Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Log Name: System
- Source: Microsoft-Windows-WindowsUpdateClient
- Date: 8/23/2016 6:48:10 PM
- Event ID: 20
- Task Category: Windows Update Agent
- Level: Error
- Keywords: Failure,Installation
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Windows Defender - KB2267602 (Definition 1.227.512.0).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-WindowsUpdateClient" Guid="{945A8954-C147-4ACD-923F-40C45405A658}" />
- <EventID>20</EventID>
- <Version>1</Version>
- <Level>2</Level>
- <Task>1</Task>
- <Opcode>13</Opcode>
- <Keywords>0x8000000000000028</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:48:10.700576600Z" />
- <EventRecordID>1114</EventRecordID>
- <Correlation />
- <Execution ProcessID="636" ThreadID="612" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="errorCode">0x80070643</Data>
- <Data Name="updateTitle">Definition Update for Windows Defender - KB2267602 (Definition 1.227.512.0)</Data>
- <Data Name="updateGuid">{C8D50CE7-66E2-4E38-AE89-16551E17C299}</Data>
- <Data Name="updateRevisionNumber">200</Data>
- <Data Name="serviceGuid">{9482F4B4-E343-43B6-B170-9A65BC822C77}</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 6:42:21 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
- and APPID
- {F72671A9-012C-4725-9D2F-2A4D32D65169}
- to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:42:21.428181100Z" />
- <EventRecordID>1111</EventRecordID>
- <Correlation />
- <Execution ProcessID="1020" ThreadID="1368" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}</Data>
- <Data Name="param5">{F72671A9-012C-4725-9D2F-2A4D32D65169}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">SYSTEM</Data>
- <Data Name="param8">S-1-5-18</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: Application
- Source: Application Error
- Date: 8/23/2016 6:38:08 PM
- Event ID: 1000
- Task Category: (100)
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Faulting application name: DipAwayMode.exe, version: 0.0.0.0, time stamp: 0x00000000
- Faulting module name: KERNELBASE.dll, version: 10.0.14393.0, time stamp: 0x57898e34
- Exception code: 0xc0000409
- Fault offset: 0x000d96c2
- Faulting process id: 0xb3c
- Faulting application start time: 0x01d1fda817946ccb
- Faulting application path: C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
- Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
- Report Id: 3ff5c283-fee1-4ea2-8ab4-3ed3c1abfe05
- Faulting package full name:
- Faulting package-relative application ID:
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Application Error" />
- <EventID Qualifiers="0">1000</EventID>
- <Level>2</Level>
- <Task>100</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:38:08.968965500Z" />
- <EventRecordID>702</EventRecordID>
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>DipAwayMode.exe</Data>
- <Data>0.0.0.0</Data>
- <Data>00000000</Data>
- <Data>KERNELBASE.dll</Data>
- <Data>10.0.14393.0</Data>
- <Data>57898e34</Data>
- <Data>c0000409</Data>
- <Data>000d96c2</Data>
- <Data>b3c</Data>
- <Data>01d1fda817946ccb</Data>
- <Data>C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe</Data>
- <Data>C:\WINDOWS\System32\KERNELBASE.dll</Data>
- <Data>3ff5c283-fee1-4ea2-8ab4-3ed3c1abfe05</Data>
- <Data>
- </Data>
- <Data>
- </Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-WER-SystemErrorReporting
- Date: 8/23/2016 6:37:43 PM
- Event ID: 1001
- Task Category: None
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- The computer has rebooted from a bugcheck. The bugcheck was: 0x00000124 (0x0000000000000000, 0xffff800f2447e028, 0x00000000be000000, 0x0000000000800400). A dump was saved in: C:\WINDOWS\MEMORY.DMP. Report Id: f65d9ee7-dc42-411e-8478-c66a72ae4624.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />
- <EventID Qualifiers="16384">1001</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:37:43.538720700Z" />
- <EventRecordID>1109</EventRecordID>
- <Correlation />
- <Execution ProcessID="0" ThreadID="0" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data Name="param1">0x00000124 (0x0000000000000000, 0xffff800f2447e028, 0x00000000be000000, 0x0000000000800400)</Data>
- <Data Name="param2">C:\WINDOWS\MEMORY.DMP</Data>
- <Data Name="param3">f65d9ee7-dc42-411e-8478-c66a72ae4624</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:37:33 PM
- Event ID: 201
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Metadata and Internet Services (WMIS) could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>201</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:37:33.410490300Z" />
- <EventRecordID>249</EventRecordID>
- <Correlation />
- <Execution ProcessID="636" ThreadID="1904" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:37:33 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:37:33.410410500Z" />
- <EventRecordID>248</EventRecordID>
- <Correlation />
- <Execution ProcessID="636" ThreadID="1904" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:37:33 PM
- Event ID: 201
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Metadata and Internet Services (WMIS) could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>201</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:37:33.410263100Z" />
- <EventRecordID>247</EventRecordID>
- <Correlation />
- <Execution ProcessID="636" ThreadID="1896" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:37:33 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:37:33.410190400Z" />
- <EventRecordID>246</EventRecordID>
- <Correlation />
- <Execution ProcessID="636" ThreadID="1896" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:37:33 PM
- Event ID: 200
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Update service could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>200</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:37:33.270724800Z" />
- <EventRecordID>245</EventRecordID>
- <Correlation />
- <Execution ProcessID="636" ThreadID="1896" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:37:33 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:37:33.270630400Z" />
- <EventRecordID>244</EventRecordID>
- <Correlation />
- <Execution ProcessID="636" ThreadID="1896" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:37:33 PM
- Event ID: 200
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Update service could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>200</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:37:33.270439300Z" />
- <EventRecordID>243</EventRecordID>
- <Correlation />
- <Execution ProcessID="636" ThreadID="1888" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:37:33 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:37:33.270338500Z" />
- <EventRecordID>242</EventRecordID>
- <Correlation />
- <Execution ProcessID="636" ThreadID="1888" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-Kernel-PnP
- Date: 8/23/2016 6:37:17 PM
- Event ID: 219
- Task Category: (212)
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The driver \Driver\WUDFRd failed to load for the device ACPI\PNP0A0A\2&daba3ff&0.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="{9C205A39-1250-487D-ABD7-E831C6290539}" />
- <EventID>219</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>212</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:37:17.009384900Z" />
- <EventRecordID>1084</EventRecordID>
- <Correlation />
- <Execution ProcessID="4" ThreadID="400" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="DriverNameLength">24</Data>
- <Data Name="DriverName">ACPI\PNP0A0A\2&daba3ff&0</Data>
- <Data Name="Status">3221226341</Data>
- <Data Name="FailureNameLength">14</Data>
- <Data Name="FailureName">\Driver\WUDFRd</Data>
- <Data Name="Version">0</Data>
- </EventData>
- </Event>
- Log Name: Security
- Source: Microsoft-Windows-Eventlog
- Date: 8/23/2016 6:37:33 PM
- Event ID: 1101
- Task Category: Event processing
- Level: Error
- Keywords: Audit Success
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Audit events have been dropped by the transport. 0
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Eventlog" Guid="{fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148}" />
- <EventID>1101</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>101</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4020000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:37:33.812862300Z" />
- <EventRecordID>1402</EventRecordID>
- <Correlation />
- <Execution ProcessID="1560" ThreadID="2208" />
- <Channel>Security</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <UserData>
- <AuditEventsDropped xmlns="http://manifests.microsoft.com/win/2004/08/windows/eventlog">
- <Reason>0</Reason>
- </AuditEventsDropped>
- </UserData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-Kernel-Power
- Date: 8/23/2016 6:37:16 PM
- Event ID: 41
- Task Category: (63)
- Level: Critical
- Keywords: (70368744177664),(2)
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
- <EventID>41</EventID>
- <Version>4</Version>
- <Level>1</Level>
- <Task>63</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8000400000000002</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:37:16.821498700Z" />
- <EventRecordID>1081</EventRecordID>
- <Correlation />
- <Execution ProcessID="4" ThreadID="8" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="BugcheckCode">292</Data>
- <Data Name="BugcheckParameter1">0x0</Data>
- <Data Name="BugcheckParameter2">0xffff800f2447e028</Data>
- <Data Name="BugcheckParameter3">0xbe000000</Data>
- <Data Name="BugcheckParameter4">0x800400</Data>
- <Data Name="SleepInProgress">0</Data>
- <Data Name="PowerButtonTimestamp">0</Data>
- <Data Name="BootAppStatus">0</Data>
- <Data Name="Checkpoint">0</Data>
- <Data Name="ConnectedStandbyInProgress">false</Data>
- <Data Name="SystemSleepTransitionsToOn">0</Data>
- <Data Name="CsEntryScenarioInstanceId">0</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: EventLog
- Date: 8/23/2016 6:37:33 PM
- Event ID: 6008
- Task Category: None
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- The previous system shutdown at 6:30:39 PM on 8/23/2016 was unexpected.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="EventLog" />
- <EventID Qualifiers="32768">6008</EventID>
- <Level>2</Level>
- <Task>0</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:37:33.218810600Z" />
- <EventRecordID>1071</EventRecordID>
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>6:30:39 PM</Data>
- <Data>8/23/2016</Data>
- <Data>
- </Data>
- <Data>
- </Data>
- <Data>20</Data>
- <Data>
- </Data>
- <Data>
- </Data>
- <Binary>E00708000200170012001E0027006F01E00708000300180001001E0027006F013C0000003C000000010000003C00000000000000B00400000100000000000000</Binary>
- </EventData>
- </Event>
- Log Name: Application
- Source: Application Error
- Date: 8/23/2016 6:31:43 PM
- Event ID: 1000
- Task Category: (100)
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Faulting application name: DipAwayMode.exe, version: 0.0.0.0, time stamp: 0x00000000
- Faulting module name: KERNELBASE.dll, version: 10.0.14393.0, time stamp: 0x57898e34
- Exception code: 0xc0000409
- Fault offset: 0x000d96c2
- Faulting process id: 0xf20
- Faulting application start time: 0x01d1fda721d7bea5
- Faulting application path: C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
- Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
- Report Id: a5ffa7e2-c083-49f0-b081-4d5aa6219394
- Faulting package full name:
- Faulting package-relative application ID:
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Application Error" />
- <EventID Qualifiers="0">1000</EventID>
- <Level>2</Level>
- <Task>100</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:31:43.733400300Z" />
- <EventRecordID>668</EventRecordID>
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>DipAwayMode.exe</Data>
- <Data>0.0.0.0</Data>
- <Data>00000000</Data>
- <Data>KERNELBASE.dll</Data>
- <Data>10.0.14393.0</Data>
- <Data>57898e34</Data>
- <Data>c0000409</Data>
- <Data>000d96c2</Data>
- <Data>f20</Data>
- <Data>01d1fda721d7bea5</Data>
- <Data>C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe</Data>
- <Data>C:\WINDOWS\System32\KERNELBASE.dll</Data>
- <Data>a5ffa7e2-c083-49f0-b081-4d5aa6219394</Data>
- <Data>
- </Data>
- <Data>
- </Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-WER-SystemErrorReporting
- Date: 8/23/2016 6:31:05 PM
- Event ID: 1001
- Task Category: None
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- The computer has rebooted from a bugcheck. The bugcheck was: 0x00000124 (0x0000000000000000, 0xffffe68e8ba78028, 0x00000000be000000, 0x0000000000800400). A dump was saved in: C:\WINDOWS\MEMORY.DMP. Report Id: e2ab756d-af6a-494a-a618-c7134468cc5a.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />
- <EventID Qualifiers="16384">1001</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:31:05.881432000Z" />
- <EventRecordID>1062</EventRecordID>
- <Correlation />
- <Execution ProcessID="0" ThreadID="0" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data Name="param1">0x00000124 (0x0000000000000000, 0xffffe68e8ba78028, 0x00000000be000000, 0x0000000000800400)</Data>
- <Data Name="param2">C:\WINDOWS\MEMORY.DMP</Data>
- <Data Name="param3">e2ab756d-af6a-494a-a618-c7134468cc5a</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 6:30:43 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
- and APPID
- {F72671A9-012C-4725-9D2F-2A4D32D65169}
- to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:30:43.963497400Z" />
- <EventRecordID>1061</EventRecordID>
- <Correlation />
- <Execution ProcessID="112" ThreadID="412" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}</Data>
- <Data Name="param5">{F72671A9-012C-4725-9D2F-2A4D32D65169}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">SYSTEM</Data>
- <Data Name="param8">S-1-5-18</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:30:39 PM
- Event ID: 201
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Metadata and Internet Services (WMIS) could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>201</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:30:39.907612600Z" />
- <EventRecordID>233</EventRecordID>
- <Correlation />
- <Execution ProcessID="548" ThreadID="1792" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:30:39 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:30:39.907537200Z" />
- <EventRecordID>232</EventRecordID>
- <Correlation />
- <Execution ProcessID="548" ThreadID="1792" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:30:39 PM
- Event ID: 201
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Metadata and Internet Services (WMIS) could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>201</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:30:39.907434800Z" />
- <EventRecordID>231</EventRecordID>
- <Correlation />
- <Execution ProcessID="548" ThreadID="1744" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:30:39 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:30:39.907354000Z" />
- <EventRecordID>230</EventRecordID>
- <Correlation />
- <Execution ProcessID="548" ThreadID="1744" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:30:39 PM
- Event ID: 200
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Update service could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>200</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:30:39.421892200Z" />
- <EventRecordID>229</EventRecordID>
- <Correlation />
- <Execution ProcessID="548" ThreadID="1792" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:30:39 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:30:39.421784300Z" />
- <EventRecordID>228</EventRecordID>
- <Correlation />
- <Execution ProcessID="548" ThreadID="1792" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:30:39 PM
- Event ID: 200
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Update service could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>200</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:30:39.421439300Z" />
- <EventRecordID>227</EventRecordID>
- <Correlation />
- <Execution ProcessID="548" ThreadID="1788" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:30:39 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:30:39.421287700Z" />
- <EventRecordID>226</EventRecordID>
- <Correlation />
- <Execution ProcessID="548" ThreadID="1788" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-Kernel-PnP
- Date: 8/23/2016 6:30:27 PM
- Event ID: 219
- Task Category: (212)
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The driver \Driver\WUDFRd failed to load for the device ACPI\PNP0A0A\2&daba3ff&0.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="{9C205A39-1250-487D-ABD7-E831C6290539}" />
- <EventID>219</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>212</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:30:27.083774400Z" />
- <EventRecordID>1036</EventRecordID>
- <Correlation />
- <Execution ProcessID="4" ThreadID="404" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="DriverNameLength">24</Data>
- <Data Name="DriverName">ACPI\PNP0A0A\2&daba3ff&0</Data>
- <Data Name="Status">3221226341</Data>
- <Data Name="FailureNameLength">14</Data>
- <Data Name="FailureName">\Driver\WUDFRd</Data>
- <Data Name="Version">0</Data>
- </EventData>
- </Event>
- Log Name: Security
- Source: Microsoft-Windows-Eventlog
- Date: 8/23/2016 6:30:40 PM
- Event ID: 1101
- Task Category: Event processing
- Level: Error
- Keywords: Audit Success
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Audit events have been dropped by the transport. 0
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Eventlog" Guid="{fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148}" />
- <EventID>1101</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>101</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4020000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:30:40.189164000Z" />
- <EventRecordID>1328</EventRecordID>
- <Correlation />
- <Execution ProcessID="1536" ThreadID="2264" />
- <Channel>Security</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <UserData>
- <AuditEventsDropped xmlns="http://manifests.microsoft.com/win/2004/08/windows/eventlog">
- <Reason>0</Reason>
- </AuditEventsDropped>
- </UserData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-Kernel-Power
- Date: 8/23/2016 6:30:22 PM
- Event ID: 41
- Task Category: (63)
- Level: Critical
- Keywords: (70368744177664),(2)
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
- <EventID>41</EventID>
- <Version>4</Version>
- <Level>1</Level>
- <Task>63</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8000400000000002</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:30:22.897231700Z" />
- <EventRecordID>1033</EventRecordID>
- <Correlation />
- <Execution ProcessID="4" ThreadID="8" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="BugcheckCode">292</Data>
- <Data Name="BugcheckParameter1">0x0</Data>
- <Data Name="BugcheckParameter2">0xffffe68e8ba78028</Data>
- <Data Name="BugcheckParameter3">0xbe000000</Data>
- <Data Name="BugcheckParameter4">0x800400</Data>
