turn Turn.

Message #

Reapply power settings upon completion of the provisioning engine's turn %1

Fields #

Name	Description
`Turn` UInt32	—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-UserModePowerService",
    "guid": "CE8DEE0B-D539-4000-B0F8-77BED049C590",
    "event_source_name": "",
    "event_id": 22,
    "version": 0,
    "level": 4,
    "task": 18,
    "opcode": 0,
    "keywords": 4611686018427387904,
    "time_created": "2025-12-31T19:32:24.462056+00:00",
    "event_record_id": 160,
    "correlation": {},
    "execution": {
      "process_id": 988,
      "thread_id": 540
    },
    "channel": "System",
    "computer": "USERUSE-98J6DVC",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Turn": 1
  },
  "message": ""
}

Event ID 23 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: RundownConsoleSession

Fields #

Name	Description
`SessionId` UInt32	—

Event ID 24 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: ConsoleSessionChange

Fields #

Name	Description
`Event` UInt32	—
`SessionId` UInt32	—

Event ID 25 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: RundownSessionUser

Fields #

Name	Description
`UserContextToken` UInt64	—
`SessionId` UInt32	—
`UserSid` SID	—

Event ID 26 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: SessionUserChange

Fields #

Name	Description
`Event` UInt32	—
`UserContextToken` UInt64	—
`SessionId` UInt32	—
`UserSid` SID	—

Event ID 27 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: RundownSmartUserPresenceState

Fields #

Name	Description
`Supported` Boolean	—
`GlobalUserPresent` Boolean	—
`UserPredictionMode` UInt32	—
`MinConfidence` UInt8	—
`SuspendCount` UInt32	—
`LastUserAwayEndSystemTime` UInt64	—

Event ID 28 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: RundownSmartUserPresenceIntevals

Fields #

Name	Description
`UserSid` SID	—
`IntervalCount` UInt32	—
`AwayIntervals` UInt8	—
`Flags` UInt32	—

Event ID 29 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: SmartUserPresenceIntervalsSet

Fields #

Name	Description
`UserSid` SID	—
`IntervalCount` UInt32	—
`AwayIntervals` UInt8	—
`Flags` UInt32	—

Event ID 30 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: SmartUserPresenceIntevalsClear

Fields #

Name	Description
`UserSid` SID	—

Event ID 31 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: SmartUserPresencePrediction

Fields #

Name	Description
`UserAwayEndSystemTime` UInt64	—

Event ID 32 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: SmartUserPresenceSuspendResume

Fields #

Name	Description
`Suspend` Boolean	—
`SuspendCount` UInt32	—
`GlobalUserPresent` Boolean	—
`UserPredictionMode` UInt32	—

Event ID 33 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: SmartUserPresenceTimeUpdate

Fields #

Name	Description
`SystemTimeShift` Int64	—

Event ID 34 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: SleepStudySleepSession
Opcode: Start

Fields #

Name	Description
`Type` UInt32	—
`Id` UInt32	—

Event ID 35 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: SleepStudySleepSession
Opcode: Stop

Fields #

Name	Description
`Type` UInt32	—
`Id` UInt32	—
`ErrorCode` UInt32	—

Event ID 36 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: SleepStudySleepSession
Opcode: TooShort

Fields #

Name	Description
`Type` UInt32	—
`Id` UInt32	—

Event ID 37 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: SleepStudySleepSessionRelogging
Opcode: Start

Fields #

Name	Description
`Type` UInt32	—
`Id` UInt32	—

Event ID 38 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: SleepStudySleepSessionRelogging
Opcode: Stop

Fields #

Name	Description
`Type` UInt32	—
`Id` UInt32	—
`ErrorCode` UInt32	—

Event ID 39 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: SleepStudySleepSessionRelogging
Opcode: PassStart

Fields #

Name	Description
`Type` UInt32	—
`Id` UInt32	—

Event ID 40 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: SleepStudySleepSessionRelogging
Opcode: PassStop

Fields #

Name	Description
`Type` UInt32	—
`Id` UInt32	—
`ErrorCode` UInt32	—

Event ID 41 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: SleepStudySleepSessionRelogging
Opcode: MissingStart

Fields #

Name	Description
`Type` UInt32	—
`Id` UInt32	—

Event ID 42 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: SleepStudySleepSessionRelogging
Opcode: MissingStop

Fields #

Name	Description
`Type` UInt32	—
`Id` UInt32	—
`ErrorCode` UInt32	—

Event ID 43 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: BrightnessAndTransitionTimes

Fields #

Name	Description
`EffectiveBrightnessPercentage` UInt32	—
`EffectiveBrightnessMillinits` UInt32	—
`NewBrightnessTransitionTime` UInt32	—
`DimmingTransitionTime` UInt32	—
`DimmedBrightnessPercentage` UInt32	—
`DimmedBrightnessMillinits` UInt32	—
`NewDimmedTransitionTime` UInt32	—
`UnDimmingTransitionTime` UInt32	—

Event ID 44 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: AdaptiveStandby
Opcode: BatteryReserveAction