- <Data Name="SleepInProgress">0</Data>
- <Data Name="PowerButtonTimestamp">0</Data>
- <Data Name="BootAppStatus">0</Data>
- <Data Name="Checkpoint">0</Data>
- <Data Name="ConnectedStandbyInProgress">false</Data>
- <Data Name="SystemSleepTransitionsToOn">0</Data>
- <Data Name="CsEntryScenarioInstanceId">0</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: EventLog
- Date: 8/23/2016 6:30:39 PM
- Event ID: 6008
- Task Category: None
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- The previous system shutdown at 6:23:19 PM on 8/23/2016 was unexpected.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="EventLog" />
- <EventID Qualifiers="32768">6008</EventID>
- <Level>2</Level>
- <Task>0</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:30:39.366091600Z" />
- <EventRecordID>1016</EventRecordID>
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>6:23:19 PM</Data>
- <Data>8/23/2016</Data>
- <Data>
- </Data>
- <Data>
- </Data>
- <Data>28</Data>
- <Data>
- </Data>
- <Data>
- </Data>
- <Binary>E0070800020017001200170013004103E00708000300180001001700130041033C0000003C000000010000003C00000000000000B00400000100000000000000</Binary>
- </EventData>
- </Event>
- Log Name: Application
- Source: Application Error
- Date: 8/23/2016 6:23:52 PM
- Event ID: 1000
- Task Category: (100)
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Faulting application name: DipAwayMode.exe, version: 0.0.0.0, time stamp: 0x00000000
- Faulting module name: KERNELBASE.dll, version: 10.0.14393.0, time stamp: 0x57898e34
- Exception code: 0xc0000409
- Fault offset: 0x000d96c2
- Faulting process id: 0x103c
- Faulting application start time: 0x01d1fda621052178
- Faulting application path: C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
- Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
- Report Id: 39f9f7f5-3786-4b7a-a86b-05f1ff7ee55f
- Faulting package full name:
- Faulting package-relative application ID:
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Application Error" />
- <EventID Qualifiers="0">1000</EventID>
- <Level>2</Level>
- <Task>100</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:23:52.583250800Z" />
- <EventRecordID>629</EventRecordID>
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>DipAwayMode.exe</Data>
- <Data>0.0.0.0</Data>
- <Data>00000000</Data>
- <Data>KERNELBASE.dll</Data>
- <Data>10.0.14393.0</Data>
- <Data>57898e34</Data>
- <Data>c0000409</Data>
- <Data>000d96c2</Data>
- <Data>103c</Data>
- <Data>01d1fda621052178</Data>
- <Data>C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe</Data>
- <Data>C:\WINDOWS\System32\KERNELBASE.dll</Data>
- <Data>39f9f7f5-3786-4b7a-a86b-05f1ff7ee55f</Data>
- <Data>
- </Data>
- <Data>
- </Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 6:23:33 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
- and APPID
- {F72671A9-012C-4725-9D2F-2A4D32D65169}
- to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:23:33.099531300Z" />
- <EventRecordID>1013</EventRecordID>
- <Correlation />
- <Execution ProcessID="992" ThreadID="2572" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}</Data>
- <Data Name="param5">{F72671A9-012C-4725-9D2F-2A4D32D65169}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">SYSTEM</Data>
- <Data Name="param8">S-1-5-18</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:23:20 PM
- Event ID: 201
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Metadata and Internet Services (WMIS) could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>201</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:23:20.231083700Z" />
- <EventRecordID>217</EventRecordID>
- <Correlation />
- <Execution ProcessID="528" ThreadID="1916" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:23:20 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:23:20.231014600Z" />
- <EventRecordID>216</EventRecordID>
- <Correlation />
- <Execution ProcessID="528" ThreadID="1916" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:23:20 PM
- Event ID: 201
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Metadata and Internet Services (WMIS) could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>201</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:23:20.230890700Z" />
- <EventRecordID>215</EventRecordID>
- <Correlation />
- <Execution ProcessID="528" ThreadID="1904" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:23:20 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:23:20.230822900Z" />
- <EventRecordID>214</EventRecordID>
- <Correlation />
- <Execution ProcessID="528" ThreadID="1904" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:23:19 PM
- Event ID: 200
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Update service could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>200</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:23:19.878345200Z" />
- <EventRecordID>213</EventRecordID>
- <Correlation />
- <Execution ProcessID="528" ThreadID="1916" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:23:19 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:23:19.878261400Z" />
- <EventRecordID>212</EventRecordID>
- <Correlation />
- <Execution ProcessID="528" ThreadID="1916" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:23:19 PM
- Event ID: 200
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Update service could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>200</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:23:19.877541200Z" />
- <EventRecordID>211</EventRecordID>
- <Correlation />
- <Execution ProcessID="528" ThreadID="1912" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:23:19 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:23:19.877437200Z" />
- <EventRecordID>210</EventRecordID>
- <Correlation />
- <Execution ProcessID="528" ThreadID="1912" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-Kernel-PnP
- Date: 8/23/2016 6:23:03 PM
- Event ID: 219
- Task Category: (212)
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The driver \Driver\WUDFRd failed to load for the device ACPI\PNP0A0A\2&daba3ff&0.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="{9C205A39-1250-487D-ABD7-E831C6290539}" />
- <EventID>219</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>212</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:23:03.334946100Z" />
- <EventRecordID>988</EventRecordID>
- <Correlation />
- <Execution ProcessID="4" ThreadID="420" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="DriverNameLength">24</Data>
- <Data Name="DriverName">ACPI\PNP0A0A\2&daba3ff&0</Data>
- <Data Name="Status">3221226341</Data>
- <Data Name="FailureNameLength">14</Data>
- <Data Name="FailureName">\Driver\WUDFRd</Data>
- <Data Name="Version">0</Data>
- </EventData>
- </Event>
- Log Name: Security
- Source: Microsoft-Windows-Eventlog
- Date: 8/23/2016 6:23:20 PM
- Event ID: 1101
- Task Category: Event processing
- Level: Error
- Keywords: Audit Success
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Audit events have been dropped by the transport. 0
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Eventlog" Guid="{fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148}" />
- <EventID>1101</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>101</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4020000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:23:20.779443300Z" />
- <EventRecordID>1251</EventRecordID>
- <Correlation />
- <Execution ProcessID="1488" ThreadID="1700" />
- <Channel>Security</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <UserData>
- <AuditEventsDropped xmlns="http://manifests.microsoft.com/win/2004/08/windows/eventlog">
- <Reason>0</Reason>
- </AuditEventsDropped>
- </UserData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-Kernel-Power
- Date: 8/23/2016 6:23:03 PM
- Event ID: 41
- Task Category: (63)
- Level: Critical
- Keywords: (70368744177664),(2)
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
- <EventID>41</EventID>
- <Version>4</Version>
- <Level>1</Level>
- <Task>63</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8000400000000002</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:23:03.155275400Z" />
- <EventRecordID>985</EventRecordID>
- <Correlation />
- <Execution ProcessID="4" ThreadID="8" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="BugcheckCode">0</Data>
- <Data Name="BugcheckParameter1">0x0</Data>
- <Data Name="BugcheckParameter2">0x0</Data>
- <Data Name="BugcheckParameter3">0x0</Data>
- <Data Name="BugcheckParameter4">0x0</Data>
- <Data Name="SleepInProgress">0</Data>
- <Data Name="PowerButtonTimestamp">0</Data>
- <Data Name="BootAppStatus">0</Data>
- <Data Name="Checkpoint">0</Data>
- <Data Name="ConnectedStandbyInProgress">false</Data>
- <Data Name="SystemSleepTransitionsToOn">0</Data>
- <Data Name="CsEntryScenarioInstanceId">0</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: EventLog
- Date: 8/23/2016 6:23:19 PM
- Event ID: 6008
- Task Category: None
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- The previous system shutdown at 6:17:00 PM on 8/23/2016 was unexpected.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="EventLog" />
- <EventID Qualifiers="32768">6008</EventID>
- <Level>2</Level>
- <Task>0</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:23:19.832359900Z" />
- <EventRecordID>968</EventRecordID>
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>6:17:00 PM</Data>
- <Data>8/23/2016</Data>
- <Data>
- </Data>
- <Data>
- </Data>
- <Data>21</Data>
- <Data>
- </Data>
- <Data>
- </Data>
- <Binary>E0070800020017001200110000007803E00708000300180001001100000078033C0000003C000000010000003C00000000000000B00400000100000000000000</Binary>
- </EventData>
- </Event>
- Log Name: Application
- Source: Application Error
- Date: 8/23/2016 6:17:42 PM
- Event ID: 1000
- Task Category: (100)
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Faulting application name: DipAwayMode.exe, version: 0.0.0.0, time stamp: 0x00000000
- Faulting module name: KERNELBASE.dll, version: 10.0.14393.0, time stamp: 0x57898e34
- Exception code: 0xc0000409
- Fault offset: 0x000d96c2
- Faulting process id: 0x1014
- Faulting application start time: 0x01d1fda53ea50218
- Faulting application path: C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
- Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
- Report Id: 79a3f0c2-2b2e-445a-b02c-6ed62fd497f5
- Faulting package full name:
- Faulting package-relative application ID:
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Application Error" />
- <EventID Qualifiers="0">1000</EventID>
- <Level>2</Level>
- <Task>100</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:17:42.017341100Z" />
- <EventRecordID>597</EventRecordID>
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>DipAwayMode.exe</Data>
- <Data>0.0.0.0</Data>
- <Data>00000000</Data>
- <Data>KERNELBASE.dll</Data>
- <Data>10.0.14393.0</Data>
- <Data>57898e34</Data>
- <Data>c0000409</Data>
- <Data>000d96c2</Data>
- <Data>1014</Data>
- <Data>01d1fda53ea50218</Data>
- <Data>C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe</Data>
- <Data>C:\WINDOWS\System32\KERNELBASE.dll</Data>
- <Data>79a3f0c2-2b2e-445a-b02c-6ed62fd497f5</Data>
- <Data>
- </Data>
- <Data>
- </Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:17:04 PM
- Event ID: 200
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Update service could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>200</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:17:04.271054700Z" />
- <EventRecordID>202</EventRecordID>
- <Correlation />
- <Execution ProcessID="532" ThreadID="628" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:17:04 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:17:04.270964100Z" />
- <EventRecordID>201</EventRecordID>
- <Correlation />
- <Execution ProcessID="532" ThreadID="628" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:17:04 PM
- Event ID: 200
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Update service could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>200</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:17:04.270915000Z" />
- <EventRecordID>200</EventRecordID>
- <Correlation />
- <Execution ProcessID="532" ThreadID="1456" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:17:04 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:17:04.270839300Z" />
- <EventRecordID>199</EventRecordID>
- <Correlation />
- <Execution ProcessID="532" ThreadID="1456" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:17:01 PM
- Event ID: 201
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Metadata and Internet Services (WMIS) could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>201</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:17:01.269504300Z" />
- <EventRecordID>196</EventRecordID>
- <Correlation />
- <Execution ProcessID="532" ThreadID="1456" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:17:01 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:17:01.269427100Z" />
- <EventRecordID>194</EventRecordID>
- <Correlation />
- <Execution ProcessID="532" ThreadID="1456" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:17:01 PM
- Event ID: 201
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Metadata and Internet Services (WMIS) could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>201</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:17:01.269122300Z" />
- <EventRecordID>193</EventRecordID>
- <Correlation />
- <Execution ProcessID="532" ThreadID="628" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:17:01 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:17:01.269053000Z" />
- <EventRecordID>192</EventRecordID>
- <Correlation />
- <Execution ProcessID="532" ThreadID="628" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:17:00 PM
- Event ID: 200
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Update service could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>200</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:17:00.949626800Z" />
- <EventRecordID>191</EventRecordID>
- <Correlation />
- <Execution ProcessID="532" ThreadID="1456" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:17:00 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:17:00.949467000Z" />
- <EventRecordID>190</EventRecordID>
- <Correlation />
- <Execution ProcessID="532" ThreadID="1456" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:17:00 PM
- Event ID: 200
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Update service could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>200</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:17:00.949237900Z" />
- <EventRecordID>189</EventRecordID>
- <Correlation />
- <Execution ProcessID="532" ThreadID="628" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 6:17:00 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:17:00.949131600Z" />
- <EventRecordID>188</EventRecordID>
- <Correlation />
- <Execution ProcessID="532" ThreadID="628" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-Kernel-PnP
- Date: 8/23/2016 6:16:44 PM
- Event ID: 219
- Task Category: (212)
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The driver \Driver\WUDFRd failed to load for the device ACPI\PNP0A0A\2&daba3ff&0.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="{9C205A39-1250-487D-ABD7-E831C6290539}" />
- <EventID>219</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>212</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:16:44.892753100Z" />
- <EventRecordID>932</EventRecordID>
- <Correlation />
- <Execution ProcessID="4" ThreadID="140" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="DriverNameLength">24</Data>
- <Data Name="DriverName">ACPI\PNP0A0A\2&daba3ff&0</Data>
- <Data Name="Status">3221226341</Data>
- <Data Name="FailureNameLength">14</Data>
- <Data Name="FailureName">\Driver\WUDFRd</Data>
- <Data Name="Version">0</Data>
- </EventData>
- </Event>
- Log Name: Security
- Source: Microsoft-Windows-Eventlog
- Date: 8/23/2016 6:17:01 PM
- Event ID: 1101
- Task Category: Event processing
- Level: Error
- Keywords: Audit Success
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Audit events have been dropped by the transport. 0
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Eventlog" Guid="{fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148}" />
- <EventID>1101</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>101</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4020000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:17:01.981807000Z" />
- <EventRecordID>1174</EventRecordID>
- <Correlation />
- <Execution ProcessID="1472" ThreadID="2148" />
- <Channel>Security</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <UserData>
- <AuditEventsDropped xmlns="http://manifests.microsoft.com/win/2004/08/windows/eventlog">
- <Reason>0</Reason>
- </AuditEventsDropped>
- </UserData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-Kernel-Power
- Date: 8/23/2016 6:16:44 PM
- Event ID: 41
- Task Category: (63)
- Level: Critical
- Keywords: (70368744177664),(2)
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
- <EventID>41</EventID>
- <Version>4</Version>
- <Level>1</Level>
- <Task>63</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8000400000000002</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:16:44.697018800Z" />
- <EventRecordID>929</EventRecordID>
- <Correlation />
- <Execution ProcessID="4" ThreadID="8" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="BugcheckCode">0</Data>
- <Data Name="BugcheckParameter1">0x0</Data>
- <Data Name="BugcheckParameter2">0x0</Data>
- <Data Name="BugcheckParameter3">0x0</Data>
- <Data Name="BugcheckParameter4">0x0</Data>
- <Data Name="SleepInProgress">0</Data>
- <Data Name="PowerButtonTimestamp">0</Data>
- <Data Name="BootAppStatus">0</Data>
- <Data Name="Checkpoint">0</Data>
- <Data Name="ConnectedStandbyInProgress">false</Data>
- <Data Name="SystemSleepTransitionsToOn">0</Data>
- <Data Name="CsEntryScenarioInstanceId">0</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: EventLog
- Date: 8/23/2016 6:17:00 PM
- Event ID: 6008
- Task Category: None
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- The previous system shutdown at 5:40:29 PM on 8/23/2016 was unexpected.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="EventLog" />
- <EventID Qualifiers="32768">6008</EventID>
- <Level>2</Level>
- <Task>0</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T01:17:00.886710300Z" />
- <EventRecordID>912</EventRecordID>
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>5:40:29 PM</Data>
- <Data>8/23/2016</Data>
- <Data>
- </Data>
- <Data>
- </Data>
- <Data>2413</Data>
- <Data>
- </Data>
- <Data>
- </Data>
- <Binary>E007080002001700110028001D00D200E007080003001800000028001D00D200600900003C000000010000006009000001000000B00400000100000000000000</Binary>
- </EventData>
- </Event>
- Log Name: Application
- Source: Microsoft-Windows-Search
- Date: 8/23/2016 5:29:04 PM
- Event ID: 3104
- Task Category: Gatherer
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Enumerating user sessions to generate filter pools failed.
- Details:
- (HRESULT : 0x80040210) (0x80040210)
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Search" Guid="{CA4E628D-8567-4896-AB6B-835B221F373F}" EventSourceName="Windows Search Service" />
- <EventID Qualifiers="49152">3104</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>3</Task>
- <Opcode>0</Opcode>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:29:04.705410300Z" />
- <EventRecordID>575</EventRecordID>
- <Correlation />
- <Execution ProcessID="0" ThreadID="0" />
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>
- Details:
- (HRESULT : 0x80040210) (0x80040210)
- </Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 5:26:04 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package D52A8D61.FarmVille2CountryEscape_5.5.1001.0_x86__jwbwg6xx0377a for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:26:04.476922400Z" />
- <EventRecordID>315</EventRecordID>
- <Correlation ActivityID="{7E5F5F39-FD9A-0007-7078-5F7E9AFDD101}" />
- <Execution ProcessID="3504" ThreadID="8608" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">D52A8D61.FarmVille2CountryEscape_5.5.1001.0_x86__jwbwg6xx0377a</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 5:25:41 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package GAMELOFTSA.Asphalt8Airborne_2.6.0.6_x86__0pp20fcewvvtj for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:25:41.691625600Z" />
- <EventRecordID>313</EventRecordID>
- <Correlation ActivityID="{7E5F5F39-FD9A-0007-1977-5F7E9AFDD101}" />
- <Execution ProcessID="3504" ThreadID="8608" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">GAMELOFTSA.Asphalt8Airborne_2.6.0.6_x86__0pp20fcewvvtj</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 5:25:41 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:25:41.190420200Z" />
- <EventRecordID>311</EventRecordID>
- <Correlation ActivityID="{7E5F5F39-FD9A-0001-5A76-5F7E9AFDD101}" />
- <Execution ProcessID="3504" ThreadID="8716" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 5:25:40 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:25:40.920524600Z" />
- <EventRecordID>309</EventRecordID>
- <Correlation ActivityID="{7E5F5F39-FD9A-0000-977E-5F7E9AFDD101}" />
- <Execution ProcessID="3504" ThreadID="8608" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 5:24:55 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.ZuneVideo_3.6.22511.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:24:55.131548100Z" />
- <EventRecordID>305</EventRecordID>
- <Correlation ActivityID="{7E5F5F39-FD9A-0006-8675-5F7E9AFDD101}" />
- <Execution ProcessID="3504" ThreadID="8608" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.ZuneVideo_3.6.22511.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 5:24:45 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.WindowsCamera_2016.816.20.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:24:45.260619400Z" />
- <EventRecordID>301</EventRecordID>
- <Correlation ActivityID="{7E5F5F39-FD9A-0001-D675-5F7E9AFDD101}" />
- <Execution ProcessID="3504" ThreadID="8716" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.WindowsCamera_2016.816.20.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Application
- Source: Microsoft-Windows-Immersive-Shell
- Date: 8/23/2016 5:24:32 PM
- Event ID: 5973
- Task Category: (5973)
- Level: Error
- Keywords:
- User: DESKTOP-D07KK79\Enzo
- Computer: DESKTOP-D07KK79
- Description:
- Activation of app Microsoft.WindowsMaps_8wekyb3d8bbwe!App failed with error: This app does not support the contract specified or is not installed. See the Microsoft-Windows-TWinUI/Operational log for additional information.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Immersive-Shell" Guid="{315A8872-923E-4EA2-9889-33CD4754BF64}" />
- <EventID>5973</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>5973</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:24:32.421495300Z" />
- <EventRecordID>572</EventRecordID>
- <Correlation />
- <Execution ProcessID="3880" ThreadID="3948" />
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-21-1999763852-2568256858-2669145966-1001" />
- </System>
- <EventData>
- <Data Name="AppId">Microsoft.WindowsMaps_8wekyb3d8bbwe!App</Data>
- <Data Name="ErrorCode">-2144927148</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 5:24:29 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.WindowsMaps_5.1608.2311.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:24:29.359668900Z" />
- <EventRecordID>296</EventRecordID>
- <Correlation ActivityID="{7E5F5F39-FD9A-0002-A17B-5F7E9AFDD101}" />
- <Execution ProcessID="3504" ThreadID="8608" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.WindowsMaps_5.1608.2311.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Application
- Source: Microsoft-Windows-Immersive-Shell
- Date: 8/23/2016 5:24:03 PM
- Event ID: 5973
- Task Category: (5973)
- Level: Error
- Keywords:
- User: DESKTOP-D07KK79\Enzo
- Computer: DESKTOP-D07KK79
- Description:
- Activation of app Microsoft.BingWeather_8wekyb3d8bbwe!App failed with error: This app does not support the contract specified or is not installed. See the Microsoft-Windows-TWinUI/Operational log for additional information.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Immersive-Shell" Guid="{315A8872-923E-4EA2-9889-33CD4754BF64}" />
- <EventID>5973</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>5973</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:24:03.538322600Z" />
- <EventRecordID>571</EventRecordID>
- <Correlation />
- <Execution ProcessID="3880" ThreadID="3948" />
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-21-1999763852-2568256858-2669145966-1001" />
- </System>
- <EventData>
- <Data Name="AppId">Microsoft.BingWeather_8wekyb3d8bbwe!App</Data>
- <Data Name="ErrorCode">-2144927148</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 5:24:01 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.BingWeather_4.13.47.0_x86__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:24:01.335728300Z" />
- <EventRecordID>294</EventRecordID>
- <Correlation ActivityID="{7E5F5F39-FD9A-0002-B679-5F7E9AFDD101}" />
- <Execution ProcessID="3504" ThreadID="8716" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.BingWeather_4.13.47.0_x86__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 5:23:57 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.SkypeApp_11.7.102.0_x64__kzf8qxf38zg5c for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:23:57.885242400Z" />
- <EventRecordID>290</EventRecordID>
- <Correlation ActivityID="{7E5F5F39-FD9A-0007-3575-5F7E9AFDD101}" />
- <Execution ProcessID="3504" ThreadID="8608" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.SkypeApp_11.7.102.0_x64__kzf8qxf38zg5c</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 5:23:39 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.Getstarted_4.0.9.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:23:39.722698100Z" />
- <EventRecordID>287</EventRecordID>
- <Correlation ActivityID="{7E5F5F39-FD9A-0007-E774-5F7E9AFDD101}" />
- <Execution ProcessID="3504" ThreadID="8716" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.Getstarted_4.0.9.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 5:23:07 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.ZuneMusic_3.6.23041.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:23:07.844551900Z" />
- <EventRecordID>285</EventRecordID>
- <Correlation ActivityID="{7E5F5F39-FD9A-0007-6974-5F7E9AFDD101}" />
- <Execution ProcessID="3504" ThreadID="8608" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.ZuneMusic_3.6.23041.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 5:22:43 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.WindowsStore_11607.1001.51.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:22:43.492631600Z" />
- <EventRecordID>281</EventRecordID>
- <Correlation ActivityID="{7E5F5F39-FD9A-0003-966F-5F7E9AFDD101}" />
- <Execution ProcessID="3504" ThreadID="8608" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.WindowsStore_11607.1001.51.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 5:22:16 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.MicrosoftStickyNotes_1.1.7.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:22:16.846553400Z" />
- <EventRecordID>275</EventRecordID>
- <Correlation ActivityID="{7E5F5F39-FD9A-0004-2174-5F7E9AFDD101}" />
- <Execution ProcessID="3504" ThreadID="8716" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.MicrosoftStickyNotes_1.1.7.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 5:22:15 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:22:15.803420700Z" />
- <EventRecordID>273</EventRecordID>
- <Correlation ActivityID="{7E5F5F39-FD9A-0005-C16B-5F7E9AFDD101}" />
- <Execution ProcessID="3504" ThreadID="8608" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 5:22:15 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:22:15.341833000Z" />
- <EventRecordID>271</EventRecordID>
- <Correlation ActivityID="{7E5F5F39-FD9A-0002-2D75-5F7E9AFDD101}" />
- <Execution ProcessID="3504" ThreadID="8716" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 5:22:11 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.Windows.Photos_16.722.10060.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:22:11.109022300Z" />
- <EventRecordID>266</EventRecordID>
- <Correlation ActivityID="{7E5F5F39-FD9A-0007-A672-5F7E9AFDD101}" />
- <Execution ProcessID="3504" ThreadID="8608" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.Windows.Photos_16.722.10060.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 5:22:07 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.MicrosoftSolitaireCollection_3.11.7293.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:22:07.428148800Z" />
- <EventRecordID>261</EventRecordID>
- <Correlation ActivityID="{7E5F5F39-FD9A-0006-5170-5F7E9AFDD101}" />
- <Execution ProcessID="3504" ThreadID="8716" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.MicrosoftSolitaireCollection_3.11.7293.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 5:21:11 PM
- Event ID: 123
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The DSM service was delayed by 13 seconds for a driver query/download/install on device 'ROOT\SYSTEM\0002'
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>123</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:21:11.084845300Z" />
- <EventRecordID>182</EventRecordID>
- <Correlation />
- <Execution ProcessID="524" ThreadID="2440" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="Prop_Seconds">13</Data>
- <Data Name="Prop_DeviceId">ROOT\SYSTEM\0002</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 5:20:14 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.WindowsAlarms_10.1607.1991.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:20:14.231544100Z" />
- <EventRecordID>246</EventRecordID>
- <Correlation ActivityID="{7E5F5F39-FD9A-0003-AB69-5F7E9AFDD101}" />
- <Execution ProcessID="3504" ThreadID="8672" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.WindowsAlarms_10.1607.1991.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 5:20:01 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.WindowsSoundRecorder_10.1607.1891.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:20:01.212853500Z" />
- <EventRecordID>243</EventRecordID>
- <Correlation ActivityID="{7E5F5F39-FD9A-0000-C772-5F7E9AFDD101}" />
- <Execution ProcessID="3504" ThreadID="8608" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.WindowsSoundRecorder_10.1607.1891.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 5:19:46 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.3DBuilder_11.1.9.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:19:46.511732600Z" />
- <EventRecordID>237</EventRecordID>
- <Correlation ActivityID="{7E5F5F39-FD9A-0007-796E-5F7E9AFDD101}" />
- <Execution ProcessID="3504" ThreadID="8672" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.3DBuilder_11.1.9.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 5:19:41 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.DesktopAppInstaller_1.0.2181.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:19:41.994677200Z" />
- <EventRecordID>234</EventRecordID>
- <Correlation ActivityID="{7E5F5F39-FD9A-0007-606E-5F7E9AFDD101}" />
- <Execution ProcessID="3504" ThreadID="8608" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.DesktopAppInstaller_1.0.2181.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Service Control Manager
- Date: 8/23/2016 5:06:04 PM
- Event ID: 7000
- Task Category: None
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- The Steam Client Service service failed to start due to the following error:
- The service did not respond to the start or control request in a timely fashion.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
- <EventID Qualifiers="49152">7000</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:06:04.293765800Z" />
- <EventRecordID>786</EventRecordID>
- <Correlation />
- <Execution ProcessID="756" ThreadID="2176" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data Name="param1">Steam Client Service</Data>
- <Data Name="param2">%%1053</Data>
- <Binary>53007400650061006D00200043006C00690065006E007400200053006500720076006900630065000000</Binary>
- </EventData>
- </Event>
- Log Name: System
- Source: Service Control Manager
- Date: 8/23/2016 5:06:04 PM
- Event ID: 7009
- Task Category: None
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- A timeout was reached (30000 milliseconds) while waiting for the Steam Client Service service to connect.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
- <EventID Qualifiers="49152">7009</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:06:04.293765800Z" />
- <EventRecordID>785</EventRecordID>
- <Correlation />
- <Execution ProcessID="756" ThreadID="2176" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data Name="param1">30000</Data>
- <Data Name="param2">Steam Client Service</Data>
- <Binary>53007400650061006D00200043006C00690065006E007400200053006500720076006900630065000000</Binary>
- </EventData>
- </Event>
- Log Name: Application
- Source: ESENT
- Date: 8/23/2016 5:05:55 PM
- Event ID: 489
- Task Category: General
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- firefox (7280) An attempt to open the file "C:\Users\Enzo\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\DataStore\Data\nouser1\120712-0049\DBStore\spartan.edb" for read only access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ". The open file operation will fail with error -1032 (0xfffffbf8).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="ESENT" />
- <EventID Qualifiers="0">489</EventID>
- <Level>2</Level>
- <Task>1</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:05:55.405981300Z" />
- <EventRecordID>546</EventRecordID>
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>firefox</Data>
- <Data>7280</Data>
- <Data>
- </Data>
- <Data>C:\Users\Enzo\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\DataStore\Data\nouser1\120712-0049\DBStore\spartan.edb</Data>
- <Data>-1032 (0xfffffbf8)</Data>
- <Data>32 (0x00000020)</Data>
- <Data>The process cannot access the file because it is being used by another process. </Data>
- </EventData>
- </Event>
- Log Name: Application
- Source: Application Error
- Date: 8/23/2016 5:04:10 PM
- Event ID: 1000
- Task Category: (100)
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
- Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
- Exception code: 0xc0000604
- Fault offset: 0x0000000000000000
- Faulting process id: 0xbe8
- Faulting application start time: 0x01d1fd9b0a0e2f63
- Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
- Faulting module path: unknown
- Report Id: e02e97bc-5bc7-4066-9681-8cbd2b2ec500
- Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
- Faulting package-relative application ID: MicrosoftEdge
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Application Error" />
- <EventID Qualifiers="0">1000</EventID>
- <Level>2</Level>
- <Task>100</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:04:10.378337600Z" />
- <EventRecordID>544</EventRecordID>
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>microsoftedgecp.exe</Data>
- <Data>11.0.14393.82</Data>
- <Data>57a55786</Data>
- <Data>unknown</Data>
- <Data>0.0.0.0</Data>
- <Data>00000000</Data>
- <Data>c0000604</Data>
- <Data>0000000000000000</Data>
- <Data>be8</Data>
- <Data>01d1fd9b0a0e2f63</Data>
- <Data>C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe</Data>
- <Data>unknown</Data>
- <Data>e02e97bc-5bc7-4066-9681-8cbd2b2ec500</Data>
- <Data>Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe</Data>
- <Data>MicrosoftEdge</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 5:02:46 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
- and APPID
- {F72671A9-012C-4725-9D2F-2A4D32D65169}
- to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:02:46.663948100Z" />
- <EventRecordID>782</EventRecordID>
- <Correlation />
- <Execution ProcessID="984" ThreadID="1016" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}</Data>
- <Data Name="param5">{F72671A9-012C-4725-9D2F-2A4D32D65169}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">SYSTEM</Data>
- <Data Name="param8">S-1-5-18</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: Application
- Source: Application Error
- Date: 8/23/2016 5:00:59 PM
- Event ID: 1000
- Task Category: (100)
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Faulting application name: DipAwayMode.exe, version: 0.0.0.0, time stamp: 0x00000000
- Faulting module name: KERNELBASE.dll, version: 10.0.14393.0, time stamp: 0x57898e34
- Exception code: 0xc0000409
- Fault offset: 0x000d96c2
- Faulting process id: 0x90
- Faulting application start time: 0x01d1fd9a8f7e9cbc
- Faulting application path: C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
- Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
- Report Id: 1811a4e3-8b29-402b-a6af-0da32a193c4f
- Faulting package full name:
- Faulting package-relative application ID:
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Application Error" />
- <EventID Qualifiers="0">1000</EventID>
- <Level>2</Level>
- <Task>100</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:00:59.024447400Z" />
- <EventRecordID>529</EventRecordID>
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>DipAwayMode.exe</Data>
- <Data>0.0.0.0</Data>
- <Data>00000000</Data>
- <Data>KERNELBASE.dll</Data>
- <Data>10.0.14393.0</Data>
- <Data>57898e34</Data>
- <Data>c0000409</Data>
- <Data>000d96c2</Data>
- <Data>90</Data>
- <Data>01d1fd9a8f7e9cbc</Data>
- <Data>C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe</Data>
- <Data>C:\WINDOWS\System32\KERNELBASE.dll</Data>
- <Data>1811a4e3-8b29-402b-a6af-0da32a193c4f</Data>
- <Data>
- </Data>
- <Data>
- </Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 5:00:29 PM
- Event ID: 201
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Metadata and Internet Services (WMIS) could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>201</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:00:29.480823500Z" />
- <EventRecordID>155</EventRecordID>
- <Correlation />
- <Execution ProcessID="524" ThreadID="1720" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 5:00:29 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:00:29.480735600Z" />
- <EventRecordID>153</EventRecordID>
- <Correlation />
- <Execution ProcessID="524" ThreadID="1720" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 5:00:29 PM
- Event ID: 201
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Metadata and Internet Services (WMIS) could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>201</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:00:29.480468900Z" />
- <EventRecordID>152</EventRecordID>
- <Correlation />
- <Execution ProcessID="524" ThreadID="1716" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 5:00:29 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:00:29.480388200Z" />
- <EventRecordID>151</EventRecordID>
- <Correlation />
- <Execution ProcessID="524" ThreadID="1716" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 5:00:29 PM
- Event ID: 200
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Update service could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>200</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:00:29.407765200Z" />
- <EventRecordID>150</EventRecordID>
- <Correlation />
- <Execution ProcessID="524" ThreadID="1720" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 5:00:29 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:00:29.407670600Z" />
- <EventRecordID>149</EventRecordID>
- <Correlation />
- <Execution ProcessID="524" ThreadID="1720" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 5:00:29 PM
- Event ID: 200
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Update service could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>200</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:00:29.407445100Z" />
- <EventRecordID>148</EventRecordID>
- <Correlation />
- <Execution ProcessID="524" ThreadID="1716" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 5:00:29 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:00:29.407363600Z" />
- <EventRecordID>147</EventRecordID>
- <Correlation />
- <Execution ProcessID="524" ThreadID="1716" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-Kernel-PnP
- Date: 8/23/2016 5:00:25 PM
- Event ID: 219
- Task Category: (212)
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The driver \Driver\WUDFRd failed to load for the device ACPI\PNP0A0A\2&daba3ff&0.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="{9C205A39-1250-487D-ABD7-E831C6290539}" />
- <EventID>219</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>212</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-24T00:00:25.586792900Z" />