Fields #

Name	Description
`TimeInStandby` UInt32	—
`GracePeriod` UInt32	—
`RemainingBatteryPercentage` UInt32	—
`RemainingBatteryTime` UInt32	—
`ReserveBatteryTime` UInt32	—
`ExecuteAction` Boolean	—
`RejectReason` UInt32	—
`DataSources` UInt32	—
`CsSessionId` UInt32	—

Event ID 45 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: AdaptiveStandby
Opcode: StandbyBudgetAction

Fields #

Name	Description
`TimeInStandby` UInt32	—
`GracePeriod` UInt32	—
`RemainingBatteryPercentage` UInt32	—
`StandbyBatteryDrainPercentage` UInt32	—
`BatteryDrainPercentageThreshold` UInt32	—
`ExecuteAction` Boolean	—
`RejectReason` UInt32	—
`DataSources` UInt32	—
`CsSessionId` UInt32	—

Event ID 46 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: AdaptiveStandby
Opcode: StandbyBudgetReset

Fields #

Name	Description
`ActualTimeRange` UInt32	—
`RemainingBatteryPercentage` UInt32	—

Event ID 47 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: AdaptiveStandby
Opcode: SrumFailure

Fields #

Name	Description
`Action` UInt32	—
`Error` UInt32	—

Event ID 48 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: GpuAdapterCount

Fields #

Name	Description
`Id` UInt8	—
`GpuCount` UInt8	—
`IdV2` UInt64	—

Event ID 49 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: RundownOverlaySchemePowerSetting

Fields #

Name	Description
`OverlaySchemeGuid` GUID	—
`SubgroupGuid` GUID	—
`SettingGuid` GUID	—
`Flags` UInt32	—
`ValueIndex` UInt32	—
`Type` UInt32	—
`DataSize` UInt32	—
`Data` Binary	—
`Altitude` UInt32	—

Event ID 50 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: RundownActualOverlayPowerScheme

Fields #

Name	Description
`SchemeGuid` GUID	—
`AcOverlay` Boolean	—

Event ID 51 — Process ProcessPath (process ID:ProcessPid) reset overlay policy scheme from OldSchemeGuid to NewSchemeGuid.

Provider: Microsoft-Windows-UserModePowerService
Channel: System
Task: OverlayPowerSchemeChanged

Description

Process ProcessPath (process ID:ProcessPid) reset overlay policy scheme from OldSchemeGuid to NewSchemeGuid.

Message #

Process %1 (process ID:%2) reset overlay policy scheme from %3 to %4

Fields #

Name	Description
`ProcessPath` UnicodeString	—
`ProcessPid` UInt32	—
`OldSchemeGuid` GUID	—
`NewSchemeGuid` GUID	—

Event ID 52 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: RundownEffectiveOverlayPowerScheme

Fields #

Name	Description
`SchemeGuid` GUID	—

Event ID 53 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: RundownOverlaySuspendReason

Fields #

Name	Description
`Reason` UInt32	—

Event ID 54 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: OverlaySuspendResume

Fields #

Name	Description
`Reason` UInt32	—
`Suspend` Boolean	—

Event ID 55 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: OverrideDllSettingsUpdate

Event ID 56 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: OverrideDllPowerSetting

Fields #

Name	Description
`SchemeGuid` GUID	—
`SubgroupGuid` GUID	—
`SettingGuid` GUID	—
`Flags` UInt32	—
`DataType` UInt32	—
`DataSize` UInt32	—
`Data` Binary	—
`ProfileGuid` GUID	—

Event ID 57 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: AdaptiveStandby
Opcode: Start

Fields #

Name	Description
`Reason` UInt32	—

Event ID 58 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: AdaptiveStandby
Opcode: Stop

Fields #

Name	Description
`Reason` UInt32	—

Event ID 59 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: PowerSettingUpdate

Fields #

Name	Description
`IsSystem` UInt8	—
`IsAc` UInt8	—
`ProcessPid` UInt32	—
`ProcessName` UnicodeString	—
`DataSize` UInt32	—
`Data` Binary	—

Event ID 60 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: AdaptiveStandby
Opcode: AusterityBudgetAction

Fields #

Name	Description
`TimeInStandby` UInt32	—
`GracePeriod` UInt32	—
`RemainingBatteryPercentage` UInt32	—
`StandbyBatteryDrainPercentage` UInt32	—
`BatteryDrainPercentageThreshold` UInt32	—
`ExecuteAction` Boolean	—
`RejectReason` UInt32	—
`DataSources` UInt32	—
`CsSessionId` UInt32	—

Event ID 61 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: SmartSuspendPrediction

Fields #

Name	Description
`TargetState` UInt32	—
`SearchIndex` UInt32	—
`SearchStartTime` FILETIME	—
`SearchEndTime` FILETIME	—
`EntryTime` FILETIME	—
`ExitTime` FILETIME	—
`Error` UInt32	—
`Flags` UInt32	—
`ProbabilityThreshold` UInt8	—
`ConfidenceThreshold` UInt8	—
`ProbabilityActual` UInt8	—
`ConfidenceActual` UInt8	—

Event ID 62 —

Provider: Microsoft-Windows-UserModePowerService
Channel: Diagnostic
Task: SmartSuspendRundown

Fields #

Name	Description
`State` UInt32	—
`DisableReason` UInt32	—
`ThresholdCount` UInt32	—
`Thresholds` UInt8	—