- <EventRecordID>753</EventRecordID>
- <Correlation />
- <Execution ProcessID="4" ThreadID="260" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="DriverNameLength">24</Data>
- <Data Name="DriverName">ACPI\PNP0A0A\2&daba3ff&0</Data>
- <Data Name="Status">3221226341</Data>
- <Data Name="FailureNameLength">14</Data>
- <Data Name="FailureName">\Driver\WUDFRd</Data>
- <Data Name="Version">0</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:59:44 PM
- Event ID: 10010
- Task Category: None
- Level: Error
- Keywords: Classic
- User: DESKTOP-D07KK79\Enzo
- Computer: DESKTOP-D07KK79
- Description:
- The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10010</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:59:44.211682500Z" />
- <EventRecordID>725</EventRecordID>
- <Correlation />
- <Execution ProcessID="984" ThreadID="1272" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-21-1999763852-2568256858-2669145966-1001" />
- </System>
- <EventData>
- <Data Name="param1">{0002DF02-0000-0000-C000-000000000046}</Data>
- </EventData>
- </Event>
- Log Name: Application
- Source: Application Error
- Date: 8/23/2016 4:56:34 PM
- Event ID: 1000
- Task Category: (100)
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
- Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
- Exception code: 0xc0000604
- Fault offset: 0x0000000000000000
- Faulting process id: 0x1388
- Faulting application start time: 0x01d1fd993d2e84a6
- Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
- Faulting module path: unknown
- Report Id: af7e0c2e-a8f0-43a6-ba23-d6efc26b9cad
- Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
- Faulting package-relative application ID: MicrosoftEdge
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Application Error" />
- <EventID Qualifiers="0">1000</EventID>
- <Level>2</Level>
- <Task>100</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:56:34.092901800Z" />
- <EventRecordID>503</EventRecordID>
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>microsoftedgecp.exe</Data>
- <Data>11.0.14393.82</Data>
- <Data>57a55786</Data>
- <Data>unknown</Data>
- <Data>0.0.0.0</Data>
- <Data>00000000</Data>
- <Data>c0000604</Data>
- <Data>0000000000000000</Data>
- <Data>1388</Data>
- <Data>01d1fd993d2e84a6</Data>
- <Data>C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe</Data>
- <Data>unknown</Data>
- <Data>af7e0c2e-a8f0-43a6-ba23-d6efc26b9cad</Data>
- <Data>Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe</Data>
- <Data>MicrosoftEdge</Data>
- </EventData>
- </Event>
- Log Name: Application
- Source: Application Error
- Date: 8/23/2016 4:56:12 PM
- Event ID: 1000
- Task Category: (100)
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
- Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
- Exception code: 0xc0000604
- Fault offset: 0x0000000000000000
- Faulting process id: 0x15dc
- Faulting application start time: 0x01d1fd993d8f04e0
- Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
- Faulting module path: unknown
- Report Id: 3c4533c4-87e1-4dbb-a5e5-9f0246def5be
- Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
- Faulting package-relative application ID: MicrosoftEdge
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Application Error" />
- <EventID Qualifiers="0">1000</EventID>
- <Level>2</Level>
- <Task>100</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:56:12.559353000Z" />
- <EventRecordID>501</EventRecordID>
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>microsoftedgecp.exe</Data>
- <Data>11.0.14393.82</Data>
- <Data>57a55786</Data>
- <Data>unknown</Data>
- <Data>0.0.0.0</Data>
- <Data>00000000</Data>
- <Data>c0000604</Data>
- <Data>0000000000000000</Data>
- <Data>15dc</Data>
- <Data>01d1fd993d8f04e0</Data>
- <Data>C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe</Data>
- <Data>unknown</Data>
- <Data>3c4533c4-87e1-4dbb-a5e5-9f0246def5be</Data>
- <Data>Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe</Data>
- <Data>MicrosoftEdge</Data>
- </EventData>
- </Event>
- Log Name: Application
- Source: Application Error
- Date: 8/23/2016 4:56:12 PM
- Event ID: 1000
- Task Category: (100)
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
- Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
- Exception code: 0xc0000604
- Fault offset: 0x0000000000000000
- Faulting process id: 0x15dc
- Faulting application start time: 0x01d1fd993d8f04e0
- Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
- Faulting module path: unknown
- Report Id: 8c4b3a16-5b74-4351-8e48-8c34d1862fa2
- Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
- Faulting package-relative application ID: MicrosoftEdge
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Application Error" />
- <EventID Qualifiers="0">1000</EventID>
- <Level>2</Level>
- <Task>100</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:56:12.189320500Z" />
- <EventRecordID>499</EventRecordID>
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>microsoftedgecp.exe</Data>
- <Data>11.0.14393.82</Data>
- <Data>57a55786</Data>
- <Data>unknown</Data>
- <Data>0.0.0.0</Data>
- <Data>00000000</Data>
- <Data>c0000604</Data>
- <Data>0000000000000000</Data>
- <Data>15dc</Data>
- <Data>01d1fd993d8f04e0</Data>
- <Data>C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe</Data>
- <Data>unknown</Data>
- <Data>8c4b3a16-5b74-4351-8e48-8c34d1862fa2</Data>
- <Data>Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe</Data>
- <Data>MicrosoftEdge</Data>
- </EventData>
- </Event>
- Log Name: Application
- Source: Application Error
- Date: 8/23/2016 4:55:45 PM
- Event ID: 1000
- Task Category: (100)
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
- Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
- Exception code: 0xc0000604
- Fault offset: 0x0000000000000000
- Faulting process id: 0x1388
- Faulting application start time: 0x01d1fd993d2e84a6
- Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
- Faulting module path: unknown
- Report Id: 30e3cfae-8c65-4ed0-baf7-ea087c129594
- Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
- Faulting package-relative application ID: MicrosoftEdge
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Application Error" />
- <EventID Qualifiers="0">1000</EventID>
- <Level>2</Level>
- <Task>100</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:55:45.258943400Z" />
- <EventRecordID>497</EventRecordID>
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>microsoftedgecp.exe</Data>
- <Data>11.0.14393.82</Data>
- <Data>57a55786</Data>
- <Data>unknown</Data>
- <Data>0.0.0.0</Data>
- <Data>00000000</Data>
- <Data>c0000604</Data>
- <Data>0000000000000000</Data>
- <Data>1388</Data>
- <Data>01d1fd993d2e84a6</Data>
- <Data>C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe</Data>
- <Data>unknown</Data>
- <Data>30e3cfae-8c65-4ed0-baf7-ea087c129594</Data>
- <Data>Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe</Data>
- <Data>MicrosoftEdge</Data>
- </EventData>
- </Event>
- Log Name: Application
- Source: Application Error
- Date: 8/23/2016 4:55:44 PM
- Event ID: 1000
- Task Category: (100)
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
- Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
- Exception code: 0xc0000604
- Fault offset: 0x0000000000000000
- Faulting process id: 0x1388
- Faulting application start time: 0x01d1fd993d2e84a6
- Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
- Faulting module path: unknown
- Report Id: a49017d4-daf2-4ddf-a10a-b31fe46c6cb2
- Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
- Faulting package-relative application ID: MicrosoftEdge
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Application Error" />
- <EventID Qualifiers="0">1000</EventID>
- <Level>2</Level>
- <Task>100</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:55:44.873909500Z" />
- <EventRecordID>495</EventRecordID>
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>microsoftedgecp.exe</Data>
- <Data>11.0.14393.82</Data>
- <Data>57a55786</Data>
- <Data>unknown</Data>
- <Data>0.0.0.0</Data>
- <Data>00000000</Data>
- <Data>c0000604</Data>
- <Data>0000000000000000</Data>
- <Data>1388</Data>
- <Data>01d1fd993d2e84a6</Data>
- <Data>C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe</Data>
- <Data>unknown</Data>
- <Data>a49017d4-daf2-4ddf-a10a-b31fe46c6cb2</Data>
- <Data>Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe</Data>
- <Data>MicrosoftEdge</Data>
- </EventData>
- </Event>
- Log Name: Application
- Source: Application Error
- Date: 8/23/2016 4:55:05 PM
- Event ID: 1000
- Task Category: (100)
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
- Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
- Exception code: 0xc0000604
- Fault offset: 0x0000000000000000
- Faulting process id: 0x15dc
- Faulting application start time: 0x01d1fd993d8f04e0
- Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
- Faulting module path: unknown
- Report Id: 3a7343ae-6c0a-4107-b57b-e1c416695665
- Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
- Faulting package-relative application ID: MicrosoftEdge
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Application Error" />
- <EventID Qualifiers="0">1000</EventID>
- <Level>2</Level>
- <Task>100</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:55:05.400425300Z" />
- <EventRecordID>492</EventRecordID>
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>microsoftedgecp.exe</Data>
- <Data>11.0.14393.82</Data>
- <Data>57a55786</Data>
- <Data>unknown</Data>
- <Data>0.0.0.0</Data>
- <Data>00000000</Data>
- <Data>c0000604</Data>
- <Data>0000000000000000</Data>
- <Data>15dc</Data>
- <Data>01d1fd993d8f04e0</Data>
- <Data>C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe</Data>
- <Data>unknown</Data>
- <Data>3a7343ae-6c0a-4107-b57b-e1c416695665</Data>
- <Data>Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe</Data>
- <Data>MicrosoftEdge</Data>
- </EventData>
- </Event>
- Log Name: Application
- Source: Application Error
- Date: 8/23/2016 4:55:04 PM
- Event ID: 1000
- Task Category: (100)
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
- Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
- Exception code: 0xc0000604
- Fault offset: 0x0000000000000000
- Faulting process id: 0x15dc
- Faulting application start time: 0x01d1fd993d8f04e0
- Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
- Faulting module path: unknown
- Report Id: efec5edc-b1ad-4239-84e3-c24ffa043302
- Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
- Faulting package-relative application ID: MicrosoftEdge
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Application Error" />
- <EventID Qualifiers="0">1000</EventID>
- <Level>2</Level>
- <Task>100</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:55:04.484344200Z" />
- <EventRecordID>490</EventRecordID>
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>microsoftedgecp.exe</Data>
- <Data>11.0.14393.82</Data>
- <Data>57a55786</Data>
- <Data>unknown</Data>
- <Data>0.0.0.0</Data>
- <Data>00000000</Data>
- <Data>c0000604</Data>
- <Data>0000000000000000</Data>
- <Data>15dc</Data>
- <Data>01d1fd993d8f04e0</Data>
- <Data>C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe</Data>
- <Data>unknown</Data>
- <Data>efec5edc-b1ad-4239-84e3-c24ffa043302</Data>
- <Data>Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe</Data>
- <Data>MicrosoftEdge</Data>
- </EventData>
- </Event>
- Log Name: Application
- Source: Application Error
- Date: 8/23/2016 4:54:36 PM
- Event ID: 1000
- Task Category: (100)
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
- Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
- Exception code: 0xc0000604
- Fault offset: 0x0000000000000000
- Faulting process id: 0x15dc
- Faulting application start time: 0x01d1fd993d8f04e0
- Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
- Faulting module path: unknown
- Report Id: 4f876d3c-b234-46ae-9eab-5d72051d23c3
- Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
- Faulting package-relative application ID: MicrosoftEdge
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Application Error" />
- <EventID Qualifiers="0">1000</EventID>
- <Level>2</Level>
- <Task>100</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:54:36.285333500Z" />
- <EventRecordID>482</EventRecordID>
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>microsoftedgecp.exe</Data>
- <Data>11.0.14393.82</Data>
- <Data>57a55786</Data>
- <Data>unknown</Data>
- <Data>0.0.0.0</Data>
- <Data>00000000</Data>
- <Data>c0000604</Data>
- <Data>0000000000000000</Data>
- <Data>15dc</Data>
- <Data>01d1fd993d8f04e0</Data>
- <Data>C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe</Data>
- <Data>unknown</Data>
- <Data>4f876d3c-b234-46ae-9eab-5d72051d23c3</Data>
- <Data>Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe</Data>
- <Data>MicrosoftEdge</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Service Control Manager
- Date: 8/23/2016 4:54:26 PM
- Event ID: 7030
- Task Category: None
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- The ASGT service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
- <EventID Qualifiers="49152">7030</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:54:26.426463300Z" />
- <EventRecordID>724</EventRecordID>
- <Correlation />
- <Execution ProcessID="756" ThreadID="2300" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data Name="param1">ASGT</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:54:20 PM
- Event ID: 10001
- Task Category: None
- Level: Error
- Keywords: Classic
- User: DESKTOP-D07KK79\Enzo
- Computer: DESKTOP-D07KK79
- Description:
- Unable to start a DCOM Server: {B3EDE298-AE75-4A1C-AB7E-1B9229B77BBE} as Unavailable/Unavailable. The error:
- "740"
- Happened while starting this command:
- C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe -Embedding
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10001</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:54:20.910976200Z" />
- <EventRecordID>722</EventRecordID>
- <Correlation />
- <Execution ProcessID="864" ThreadID="4168" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-21-1999763852-2568256858-2669145966-1001" />
- </System>
- <EventData>
- <Data Name="param1">C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe -Embedding</Data>
- <Data Name="param2">740</Data>
- <Data Name="param3">{B3EDE298-AE75-4A1C-AB7E-1B9229B77BBE}</Data>
- <Data Name="param4">Unavailable</Data>
- <Data Name="param5">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:51:16 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: DESKTOP-D07KK79\Enzo
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {9E175B6D-F52A-11D8-B9A5-505054503030}
- and APPID
- {9E175B9C-F52A-11D8-B9A5-505054503030}
- to the user DESKTOP-D07KK79\Enzo SID (S-1-5-21-1999763852-2568256858-2669145966-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe SID (S-1-15-2-3624051433-2125758914-1423191267-1740899205-1073925389-3782572162-737981194). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:51:16.675223100Z" />
- <EventRecordID>706</EventRecordID>
- <Correlation />
- <Execution ProcessID="984" ThreadID="5008" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-21-1999763852-2568256858-2669145966-1001" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{9E175B6D-F52A-11D8-B9A5-505054503030}</Data>
- <Data Name="param5">{9E175B9C-F52A-11D8-B9A5-505054503030}</Data>
- <Data Name="param6">DESKTOP-D07KK79</Data>
- <Data Name="param7">Enzo</Data>
- <Data Name="param8">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe</Data>
- <Data Name="param11">S-1-15-2-3624051433-2125758914-1423191267-1740899205-1073925389-3782572162-737981194</Data>
- </EventData>
- </Event>
- Log Name: Application
- Source: Application Error
- Date: 8/23/2016 4:47:20 PM
- Event ID: 1000
- Task Category: (100)
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Faulting application name: DipAwayMode.exe, version: 0.0.0.0, time stamp: 0x00000000
- Faulting module name: KERNELBASE.dll, version: 10.0.14393.0, time stamp: 0x57898e34
- Exception code: 0xc0000409
- Fault offset: 0x000d96c2
- Faulting process id: 0xf94
- Faulting application start time: 0x01d1fd98a3b89666
- Faulting application path: C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
- Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
- Report Id: 2e830251-6268-4fb2-8168-f91f9216b1f7
- Faulting package full name:
- Faulting package-relative application ID:
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Application Error" />
- <EventID Qualifiers="0">1000</EventID>
- <Level>2</Level>
- <Task>100</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:47:20.586702900Z" />
- <EventRecordID>414</EventRecordID>
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>DipAwayMode.exe</Data>
- <Data>0.0.0.0</Data>
- <Data>00000000</Data>
- <Data>KERNELBASE.dll</Data>
- <Data>10.0.14393.0</Data>
- <Data>57898e34</Data>
- <Data>c0000409</Data>
- <Data>000d96c2</Data>
- <Data>f94</Data>
- <Data>01d1fd98a3b89666</Data>
- <Data>C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe</Data>
- <Data>C:\WINDOWS\System32\KERNELBASE.dll</Data>
- <Data>2e830251-6268-4fb2-8168-f91f9216b1f7</Data>
- <Data>
- </Data>
- <Data>
- </Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:46:59 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
- and APPID
- {F72671A9-012C-4725-9D2F-2A4D32D65169}
- to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:46:59.380831200Z" />
- <EventRecordID>704</EventRecordID>
- <Correlation />
- <Execution ProcessID="984" ThreadID="1268" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}</Data>
- <Data Name="param5">{F72671A9-012C-4725-9D2F-2A4D32D65169}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">SYSTEM</Data>
- <Data Name="param8">S-1-5-18</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:46:49 PM
- Event ID: 201
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Metadata and Internet Services (WMIS) could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>201</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:46:49.786792000Z" />
- <EventRecordID>129</EventRecordID>
- <Correlation />
- <Execution ProcessID="512" ThreadID="1684" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:46:49 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:46:49.786719800Z" />
- <EventRecordID>128</EventRecordID>
- <Correlation />
- <Execution ProcessID="512" ThreadID="1684" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:46:49 PM
- Event ID: 201
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Metadata and Internet Services (WMIS) could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>201</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:46:49.786598800Z" />
- <EventRecordID>127</EventRecordID>
- <Correlation />
- <Execution ProcessID="512" ThreadID="1700" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:46:49 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:46:49.786534500Z" />
- <EventRecordID>126</EventRecordID>
- <Correlation />
- <Execution ProcessID="512" ThreadID="1700" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:46:49 PM
- Event ID: 200
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Update service could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>200</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:46:49.498133100Z" />
- <EventRecordID>125</EventRecordID>
- <Correlation />
- <Execution ProcessID="512" ThreadID="1692" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:46:49 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:46:49.498035300Z" />
- <EventRecordID>124</EventRecordID>
- <Correlation />
- <Execution ProcessID="512" ThreadID="1692" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:46:49 PM
- Event ID: 200
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Update service could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>200</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:46:49.496335800Z" />
- <EventRecordID>123</EventRecordID>
- <Correlation />
- <Execution ProcessID="512" ThreadID="1684" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:46:49 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:46:49.496229800Z" />
- <EventRecordID>122</EventRecordID>
- <Correlation />
- <Execution ProcessID="512" ThreadID="1684" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-Kernel-PnP
- Date: 8/23/2016 4:46:46 PM
- Event ID: 219
- Task Category: (212)
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The driver \Driver\WUDFRd failed to load for the device ACPI\PNP0A0A\2&daba3ff&0.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="{9C205A39-1250-487D-ABD7-E831C6290539}" />
- <EventID>219</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>212</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:46:46.308410100Z" />
- <EventRecordID>679</EventRecordID>
- <Correlation />
- <Execution ProcessID="4" ThreadID="400" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="DriverNameLength">24</Data>
- <Data Name="DriverName">ACPI\PNP0A0A\2&daba3ff&0</Data>
- <Data Name="Status">3221226341</Data>
- <Data Name="FailureNameLength">14</Data>
- <Data Name="FailureName">\Driver\WUDFRd</Data>
- <Data Name="Version">0</Data>
- </EventData>
- </Event>
- Log Name: Application
- Source: Application Error
- Date: 8/23/2016 4:45:49 PM
- Event ID: 1000
- Task Category: (100)
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Faulting application name: DipAwayMode.exe, version: 0.0.0.0, time stamp: 0x00000000
- Faulting module name: KERNELBASE.dll, version: 10.0.14393.0, time stamp: 0x57898e34
- Exception code: 0xc0000409
- Fault offset: 0x000d96c2
- Faulting process id: 0xf78
- Faulting application start time: 0x01d1fd98705a0e49
- Faulting application path: C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
- Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
- Report Id: c5bdc911-ba17-407b-b89b-fad52de32e80
- Faulting package full name:
- Faulting package-relative application ID:
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Application Error" />
- <EventID Qualifiers="0">1000</EventID>
- <Level>2</Level>
- <Task>100</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:45:49.894752900Z" />
- <EventRecordID>393</EventRecordID>
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>DipAwayMode.exe</Data>
- <Data>0.0.0.0</Data>
- <Data>00000000</Data>
- <Data>KERNELBASE.dll</Data>
- <Data>10.0.14393.0</Data>
- <Data>57898e34</Data>
- <Data>c0000409</Data>
- <Data>000d96c2</Data>
- <Data>f78</Data>
- <Data>01d1fd98705a0e49</Data>
- <Data>C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe</Data>
- <Data>C:\WINDOWS\System32\KERNELBASE.dll</Data>
- <Data>c5bdc911-ba17-407b-b89b-fad52de32e80</Data>
- <Data>
- </Data>
- <Data>
- </Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:45:33 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
- and APPID
- {F72671A9-012C-4725-9D2F-2A4D32D65169}
- to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:45:33.247280400Z" />
- <EventRecordID>651</EventRecordID>
- <Correlation />
- <Execution ProcessID="988" ThreadID="1020" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}</Data>
- <Data Name="param5">{F72671A9-012C-4725-9D2F-2A4D32D65169}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">SYSTEM</Data>
- <Data Name="param8">S-1-5-18</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:45:23 PM
- Event ID: 201
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Metadata and Internet Services (WMIS) could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>201</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:45:23.822890100Z" />
- <EventRecordID>113</EventRecordID>
- <Correlation />
- <Execution ProcessID="512" ThreadID="1684" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:45:23 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:45:23.822805100Z" />
- <EventRecordID>112</EventRecordID>
- <Correlation />
- <Execution ProcessID="512" ThreadID="1684" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:45:23 PM
- Event ID: 201
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Metadata and Internet Services (WMIS) could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>201</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:45:23.822726600Z" />
- <EventRecordID>111</EventRecordID>
- <Correlation />
- <Execution ProcessID="512" ThreadID="1688" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:45:23 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:45:23.822636300Z" />
- <EventRecordID>110</EventRecordID>
- <Correlation />
- <Execution ProcessID="512" ThreadID="1688" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:45:23 PM
- Event ID: 200
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Update service could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>200</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:45:23.600470200Z" />
- <EventRecordID>109</EventRecordID>
- <Correlation />
- <Execution ProcessID="512" ThreadID="1684" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:45:23 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:45:23.600370600Z" />
- <EventRecordID>108</EventRecordID>
- <Correlation />
- <Execution ProcessID="512" ThreadID="1684" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:45:23 PM
- Event ID: 200
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Update service could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>200</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:45:23.599891400Z" />
- <EventRecordID>107</EventRecordID>
- <Correlation />
- <Execution ProcessID="512" ThreadID="1660" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:45:23 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:45:23.599764100Z" />
- <EventRecordID>106</EventRecordID>
- <Correlation />
- <Execution ProcessID="512" ThreadID="1660" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-Kernel-PnP
- Date: 8/23/2016 4:45:20 PM
- Event ID: 219
- Task Category: (212)
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The driver \Driver\WUDFRd failed to load for the device ACPI\PNP0A0A\2&daba3ff&0.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="{9C205A39-1250-487D-ABD7-E831C6290539}" />
- <EventID>219</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>212</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:45:20.341664400Z" />
- <EventRecordID>626</EventRecordID>
- <Correlation />
- <Execution ProcessID="4" ThreadID="268" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="DriverNameLength">24</Data>
- <Data Name="DriverName">ACPI\PNP0A0A\2&daba3ff&0</Data>
- <Data Name="Status">3221226341</Data>
- <Data Name="FailureNameLength">14</Data>
- <Data Name="FailureName">\Driver\WUDFRd</Data>
- <Data Name="Version">0</Data>
- </EventData>
- </Event>
- Log Name: Application
- Source: Application Error
- Date: 8/23/2016 4:44:22 PM
- Event ID: 1000
- Task Category: (100)
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Faulting application name: DipAwayMode.exe, version: 0.0.0.0, time stamp: 0x00000000
- Faulting module name: KERNELBASE.dll, version: 10.0.14393.0, time stamp: 0x57898e34
- Exception code: 0xc0000409
- Fault offset: 0x000d96c2
- Faulting process id: 0xf14
- Faulting application start time: 0x01d1fd98394457de
- Faulting application path: C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
- Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
- Report Id: eb256a70-1990-45f1-b720-19f8ee3dccda
- Faulting package full name:
- Faulting package-relative application ID:
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Application Error" />
- <EventID Qualifiers="0">1000</EventID>
- <Level>2</Level>
- <Task>100</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:44:22.383124200Z" />
- <EventRecordID>370</EventRecordID>
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>DipAwayMode.exe</Data>
- <Data>0.0.0.0</Data>
- <Data>00000000</Data>
- <Data>KERNELBASE.dll</Data>
- <Data>10.0.14393.0</Data>
- <Data>57898e34</Data>
- <Data>c0000409</Data>
- <Data>000d96c2</Data>
- <Data>f14</Data>
- <Data>01d1fd98394457de</Data>
- <Data>C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe</Data>
- <Data>C:\WINDOWS\System32\KERNELBASE.dll</Data>
- <Data>eb256a70-1990-45f1-b720-19f8ee3dccda</Data>
- <Data>
- </Data>
- <Data>
- </Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:44:00 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
- and APPID
- {F72671A9-012C-4725-9D2F-2A4D32D65169}
- to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:44:00.905228300Z" />
- <EventRecordID>596</EventRecordID>
- <Correlation />
- <Execution ProcessID="984" ThreadID="1616" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}</Data>
- <Data Name="param5">{F72671A9-012C-4725-9D2F-2A4D32D65169}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">SYSTEM</Data>
- <Data Name="param8">S-1-5-18</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:43:51 PM
- Event ID: 201
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Metadata and Internet Services (WMIS) could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>201</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:43:51.688890300Z" />
- <EventRecordID>97</EventRecordID>
- <Correlation />
- <Execution ProcessID="544" ThreadID="1664" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:43:51 PM
- Event ID: 201
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Metadata and Internet Services (WMIS) could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>201</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:43:51.688814000Z" />
- <EventRecordID>96</EventRecordID>
- <Correlation />
- <Execution ProcessID="544" ThreadID="1684" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:43:51 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:43:51.688805400Z" />
- <EventRecordID>95</EventRecordID>
- <Correlation />
- <Execution ProcessID="544" ThreadID="1664" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:43:51 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:43:51.688730800Z" />
- <EventRecordID>94</EventRecordID>
- <Correlation />
- <Execution ProcessID="544" ThreadID="1684" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:43:51 PM
- Event ID: 200
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Update service could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>200</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:43:51.458146500Z" />
- <EventRecordID>93</EventRecordID>
- <Correlation />
- <Execution ProcessID="544" ThreadID="1684" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:43:51 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:43:51.457960100Z" />
- <EventRecordID>92</EventRecordID>
- <Correlation />
- <Execution ProcessID="544" ThreadID="1684" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:43:51 PM
- Event ID: 200
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Update service could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>200</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:43:51.457590100Z" />
- <EventRecordID>91</EventRecordID>
- <Correlation />
- <Execution ProcessID="544" ThreadID="1664" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:43:51 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:43:51.457382200Z" />
- <EventRecordID>90</EventRecordID>
- <Correlation />
- <Execution ProcessID="544" ThreadID="1664" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-Kernel-PnP
- Date: 8/23/2016 4:43:48 PM
- Event ID: 219
- Task Category: (212)
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The driver \Driver\WUDFRd failed to load for the device ACPI\PNP0A0A\2&daba3ff&0.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="{9C205A39-1250-487D-ABD7-E831C6290539}" />
- <EventID>219</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>212</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:43:48.249755000Z" />
- <EventRecordID>571</EventRecordID>
- <Correlation />
- <Execution ProcessID="4" ThreadID="396" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="DriverNameLength">24</Data>
- <Data Name="DriverName">ACPI\PNP0A0A\2&daba3ff&0</Data>
- <Data Name="Status">3221226341</Data>
- <Data Name="FailureNameLength">14</Data>
- <Data Name="FailureName">\Driver\WUDFRd</Data>
- <Data Name="Version">0</Data>
- </EventData>
- </Event>
- Log Name: Application
- Source: Application Error
- Date: 8/23/2016 4:42:29 PM
- Event ID: 1000
- Task Category: (100)
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Faulting application name: DipAwayMode.exe, version: 0.0.0.0, time stamp: 0x00000000
- Faulting module name: KERNELBASE.dll, version: 10.0.14393.0, time stamp: 0x57898e34
- Exception code: 0xc0000409
- Fault offset: 0x000d96c2
- Faulting process id: 0xf54
- Faulting application start time: 0x01d1fd97f59dbf80
- Faulting application path: C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
- Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
- Report Id: 88d366e0-f5cc-4c17-ba08-e7557dda00e2
- Faulting package full name:
- Faulting package-relative application ID:
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Application Error" />
- <EventID Qualifiers="0">1000</EventID>
- <Level>2</Level>
- <Task>100</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:42:29.878618400Z" />
- <EventRecordID>345</EventRecordID>
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>DipAwayMode.exe</Data>
- <Data>0.0.0.0</Data>
- <Data>00000000</Data>
- <Data>KERNELBASE.dll</Data>
- <Data>10.0.14393.0</Data>
- <Data>57898e34</Data>
- <Data>c0000409</Data>
- <Data>000d96c2</Data>
- <Data>f54</Data>
- <Data>01d1fd97f59dbf80</Data>
- <Data>C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe</Data>
- <Data>C:\WINDOWS\System32\KERNELBASE.dll</Data>
- <Data>88d366e0-f5cc-4c17-ba08-e7557dda00e2</Data>
- <Data>
- </Data>
- <Data>
- </Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:42:07 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
- and APPID
- {F72671A9-012C-4725-9D2F-2A4D32D65169}
- to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:42:07.310626800Z" />
- <EventRecordID>539</EventRecordID>
- <Correlation />
- <Execution ProcessID="968" ThreadID="2872" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}</Data>
- <Data Name="param5">{F72671A9-012C-4725-9D2F-2A4D32D65169}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">SYSTEM</Data>
- <Data Name="param8">S-1-5-18</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:41:49 PM
- Event ID: 200
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Update service could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>200</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:41:49.016782000Z" />
- <EventRecordID>81</EventRecordID>
- <Correlation />
- <Execution ProcessID="484" ThreadID="1648" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:41:49 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:41:49.016668000Z" />
- <EventRecordID>80</EventRecordID>
- <Correlation />
- <Execution ProcessID="484" ThreadID="1648" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:41:49 PM
- Event ID: 200
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Update service could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>200</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:41:49.016367000Z" />
- <EventRecordID>79</EventRecordID>
- <Correlation />
- <Execution ProcessID="484" ThreadID="1628" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:41:49 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:41:49.016274900Z" />
- <EventRecordID>78</EventRecordID>
- <Correlation />
- <Execution ProcessID="484" ThreadID="1628" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-Kernel-PnP
- Date: 8/23/2016 4:41:38 PM
- Event ID: 219
- Task Category: (212)
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The driver \Driver\WUDFRd failed to load for the device ACPI\PNP0A0A\2&daba3ff&0.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="{9C205A39-1250-487D-ABD7-E831C6290539}" />
- <EventID>219</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>212</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:41:38.698612700Z" />
- <EventRecordID>517</EventRecordID>
- <Correlation />
- <Execution ProcessID="4" ThreadID="400" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="DriverNameLength">24</Data>
- <Data Name="DriverName">ACPI\PNP0A0A\2&daba3ff&0</Data>
- <Data Name="Status">3221226341</Data>
- <Data Name="FailureNameLength">14</Data>
- <Data Name="FailureName">\Driver\WUDFRd</Data>
- <Data Name="Version">0</Data>
- </EventData>
- </Event>
- Log Name: Application
- Source: Application Error
- Date: 8/23/2016 4:38:07 PM
- Event ID: 1000
- Task Category: (100)
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Faulting application name: DipAwayMode.exe, version: 0.0.0.0, time stamp: 0x00000000
- Faulting module name: KERNELBASE.dll, version: 10.0.14393.0, time stamp: 0x57898e34
- Exception code: 0xc0000409
- Fault offset: 0x000d96c2
- Faulting process id: 0xf44
- Faulting application start time: 0x01d1fd975b696c77
- Faulting application path: C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
- Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
- Report Id: 8de95021-0e20-486f-987d-36879c6a169d
- Faulting package full name:
- Faulting package-relative application ID:
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Application Error" />
- <EventID Qualifiers="0">1000</EventID>
- <Level>2</Level>
- <Task>100</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:38:07.909251000Z" />
- <EventRecordID>288</EventRecordID>
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>DipAwayMode.exe</Data>
- <Data>0.0.0.0</Data>
- <Data>00000000</Data>
- <Data>KERNELBASE.dll</Data>
- <Data>10.0.14393.0</Data>
- <Data>57898e34</Data>
- <Data>c0000409</Data>
- <Data>000d96c2</Data>
- <Data>f44</Data>
- <Data>01d1fd975b696c77</Data>
- <Data>C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe</Data>
- <Data>C:\WINDOWS\System32\KERNELBASE.dll</Data>
- <Data>8de95021-0e20-486f-987d-36879c6a169d</Data>
- <Data>
- </Data>
- <Data>
- </Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:37:48 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
- and APPID
- {F72671A9-012C-4725-9D2F-2A4D32D65169}
- to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:37:48.285519400Z" />
- <EventRecordID>481</EventRecordID>
- <Correlation />
- <Execution ProcessID="980" ThreadID="1452" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}</Data>
- <Data Name="param5">{F72671A9-012C-4725-9D2F-2A4D32D65169}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">SYSTEM</Data>
- <Data Name="param8">S-1-5-18</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:37:27 PM
- Event ID: 200
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Update service could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>200</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:37:27.108270000Z" />
- <EventRecordID>61</EventRecordID>
- <Correlation />
- <Execution ProcessID="612" ThreadID="1644" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:37:27 PM
- Event ID: 200
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Update service could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>200</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:37:27.108202800Z" />
- <EventRecordID>60</EventRecordID>
- <Correlation />
- <Execution ProcessID="612" ThreadID="1628" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:37:27 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:37:27.108175000Z" />
- <EventRecordID>59</EventRecordID>
- <Correlation />
- <Execution ProcessID="612" ThreadID="1644" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:37:27 PM
- Event ID: 200
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Update service could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>200</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:37:27.108166900Z" />
- <EventRecordID>58</EventRecordID>
- <Correlation />
- <Execution ProcessID="612" ThreadID="1704" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:37:27 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:37:27.108116400Z" />
- <EventRecordID>57</EventRecordID>
- <Correlation />
- <Execution ProcessID="612" ThreadID="1628" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:37:27 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:37:27.108067000Z" />
- <EventRecordID>56</EventRecordID>
- <Correlation />
- <Execution ProcessID="612" ThreadID="1704" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-Kernel-PnP
- Date: 8/23/2016 4:37:19 PM
- Event ID: 219
- Task Category: (212)
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The driver \Driver\WUDFRd failed to load for the device ACPI\PNP0A0A\2&daba3ff&0.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="{9C205A39-1250-487D-ABD7-E831C6290539}" />
- <EventID>219</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>212</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:37:19.227442400Z" />
- <EventRecordID>455</EventRecordID>
- <Correlation />
- <Execution ProcessID="4" ThreadID="384" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="DriverNameLength">24</Data>
- <Data Name="DriverName">ACPI\PNP0A0A\2&daba3ff&0</Data>
- <Data Name="Status">3221226341</Data>
- <Data Name="FailureNameLength">14</Data>
- <Data Name="FailureName">\Driver\WUDFRd</Data>
- <Data Name="Version">0</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-TaskScheduler
- Date: 8/23/2016 4:35:15 PM
- Event ID: 414
- Task Category: Task Misconfiguration
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Task Scheduler service found a misconfiguration in the NT TASK\ASUS\GpuFanHelper definition. Additional Data: Error Value: C:\Program Files (x86)\ASUS\AI Suite III\DIP4\GpuFanHelper.exe.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-TaskScheduler" Guid="{DE7B24EA-73C8-4A09-985D-5BDADCFA9017}" />
- <EventID>414</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>414</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:35:15.881140200Z" />
- <EventRecordID>422</EventRecordID>
- <Correlation />
- <Execution ProcessID="480" ThreadID="2616" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData Name="TaskMisconfigured">
- <Data Name="TaskName">NT TASK\ASUS\GpuFanHelper</Data>
- <Data Name="Parameter">C:\Program Files (x86)\ASUS\AI Suite III\DIP4\GpuFanHelper.exe</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-TaskScheduler
- Date: 8/23/2016 4:35:15 PM
- Event ID: 414
- Task Category: Task Misconfiguration
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Task Scheduler service found a misconfiguration in the NT TASK\ASUS\ASUS DIPAwayMode definition. Additional Data: Error Value: C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-TaskScheduler" Guid="{DE7B24EA-73C8-4A09-985D-5BDADCFA9017}" />
- <EventID>414</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>414</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:35:15.842678800Z" />
- <EventRecordID>421</EventRecordID>
- <Correlation />
- <Execution ProcessID="480" ThreadID="2840" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData Name="TaskMisconfigured">
- <Data Name="TaskName">NT TASK\ASUS\ASUS DIPAwayMode</Data>
- <Data Name="Parameter">C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-TaskScheduler
- Date: 8/23/2016 4:34:51 PM
- Event ID: 414
- Task Category: Task Misconfiguration
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Task Scheduler service found a misconfiguration in the NT TASK\ASUS\ASUS AISuiteIII definition. Additional Data: Error Value: C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-TaskScheduler" Guid="{DE7B24EA-73C8-4A09-985D-5BDADCFA9017}" />
- <EventID>414</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>414</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:34:51.391994100Z" />
- <EventRecordID>420</EventRecordID>
- <Correlation />
- <Execution ProcessID="480" ThreadID="2840" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData Name="TaskMisconfigured">
- <Data Name="TaskName">NT TASK\ASUS\ASUS AISuiteIII</Data>
- <Data Name="Parameter">C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:33:32 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.BingNews_4.13.47.0_x86__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:33:32.711043300Z" />
- <EventRecordID>219</EventRecordID>
- <Correlation ActivityID="{29A47941-FD96-0006-C286-A42996FDD101}" />
- <Execution ProcessID="4072" ThreadID="6780" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.BingNews_4.13.47.0_x86__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:33:30 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package PandoraMediaInc.29680B314EFC2_10.0.7.0_x64__n619g4d5j0fnw for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:33:30.480207000Z" />
- <EventRecordID>215</EventRecordID>
- <Correlation ActivityID="{29A47941-FD96-0004-E28A-A42996FDD101}" />
- <Execution ProcessID="4072" ThreadID="6760" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">PandoraMediaInc.29680B314EFC2_10.0.7.0_x64__n619g4d5j0fnw</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:33:29 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package 9E2F88E3.Twitter_5.2.0.0_x86__wgeqdkkx372wm for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:33:29.630234800Z" />
- <EventRecordID>213</EventRecordID>
- <Correlation ActivityID="{29A47941-FD96-0003-3484-A42996FDD101}" />
- <Execution ProcessID="4072" ThreadID="6780" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">9E2F88E3.Twitter_5.2.0.0_x86__wgeqdkkx372wm</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Application
- Source: Application Error
- Date: 8/23/2016 4:33:27 PM
- Event ID: 1000
- Task Category: (100)
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Faulting application name: aprp.exe, version: 1.0.0.28, time stamp: 0x5490e08f
- Faulting module name: KERNELBASE.dll, version: 10.0.14393.0, time stamp: 0x57898e34
- Exception code: 0xc0000409
- Fault offset: 0x000d96c2
- Faulting process id: 0xf00
- Faulting application start time: 0x01d1fd964893148d
- Faulting application path: C:\Program Files (x86)\ASUS\APRP\aprp.exe
- Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
- Report Id: 804da0f1-58fb-48ca-bbec-d7b956021fb4
- Faulting package full name:
- Faulting package-relative application ID:
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Application Error" />
- <EventID Qualifiers="0">1000</EventID>
- <Level>2</Level>
- <Task>100</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:33:27.260938600Z" />
- <EventRecordID>254</EventRecordID>
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>aprp.exe</Data>
- <Data>1.0.0.28</Data>
- <Data>5490e08f</Data>
- <Data>KERNELBASE.dll</Data>
- <Data>10.0.14393.0</Data>
- <Data>57898e34</Data>
- <Data>c0000409</Data>
- <Data>000d96c2</Data>
- <Data>f00</Data>
- <Data>01d1fd964893148d</Data>
- <Data>C:\Program Files (x86)\ASUS\APRP\aprp.exe</Data>
- <Data>C:\WINDOWS\System32\KERNELBASE.dll</Data>
- <Data>804da0f1-58fb-48ca-bbec-d7b956021fb4</Data>
- <Data>
- </Data>
- <Data>
- </Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:33:00 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package 4DF9E0F8.Netflix_6.11.33.0_x64__mcm4njqhnhss8 for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:33:00.523217100Z" />
- <EventRecordID>119</EventRecordID>
- <Correlation ActivityID="{29A47941-FD96-0003-1F82-A42996FDD101}" />
- <Execution ProcessID="4072" ThreadID="6776" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">4DF9E0F8.Netflix_6.11.33.0_x64__mcm4njqhnhss8</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:31:07 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.3DBuilder_11.0.47.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:31:07.005850900Z" />
- <EventRecordID>113</EventRecordID>
- <Correlation ActivityID="{29A47941-FD96-0007-AE7D-A42996FDD101}" />
- <Execution ProcessID="4072" ThreadID="6760" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.3DBuilder_11.0.47.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:31:05 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.Messaging_3.19.1001.0_x86__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:31:05.808237900Z" />
- <EventRecordID>111</EventRecordID>
- <Correlation ActivityID="{29A47941-FD96-0000-7B80-A42996FDD101}" />
- <Execution ProcessID="4072" ThreadID="6776" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.Messaging_3.19.1001.0_x86__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:31:04 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.MicrosoftOfficeHub_17.6801.23751.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:31:04.586033500Z" />
- <EventRecordID>109</EventRecordID>
- <Correlation ActivityID="{29A47941-FD96-0007-9E7D-A42996FDD101}" />
- <Execution ProcessID="4072" ThreadID="6780" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.MicrosoftOfficeHub_17.6801.23751.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:31:03 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.MicrosoftSolitaireCollection_3.9.5100.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:31:03.156719500Z" />
- <EventRecordID>105</EventRecordID>
- <Correlation ActivityID="{29A47941-FD96-0007-957D-A42996FDD101}" />
- <Execution ProcessID="4072" ThreadID="6780" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.MicrosoftSolitaireCollection_3.9.5100.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:31:03 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:31:03.156676600Z" />
- <EventRecordID>104</EventRecordID>
- <Correlation ActivityID="{29A47941-FD96-0007-957D-A42996FDD101}" />
- <Execution ProcessID="4072" ThreadID="6780" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:31:03 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:31:03.156624400Z" />
- <EventRecordID>103</EventRecordID>
- <Correlation ActivityID="{29A47941-FD96-0007-957D-A42996FDD101}" />
- <Execution ProcessID="4072" ThreadID="6780" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:31:01 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.MicrosoftStickyNotes_1.0.136.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:31:01.218902200Z" />
- <EventRecordID>101</EventRecordID>
- <Correlation ActivityID="{29A47941-FD96-0002-6E7F-A42996FDD101}" />
- <Execution ProcessID="4072" ThreadID="6780" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.MicrosoftStickyNotes_1.0.136.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:31:00 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.Office.OneNote_17.6868.57981.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:31:00.252177200Z" />
- <EventRecordID>99</EventRecordID>
- <Correlation ActivityID="{29A47941-FD96-0000-5680-A42996FDD101}" />
- <Execution ProcessID="4072" ThreadID="6776" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.Office.OneNote_17.6868.57981.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:30:59 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.OneConnect_1.1605.17.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:30:59.044909100Z" />
- <EventRecordID>97</EventRecordID>
- <Correlation ActivityID="{29A47941-FD96-0002-5D7F-A42996FDD101}" />
- <Execution ProcessID="4072" ThreadID="6780" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.OneConnect_1.1605.17.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:30:57 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.People_10.0.11902.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:30:57.904415600Z" />
- <EventRecordID>95</EventRecordID>
- <Correlation ActivityID="{29A47941-FD96-0003-0580-A42996FDD101}" />
- <Execution ProcessID="4072" ThreadID="6776" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.People_10.0.11902.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:30:56 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:30:56.946993700Z" />
- <EventRecordID>93</EventRecordID>
- <Correlation ActivityID="{29A47941-FD96-0007-7D7D-A42996FDD101}" />
- <Execution ProcessID="4072" ThreadID="6780" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:30:55 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.WindowsCalculator_10.1605.1582.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:30:55.822473800Z" />
- <EventRecordID>91</EventRecordID>
- <Correlation ActivityID="{29A47941-FD96-0002-E57E-A42996FDD101}" />
- <Execution ProcessID="4072" ThreadID="6780" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.WindowsCalculator_10.1605.1582.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:30:54 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.WindowsMaps_5.1603.1830.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:30:54.559458700Z" />
- <EventRecordID>89</EventRecordID>
- <Correlation ActivityID="{29A47941-FD96-0007-4F7D-A42996FDD101}" />
- <Execution ProcessID="4072" ThreadID="6780" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.WindowsMaps_5.1603.1830.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:30:53 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.WindowsSoundRecorder_10.1605.1622.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:30:53.326391800Z" />
- <EventRecordID>87</EventRecordID>
- <Correlation ActivityID="{29A47941-FD96-0007-447D-A42996FDD101}" />
- <Execution ProcessID="4072" ThreadID="6776" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.WindowsSoundRecorder_10.1605.1622.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:30:51 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.ZuneVideo_3.6.19281.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:30:51.954241300Z" />
- <EventRecordID>85</EventRecordID>
- <Correlation ActivityID="{29A47941-FD96-0002-8D7E-A42996FDD101}" />
- <Execution ProcessID="4072" ThreadID="6780" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.ZuneVideo_3.6.19281.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:30:49 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.SkypeApp_11.4.86.0_x64__kzf8qxf38zg5c for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:30:49.983491600Z" />
- <EventRecordID>83</EventRecordID>
- <Correlation ActivityID="{29A47941-FD96-0002-9D7D-A42996FDD101}" />
- <Execution ProcessID="4072" ThreadID="6776" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.SkypeApp_11.4.86.0_x64__kzf8qxf38zg5c</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:30:44 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.WindowsAlarms_10.1605.1742.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:30:44.871974500Z" />
- <EventRecordID>81</EventRecordID>
- <Correlation ActivityID="{29A47941-FD96-0007-627C-A42996FDD101}" />
- <Execution ProcessID="4072" ThreadID="6780" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.WindowsAlarms_10.1605.1742.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:30:27 PM
- Event ID: 123
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The DSM service was delayed by 37 seconds for a driver query/download/install on device 'DISPLAY\SAM0B80\5&231E9E4F&0&UID4356'
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>123</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:30:27.684315900Z" />
- <EventRecordID>48</EventRecordID>
- <Correlation ActivityID="{29A47941-FD96-0003-C379-A42996FDD101}" />
- <Execution ProcessID="480" ThreadID="1752" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="Prop_Seconds">37</Data>
- <Data Name="Prop_DeviceId">DISPLAY\SAM0B80\5&231E9E4F&0&UID4356</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:30:05 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
- and APPID
- {F72671A9-012C-4725-9D2F-2A4D32D65169}
- to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:30:05.998161700Z" />
- <EventRecordID>390</EventRecordID>
- <Correlation />
- <Execution ProcessID="968" ThreadID="1020" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}</Data>
- <Data Name="param5">{F72671A9-012C-4725-9D2F-2A4D32D65169}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">SYSTEM</Data>
- <Data Name="param8">S-1-5-18</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:29:32 PM
- Event ID: 200
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Update service could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>200</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:29:32.815334800Z" />
- <EventRecordID>44</EventRecordID>
- <Correlation />
- <Execution ProcessID="480" ThreadID="1704" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:29:32 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:29:32.815276300Z" />
- <EventRecordID>43</EventRecordID>
- <Correlation />
- <Execution ProcessID="480" ThreadID="1704" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:29:32 PM
- Event ID: 200
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Update service could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>200</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:29:32.769118000Z" />
- <EventRecordID>42</EventRecordID>
- <Correlation />
- <Execution ProcessID="480" ThreadID="1660" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:29:32 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:29:32.769046500Z" />
- <EventRecordID>41</EventRecordID>
- <Correlation />
- <Execution ProcessID="480" ThreadID="1660" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:29:32 PM
- Event ID: 200
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- A connection to the Windows Update service could not be established.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>200</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:29:32.768908400Z" />
- <EventRecordID>40</EventRecordID>
- <Correlation />
- <Execution ProcessID="480" ThreadID="1640" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:29:32 PM
- Event ID: 202
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The Network List Manager reports no connectivity to the internet.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>202</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:29:32.768832400Z" />
- <EventRecordID>39</EventRecordID>
- <Correlation />
- <Execution ProcessID="480" ThreadID="1640" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-Kernel-PnP
- Date: 8/23/2016 4:29:19 PM
- Event ID: 219
- Task Category: (212)
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The driver \Driver\WUDFRd failed to load for the device ACPI\PNP0A0A\2&daba3ff&0.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="{9C205A39-1250-487D-ABD7-E831C6290539}" />
- <EventID>219</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>212</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:29:19.022326600Z" />
- <EventRecordID>365</EventRecordID>
- <Correlation />
- <Execution ProcessID="4" ThreadID="384" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="DriverNameLength">24</Data>
- <Data Name="DriverName">ACPI\PNP0A0A\2&daba3ff&0</Data>
- <Data Name="Status">3221226341</Data>
- <Data Name="FailureNameLength">14</Data>
- <Data Name="FailureName">\Driver\WUDFRd</Data>
- <Data Name="Version">0</Data>
- </EventData>
- </Event>
- Log Name: Application
- Source: Microsoft-Windows-Perflib
- Date: 8/23/2016 4:25:31 PM
- Event ID: 1023
- Task Category: None
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Windows cannot load the extensible counter DLL rdyboost. The first four bytes (DWORD) of the Data section contains the Windows error code.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Perflib" Guid="{13B197BD-7CEE-4B4E-8DD0-59314CE374CE}" EventSourceName="Perflib" />
- <EventID Qualifiers="49152">1023</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:25:31.441676800Z" />
- <EventRecordID>207</EventRecordID>
- <Correlation />
- <Execution ProcessID="0" ThreadID="0" />
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <UserData>
- <EventXML xmlns="Perflib">
- <param1>rdyboost</param1>
- <binaryDataSize>4</binaryDataSize>
- <binaryData>7E000000</binaryData>
- </EventXML>
- </UserData>
- </Event>
- Log Name: Application
- Source: Microsoft-Windows-Perflib
- Date: 8/23/2016 4:25:31 PM
- Event ID: 1008
- Task Category: None
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- The Open Procedure for service "BITS" in DLL "C:\Windows\System32\bitsperf.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Perflib" Guid="{13B197BD-7CEE-4B4E-8DD0-59314CE374CE}" EventSourceName="Perflib" />
- <EventID Qualifiers="49152">1008</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:25:31.138650100Z" />
- <EventRecordID>206</EventRecordID>
- <Correlation />
- <Execution ProcessID="0" ThreadID="0" />
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <UserData>
- <EventXML xmlns="Perflib">
- <param1>BITS</param1>
- <param2>C:\Windows\System32\bitsperf.dll</param2>
- <binaryDataSize>4</binaryDataSize>
- <binaryData>02000000</binaryData>
- </EventXML>
- </UserData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-Kernel-PnP
- Date: 8/23/2016 4:25:29 PM
- Event ID: 225
- Task Category: (223)
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The application \Device\CdRom0\Bin\Select.exe with process id 7064 stopped the removal or ejection for the device PCI\VEN_8086&DEV_8C82&SUBSYS_85341043&REV_00\3&11583659&0&FA.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="{9C205A39-1250-487D-ABD7-E831C6290539}" />
- <EventID>225</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>223</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:25:29.596867200Z" />
- <EventRecordID>334</EventRecordID>
- <Correlation />
- <Execution ProcessID="4" ThreadID="4080" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ProcessId">7064</Data>
- <Data Name="ProcessNameLength">29</Data>
- <Data Name="ProcessName">\Device\CdRom0\Bin\Select.exe</Data>
- <Data Name="DeviceInstanceLength">60</Data>
- <Data Name="DeviceInstance">PCI\VEN_8086&DEV_8C82&SUBSYS_85341043&REV_00\3&11583659&0&FA</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-Kernel-PnP
- Date: 8/23/2016 4:25:29 PM
- Event ID: 225
- Task Category: (223)
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The application \Device\CdRom0\Bin\AsusInstAll\InstAll.exe with process id 6600 stopped the removal or ejection for the device PCI\VEN_8086&DEV_8C82&SUBSYS_85341043&REV_00\3&11583659&0&FA.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="{9C205A39-1250-487D-ABD7-E831C6290539}" />
- <EventID>225</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>223</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:25:29.596866400Z" />
- <EventRecordID>333</EventRecordID>
- <Correlation />
- <Execution ProcessID="4" ThreadID="4080" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ProcessId">6600</Data>
- <Data Name="ProcessNameLength">42</Data>
- <Data Name="ProcessName">\Device\CdRom0\Bin\AsusInstAll\InstAll.exe</Data>
- <Data Name="DeviceInstanceLength">60</Data>
- <Data Name="DeviceInstance">PCI\VEN_8086&DEV_8C82&SUBSYS_85341043&REV_00\3&11583659&0&FA</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-Kernel-PnP
- Date: 8/23/2016 4:25:29 PM
- Event ID: 225
- Task Category: (223)
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The application \Device\CdRom0\Drivers\RAID\IRST\Install\Driver\SetupRST.exe with process id 6068 stopped the removal or ejection for the device PCI\VEN_8086&DEV_8C82&SUBSYS_85341043&REV_00\3&11583659&0&FA.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="{9C205A39-1250-487D-ABD7-E831C6290539}" />
- <EventID>225</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>223</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:25:29.596865400Z" />
- <EventRecordID>332</EventRecordID>
- <Correlation />
- <Execution ProcessID="4" ThreadID="4080" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ProcessId">6068</Data>
- <Data Name="ProcessNameLength">60</Data>
- <Data Name="ProcessName">\Device\CdRom0\Drivers\RAID\IRST\Install\Driver\SetupRST.exe</Data>
- <Data Name="DeviceInstanceLength">60</Data>
- <Data Name="DeviceInstance">PCI\VEN_8086&DEV_8C82&SUBSYS_85341043&REV_00\3&11583659&0&FA</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: e1dexpress
- Date: 8/23/2016 4:24:47 PM
- Event ID: 27
- Task Category: None
- Level: Warning
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Intel(R) Ethernet Connection (2) I218-V
- Network link is disconnected.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="e1dexpress" />
- <EventID Qualifiers="40964">27</EventID>
- <Level>3</Level>
- <Task>0</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:24:47.819867400Z" />
- <EventRecordID>329</EventRecordID>
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>
- </Data>
- <Data>Intel(R) Ethernet Connection (2) I218-V</Data>
- <Binary>0000040002003000000000001B0004A00000000000000000000000000000000000000000000000001B0004A0</Binary>
- </EventData>
- </Event>
- Log Name: System
- Source: e1iexpress
- Date: 8/23/2016 4:24:40 PM
- Event ID: 27
- Task Category: None
- Level: Warning
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Intel(R) Ethernet Connection (2) I218-V
- Network link is disconnected.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="e1iexpress" />
- <EventID Qualifiers="40964">27</EventID>
- <Level>3</Level>
- <Task>0</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:24:40.249411800Z" />
- <EventRecordID>324</EventRecordID>
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>
- </Data>
- <Data>Intel(R) Ethernet Connection (2) I218-V</Data>
- <Binary>0000040002003000000000001B0004A00000000000000000000000000000000000000000000000001B0004A0</Binary>
- </EventData>
- </Event>
- Log Name: Application
- Source: Microsoft-Windows-CAPI2
- Date: 8/23/2016 4:24:30 PM
- Event ID: 513
- Task Category: None
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.
- Details:
- AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.
- System Error:
- Access is denied.
- .
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" EventSourceName="Microsoft-Windows-CAPI2" />
- <EventID Qualifiers="0">513</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:24:30.001489300Z" />
- <EventRecordID>177</EventRecordID>
- <Correlation />
- <Execution ProcessID="1408" ThreadID="1444" />
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>
- Details:
- AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.
- System Error:
- Access is denied.
- </Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:20:38 PM
- Event ID: 123
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The DSM service was delayed by 151 seconds for a driver query/download/install on device 'PCI\VEN_10DE&DEV_17C8&SUBSYS_85491043&REV_A1\4&3834D97&0&0008'
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>123</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:20:38.879977600Z" />
- <EventRecordID>16</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0006-9530-C23F94FDD101}" />
- <Execution ProcessID="1012" ThreadID="1528" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="Prop_Seconds">151</Data>
- <Data Name="Prop_DeviceId">PCI\VEN_10DE&DEV_17C8&SUBSYS_85491043&REV_A1\4&3834D97&0&0008</Data>
- </EventData>
- </Event>
- Log Name: Application
- Source: Microsoft-Windows-Search
- Date: 8/23/2016 4:20:36 PM
- Event ID: 3104
- Task Category: Gatherer
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Enumerating user sessions to generate filter pools failed.
- Details:
- (HRESULT : 0x80040210) (0x80040210)
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Search" Guid="{CA4E628D-8567-4896-AB6B-835B221F373F}" EventSourceName="Windows Search Service" />
- <EventID Qualifiers="49152">3104</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>3</Task>
- <Opcode>0</Opcode>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:20:36.213818000Z" />
- <EventRecordID>106</EventRecordID>
- <Correlation />
- <Execution ProcessID="0" ThreadID="0" />
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>
- Details:
- (HRESULT : 0x80040210) (0x80040210)
- </Data>
- </EventData>
- </Event>
- Log Name: Application
- Source: Microsoft-Windows-Search
- Date: 8/23/2016 4:20:36 PM
- Event ID: 3104
- Task Category: Gatherer
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Enumerating user sessions to generate filter pools failed.
- Details:
- (HRESULT : 0x80040210) (0x80040210)
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Search" Guid="{CA4E628D-8567-4896-AB6B-835B221F373F}" EventSourceName="Windows Search Service" />
- <EventID Qualifiers="49152">3104</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>3</Task>
- <Opcode>0</Opcode>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:20:36.212818200Z" />
- <EventRecordID>105</EventRecordID>
- <Correlation />
- <Execution ProcessID="0" ThreadID="0" />
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>
- Details:
- (HRESULT : 0x80040210) (0x80040210)
- </Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:20:18 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.ZuneMusic_3.6.19261.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:20:18.179388900Z" />
- <EventRecordID>79</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0000-4F39-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4980" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.ZuneMusic_3.6.19261.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:20:17 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.XboxIdentityProvider_11.18.16009.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:20:17.671763600Z" />
- <EventRecordID>77</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0007-7035-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4984" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.XboxIdentityProvider_11.18.16009.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:20:16 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.XboxApp_15.18.23005.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:20:16.126404800Z" />
- <EventRecordID>75</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0000-0439-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4992" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.XboxApp_15.18.23005.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Application
- Source: Application Error
- Date: 8/23/2016 4:20:14 PM
- Event ID: 1000
- Task Category: (100)
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- Faulting application name: SearchUI.exe, version: 10.0.14393.82, time stamp: 0x57a55960
- Faulting module name: CSGSuggestLib.dll, version: 0.0.0.0, time stamp: 0x57a557b2
- Exception code: 0xc0000005
- Fault offset: 0x0000000000036bc7
- Faulting process id: 0xcd0
- Faulting application start time: 0x01d1fd94d9e6cfc8
- Faulting application path: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
- Faulting module path: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
- Report Id: 80ea532f-2f89-4808-9386-e2f612ac8345
- Faulting package full name: Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy
- Faulting package-relative application ID: CortanaUI
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Application Error" />
- <EventID Qualifiers="0">1000</EventID>
- <Level>2</Level>
- <Task>100</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:20:14.437916600Z" />
- <EventRecordID>103</EventRecordID>
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data>SearchUI.exe</Data>
- <Data>10.0.14393.82</Data>
- <Data>57a55960</Data>
- <Data>CSGSuggestLib.dll</Data>
- <Data>0.0.0.0</Data>
- <Data>57a557b2</Data>
- <Data>c0000005</Data>
- <Data>0000000000036bc7</Data>
- <Data>cd0</Data>
- <Data>01d1fd94d9e6cfc8</Data>
- <Data>C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe</Data>
- <Data>C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll</Data>
- <Data>80ea532f-2f89-4808-9386-e2f612ac8345</Data>
- <Data>Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy</Data>
- <Data>CortanaUI</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:20:14 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.WindowsStore_11606.1001.39.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:20:14.433106900Z" />
- <EventRecordID>73</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0007-E034-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4984" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.WindowsStore_11606.1001.39.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:20:08 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
- and APPID
- {F72671A9-012C-4725-9D2F-2A4D32D65169}
- to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:20:08.492397400Z" />
- <EventRecordID>272</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="4016" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}</Data>
- <Data Name="param5">{F72671A9-012C-4725-9D2F-2A4D32D65169}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">SYSTEM</Data>
- <Data Name="param8">S-1-5-18</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:20:07 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.WindowsFeedbackHub_1.3.1741.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:20:07.973860200Z" />
- <EventRecordID>71</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0000-E236-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4996" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.WindowsFeedbackHub_1.3.1741.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:20:06 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.WindowsCamera_2016.404.190.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:20:06.304159100Z" />
- <EventRecordID>69</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0002-9733-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4980" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.WindowsCamera_2016.404.190.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:20:02 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:20:02.566919300Z" />
- <EventRecordID>67</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0005-7A33-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4992" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:20:00 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.Getstarted_3.11.3.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:20:00.878178700Z" />
- <EventRecordID>65</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0005-1633-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4980" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.Getstarted_3.11.3.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:56 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.BingWeather_4.9.51.0_x86__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:56.622740700Z" />
- <EventRecordID>59</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0001-2831-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4980" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.BingWeather_4.9.51.0_x86__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:56 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.NET.Native.Framework.1.3_1.3.23901.0_x86__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:56.622692300Z" />
- <EventRecordID>58</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0001-2831-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4980" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.NET.Native.Framework.1.3_1.3.23901.0_x86__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:56 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.NET.Native.Framework.1.3_1.3.23901.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:56.622645100Z" />
- <EventRecordID>57</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0001-2831-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4980" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.NET.Native.Framework.1.3_1.3.23901.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:56 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:56.622593400Z" />
- <EventRecordID>56</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0001-2831-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4980" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:56 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:56.622532400Z" />
- <EventRecordID>55</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0001-2831-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4980" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:19:56 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: DESKTOP-D07KK79\Enzo
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {260EB9DE-5CBE-4BFF-A99A-3710AF55BF1E}
- and APPID
- {260EB9DE-5CBE-4BFF-A99A-3710AF55BF1E}
- to the user DESKTOP-D07KK79\Enzo SID (S-1-5-21-1999763852-2568256858-2669145966-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.Windows.ShellExperienceHost_10.0.14393.0_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:56.243327500Z" />
- <EventRecordID>270</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="892" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-21-1999763852-2568256858-2669145966-1001" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{260EB9DE-5CBE-4BFF-A99A-3710AF55BF1E}</Data>
- <Data Name="param5">{260EB9DE-5CBE-4BFF-A99A-3710AF55BF1E}</Data>
- <Data Name="param6">DESKTOP-D07KK79</Data>
- <Data Name="param7">Enzo</Data>
- <Data Name="param8">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Microsoft.Windows.ShellExperienceHost_10.0.14393.0_neutral_neutral_cw5n1h2txyewy</Data>
- <Data Name="param11">S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:55 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package microsoft.windowscommunicationsapps_17.6868.41201.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:55.117318000Z" />
- <EventRecordID>53</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0000-2F34-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4984" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">microsoft.windowscommunicationsapps_17.6868.41201.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:50 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.DesktopAppInstaller_1.0.1471.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:50.488671100Z" />
- <EventRecordID>49</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0007-8F31-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4984" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.DesktopAppInstaller_1.0.1471.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:50 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.VCLibs.140.00_14.0.23816.0_x64__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:50.488624900Z" />
- <EventRecordID>48</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0007-8F31-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4984" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.VCLibs.140.00_14.0.23816.0_x64__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:50 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.VCLibs.140.00_14.0.23816.0_x86__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:50.488569500Z" />
- <EventRecordID>47</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0007-8F31-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4984" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.VCLibs.140.00_14.0.23816.0_x86__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:48 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Windows.PrintDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:48.351933900Z" />
- <EventRecordID>46</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0001-1531-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4980" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Windows.PrintDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:47 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Windows.MiracastView_6.3.0.0_neutral_neutral_cw5n1h2txyewy for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:47.932441100Z" />
- <EventRecordID>45</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0002-0A32-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4980" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Windows.MiracastView_6.3.0.0_neutral_neutral_cw5n1h2txyewy</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:47 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Windows.ContactSupport_10.0.14393.0_neutral_neutral_cw5n1h2txyewy for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:47.219253100Z" />
- <EventRecordID>43</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0001-0031-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4980" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Windows.ContactSupport_10.0.14393.0_neutral_neutral_cw5n1h2txyewy</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:46 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.XboxGameCallableUI_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:46.732646700Z" />
- <EventRecordID>41</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0001-FE30-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4980" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.XboxGameCallableUI_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:45 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.Windows.SecureAssessmentBrowser_10.0.14393.0_neutral_neutral_cw5n1h2txyewy for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:45.654618600Z" />
- <EventRecordID>39</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0001-E630-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4980" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.Windows.SecureAssessmentBrowser_10.0.14393.0_neutral_neutral_cw5n1h2txyewy</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:44 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:44.828080400Z" />
- <EventRecordID>37</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0002-F731-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4992" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:43 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.Windows.ParentalControls_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:43.466157200Z" />
- <EventRecordID>35</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0003-8B31-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4980" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.Windows.ParentalControls_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:42 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.Windows.ContentDeliveryManager_10.0.14393.0_neutral_neutral_cw5n1h2txyewy for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:42.748284900Z" />
- <EventRecordID>33</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0006-5833-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4992" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.Windows.ContentDeliveryManager_10.0.14393.0_neutral_neutral_cw5n1h2txyewy</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:42 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.Windows.AssignedAccessLockApp_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:42.583447500Z" />
- <EventRecordID>31</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0001-DA30-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4980" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.Windows.AssignedAccessLockApp_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:42 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.Windows.Apprep.ChxApp_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:42.201702000Z" />
- <EventRecordID>29</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0006-5333-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4992" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.Windows.Apprep.ChxApp_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:41 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.PPIProjection_10.0.14393.0_neutral_neutral_cw5n1h2txyewy for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:41.741130500Z" />
- <EventRecordID>27</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0004-BB32-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4980" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.PPIProjection_10.0.14393.0_neutral_neutral_cw5n1h2txyewy</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:41 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:41.166912500Z" />
- <EventRecordID>25</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0001-C530-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4992" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:40 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.LockApp_10.0.14393.0_neutral__cw5n1h2txyewy for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:40.627487000Z" />
- <EventRecordID>23</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0004-9A32-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4992" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.LockApp_10.0.14393.0_neutral__cw5n1h2txyewy</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:40 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.AccountsControl_10.0.14393.0_neutral__cw5n1h2txyewy for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:40.124714300Z" />
- <EventRecordID>21</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0007-2B31-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4992" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.AccountsControl_10.0.14393.0_neutral__cw5n1h2txyewy</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:39 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:39.088551300Z" />
- <EventRecordID>19</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0001-B730-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4992" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:38 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:38.356326500Z" />
- <EventRecordID>18</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0002-9C31-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4992" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:35 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.Windows.ShellExperienceHost_10.0.14393.0_neutral_neutral_cw5n1h2txyewy for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:35.569741900Z" />
- <EventRecordID>16</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0005-5532-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4992" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.Windows.ShellExperienceHost_10.0.14393.0_neutral_neutral_cw5n1h2txyewy</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:34 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.Windows.CloudExperienceHost_10.0.14393.0_neutral_neutral_cw5n1h2txyewy for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:34.591017300Z" />
- <EventRecordID>14</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0007-CA30-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4980" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.Windows.CloudExperienceHost_10.0.14393.0_neutral_neutral_cw5n1h2txyewy</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:33 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.AAD.BrokerPlugin_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:33.010746800Z" />
- <EventRecordID>11</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0002-3D31-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4980" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.AAD.BrokerPlugin_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:19:31 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.BioEnrollment_10.0.14393.0_neutral__cw5n1h2txyewy for user DESKTOP-D07KK79\Enzo (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:19:31.782931900Z" />
- <EventRecordID>9</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0002-3C31-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4980" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.BioEnrollment_10.0.14393.0_neutral__cw5n1h2txyewy</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1001</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceSetupManager/Admin
- Source: Microsoft-Windows-DeviceSetupManager
- Date: 8/23/2016 4:17:59 PM
- Event ID: 123
- Task Category: None
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The DSM service was delayed by 27 seconds for a driver query/download/install on device 'ROOT\BASICDISPLAY\0000'
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceSetupManager" Guid="{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}" />
- <EventID>123</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:59.786202400Z" />
- <EventRecordID>11</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0006-9530-C23F94FDD101}" />
- <Execution ProcessID="1012" ThreadID="1528" />
- <Channel>Microsoft-Windows-DeviceSetupManager/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="Prop_Seconds">27</Data>
- <Data Name="Prop_DeviceId">ROOT\BASICDISPLAY\0000</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:17:45 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:45.287891200Z" />
- <EventRecordID>257</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="896" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
- <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">LOCAL SERVICE</Data>
- <Data Name="param8">S-1-5-19</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:17:45 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:45.103875200Z" />
- <EventRecordID>256</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="896" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
- <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">LOCAL SERVICE</Data>
- <Data Name="param8">S-1-5-19</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Service Control Manager
- Date: 8/23/2016 4:17:45 PM
- Event ID: 7030
- Task Category: None
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- The Printer Extensions and Notifications service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
- <EventID Qualifiers="49152">7030</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:45.040869900Z" />
- <EventRecordID>255</EventRecordID>
- <Correlation />
- <Execution ProcessID="688" ThreadID="1620" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data Name="param1">Printer Extensions and Notifications</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:17:44 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:44.928860100Z" />
- <EventRecordID>253</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="896" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
- <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">LOCAL SERVICE</Data>
- <Data Name="param8">S-1-5-19</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:17:44 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:44.743844000Z" />
- <EventRecordID>252</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="592" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
- <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">LOCAL SERVICE</Data>
- <Data Name="param8">S-1-5-19</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:17:44 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:44.532825300Z" />
- <EventRecordID>251</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="896" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
- <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">LOCAL SERVICE</Data>
- <Data Name="param8">S-1-5-19</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:17:44 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:44.312806300Z" />
- <EventRecordID>250</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="896" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
- <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">LOCAL SERVICE</Data>
- <Data Name="param8">S-1-5-19</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:17:44 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.BioEnrollment_10.0.14393.0_neutral__cw5n1h2txyewy for user DESKTOP-D07KK79\defaultuser0 (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:44.176327100Z" />
- <EventRecordID>7</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0006-DF30-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4980" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.BioEnrollment_10.0.14393.0_neutral__cw5n1h2txyewy</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1000</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:17:44 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:44.130790400Z" />
- <EventRecordID>249</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="896" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
- <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">LOCAL SERVICE</Data>
- <Data Name="param8">S-1-5-19</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:17:43 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:43.950774700Z" />
- <EventRecordID>248</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="896" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
- <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">LOCAL SERVICE</Data>
- <Data Name="param8">S-1-5-19</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:17:43 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:43.766758600Z" />
- <EventRecordID>247</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="896" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
- <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">LOCAL SERVICE</Data>
- <Data Name="param8">S-1-5-19</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:17:43 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:43.588743100Z" />
- <EventRecordID>246</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="592" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
- <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">LOCAL SERVICE</Data>
- <Data Name="param8">S-1-5-19</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:17:43 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:43.391725900Z" />
- <EventRecordID>245</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="592" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
- <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">LOCAL SERVICE</Data>
- <Data Name="param8">S-1-5-19</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:17:43 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:43.162705900Z" />
- <EventRecordID>244</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="592" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
- <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">LOCAL SERVICE</Data>
- <Data Name="param8">S-1-5-19</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:17:42 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:42.969689300Z" />
- <EventRecordID>243</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="592" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
- <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">LOCAL SERVICE</Data>
- <Data Name="param8">S-1-5-19</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:17:42 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:42.793673900Z" />
- <EventRecordID>242</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="896" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
- <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">LOCAL SERVICE</Data>
- <Data Name="param8">S-1-5-19</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:17:42 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:42.349634900Z" />
- <EventRecordID>241</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="896" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
- <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">LOCAL SERVICE</Data>
- <Data Name="param8">S-1-5-19</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:17:42 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:42.162618800Z" />
- <EventRecordID>240</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="592" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
- <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">LOCAL SERVICE</Data>
- <Data Name="param8">S-1-5-19</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:17:41 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:41.975602000Z" />
- <EventRecordID>239</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="908" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
- <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">LOCAL SERVICE</Data>
- <Data Name="param8">S-1-5-19</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:17:41 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:41.798586800Z" />
- <EventRecordID>238</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="1944" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
- <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">LOCAL SERVICE</Data>
- <Data Name="param8">S-1-5-19</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:17:41 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:41.144529900Z" />
- <EventRecordID>237</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="1944" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
- <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">LOCAL SERVICE</Data>
- <Data Name="param8">S-1-5-19</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:17:40 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:40.947512700Z" />
- <EventRecordID>236</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="1944" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
- <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">LOCAL SERVICE</Data>
- <Data Name="param8">S-1-5-19</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:17:40 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:40.744495000Z" />
- <EventRecordID>235</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="1944" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
- <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">LOCAL SERVICE</Data>
- <Data Name="param8">S-1-5-19</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:17:40 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:40.485472100Z" />
- <EventRecordID>234</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="1944" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
- <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">LOCAL SERVICE</Data>
- <Data Name="param8">S-1-5-19</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:17:40 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:40.271453400Z" />
- <EventRecordID>233</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="1944" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
- <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">LOCAL SERVICE</Data>
- <Data Name="param8">S-1-5-19</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:17:40 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:40.101438600Z" />
- <EventRecordID>232</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="1944" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
- <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">LOCAL SERVICE</Data>
- <Data Name="param8">S-1-5-19</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:17:39 PM
- Event ID: 69
- Task Category: None
- Level: Error
- Keywords: (70368744177664),Process
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- Failed with 0x490 modifying AppModel Runtime status for package Microsoft.Windows.CloudExperienceHost_10.0.14393.0_neutral_neutral_cw5n1h2txyewy for user DESKTOP-D07KK79\defaultuser0 (current status = 0x0, desired status = 0x20).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>69</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000001</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:39.957881400Z" />
- <EventRecordID>5</EventRecordID>
- <Correlation ActivityID="{3FC22F77-FD94-0002-2D30-C23F94FDD101}" />
- <Execution ProcessID="968" ThreadID="4980" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">1168</Data>
- <Data Name="PackageFullName">Microsoft.Windows.CloudExperienceHost_10.0.14393.0_neutral_neutral_cw5n1h2txyewy</Data>
- <Data Name="User">S-1-5-21-1999763852-2568256858-2669145966-1000</Data>
- <Data Name="DesiredStatus">32</Data>
- <Data Name="CurrentStatus">0</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:17:39 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:39.927423600Z" />
- <EventRecordID>231</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="1944" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
- <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">LOCAL SERVICE</Data>
- <Data Name="param8">S-1-5-19</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:17:39 PM
- Event ID: 10016
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10016</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:39.329371100Z" />
- <EventRecordID>230</EventRecordID>
- <Correlation />
- <Execution ProcessID="860" ThreadID="1944" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">application-specific</Data>
- <Data Name="param2">Local</Data>
- <Data Name="param3">Activation</Data>
- <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
- <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
- <Data Name="param6">NT AUTHORITY</Data>
- <Data Name="param7">LOCAL SERVICE</Data>
- <Data Name="param8">S-1-5-19</Data>
- <Data Name="param9">LocalHost (Using LRPC)</Data>
- <Data Name="param10">Unavailable</Data>
- <Data Name="param11">Unavailable</Data>
- </EventData>
- </Event>
- Log Name: Application
- Source: Microsoft-Windows-Search
- Date: 8/23/2016 4:17:23 PM
- Event ID: 1008
- Task Category: Search service
- Level: Warning
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- The Windows Search Service is starting up and attempting to remove the old search index {Reason: Full Index Reset}.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Search" Guid="{CA4E628D-8567-4896-AB6B-835B221F373F}" EventSourceName="Windows Search Service" />
- <EventID Qualifiers="32768">1008</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>1</Task>
- <Opcode>0</Opcode>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:17:23.802116800Z" />
- <EventRecordID>25</EventRecordID>
- <Correlation />
- <Execution ProcessID="0" ThreadID="0" />
- <Channel>Application</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data Name="ExtraInfo">
- </Data>
- <Data Name="Reason">Full Index Reset</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-Time-Service
- Date: 8/23/2016 4:16:22 PM
- Event ID: 134
- Task Category: None
- Level: Warning
- Keywords:
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Time-Service" Guid="{06EDCFEB-0FD0-4E53-ACCA-A6F8BBF81BCB}" />
- <EventID>134</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:16:22.637490000Z" />
- <EventRecordID>213</EventRecordID>
- <Correlation />
- <Execution ProcessID="1476" ThreadID="1556" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData Name="TMP_EVENT_MANUAL_PEER_DNS_ERROR">
- <Data Name="ErrorMessage">No such host is known. (0x80072AF9)</Data>
- <Data Name="RetryMinutes">15</Data>
- <Data Name="DomainPeer">time.windows.com,0x9</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-Time-Service
- Date: 8/23/2016 4:16:21 PM
- Event ID: 134
- Task Category: None
- Level: Warning
- Keywords:
- User: LOCAL SERVICE
- Computer: DESKTOP-D07KK79
- Description:
- NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Time-Service" Guid="{06EDCFEB-0FD0-4E53-ACCA-A6F8BBF81BCB}" />
- <EventID>134</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:16:21.135379600Z" />
- <EventRecordID>209</EventRecordID>
- <Correlation />
- <Execution ProcessID="1476" ThreadID="1556" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData Name="TMP_EVENT_MANUAL_PEER_DNS_ERROR">
- <Data Name="ErrorMessage">No such host is known. (0x80072AF9)</Data>
- <Data Name="RetryMinutes">15</Data>
- <Data Name="DomainPeer">time.windows.com,0x9</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin
- Source: Microsoft-Windows-DeviceManagement-Pushrouter
- Date: 8/23/2016 4:15:55 PM
- Event ID: 506
- Task Category: None
- Level: Error
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- DmWapPushService: Failed to register WNF with EventAggregator for WAP messages received by SMS Router. Result: (0xC0020036).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceManagement-Pushrouter" Guid="{F1201B5A-E170-42B6-8D20-B57AC57E6416}" />
- <EventID>506</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:15:55.404442900Z" />
- <EventRecordID>42</EventRecordID>
- <Correlation />
- <Execution ProcessID="1012" ThreadID="388" />
- <Channel>Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="HexInt1">0xc0020036</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-Kernel-PnP
- Date: 8/23/2016 4:15:46 PM
- Event ID: 219
- Task Category: (212)
- Level: Warning
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The driver \Driver\WUDFRd failed to load for the device ACPI\PNP0A0A\2&daba3ff&0.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="{9C205A39-1250-487D-ABD7-E831C6290539}" />
- <EventID>219</EventID>
- <Version>0</Version>
- <Level>3</Level>
- <Task>212</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:15:46.578956700Z" />
- <EventRecordID>191</EventRecordID>
- <Correlation />
- <Execution ProcessID="4" ThreadID="348" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="DriverNameLength">24</Data>
- <Data Name="DriverName">ACPI\PNP0A0A\2&daba3ff&0</Data>
- <Data Name="Status">3221226341</Data>
- <Data Name="FailureNameLength">14</Data>
- <Data Name="FailureName">\Driver\WUDFRd</Data>
- <Data Name="Version">0</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Service Control Manager
- Date: 8/23/2016 4:15:08 PM
- Event ID: 7024
- Task Category: None
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: DESKTOP-D07KK79
- Description:
- The Background Intelligent Transfer Service service terminated with the following service-specific error:
- The media is write protected.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
- <EventID Qualifiers="49152">7024</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:15:08.678755500Z" />
- <EventRecordID>169</EventRecordID>
- <Correlation />
- <Execution ProcessID="720" ThreadID="1512" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security />
- </System>
- <EventData>
- <Data Name="param1">Background Intelligent Transfer Service</Data>
- <Data Name="param2">%%2147942419</Data>
- <Binary>42004900540053000000</Binary>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-Bits-Client
- Date: 8/23/2016 4:15:08 PM
- Event ID: 16392
- Task Category: None
- Level: Error
- Keywords:
- User: SYSTEM
- Computer: DESKTOP-D07KK79
- Description:
- The BITS service failed to start. Error 0x80070013.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Bits-Client" Guid="{EF1CC15B-46C1-414E-BB95-E76B077BD51E}" />
- <EventID>16392</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:15:08.679510300Z" />
- <EventRecordID>168</EventRecordID>
- <Correlation />
- <Execution ProcessID="96" ThreadID="1052" />
- <Channel>System</Channel>
- <Computer>DESKTOP-D07KK79</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">2147942419</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Service Control Manager
- Date: 8/23/2016 4:15:08 PM
- Event ID: 7023
- Task Category: None
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: WIN-KUKHEJE7E8R
- Description:
- The Network Connection Broker service terminated with the following error:
- A device attached to the system is not functioning.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
- <EventID Qualifiers="49152">7023</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:15:08.364728100Z" />
- <EventRecordID>162</EventRecordID>
- <Correlation />
- <Execution ProcessID="720" ThreadID="800" />
- <Channel>System</Channel>
- <Computer>WIN-KUKHEJE7E8R</Computer>
- <Security />
- </System>
- <EventData>
- <Data Name="param1">Network Connection Broker</Data>
- <Data Name="param2">%%31</Data>
- <Binary>4E006300620053006500720076006900630065000000</Binary>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:15:08 PM
- Event ID: 10010
- Task Category: None
- Level: Error
- Keywords: Classic
- User: NETWORK SERVICE
- Computer: WIN-KUKHEJE7E8R
- Description:
- The server {A47979D2-C419-11D9-A5B4-001185AD2B89} did not register with DCOM within the required timeout.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10010</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:15:08.303722800Z" />
- <EventRecordID>161</EventRecordID>
- <Correlation />
- <Execution ProcessID="912" ThreadID="1084" />
- <Channel>System</Channel>
- <Computer>WIN-KUKHEJE7E8R</Computer>
- <Security UserID="S-1-5-20" />
- </System>
- <EventData>
- <Data Name="param1">{A47979D2-C419-11D9-A5B4-001185AD2B89}</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Service Control Manager
- Date: 8/23/2016 4:15:01 PM
- Event ID: 7043
- Task Category: None
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: WIN-KUKHEJE7E8R
- Description:
- The Delivery Optimization service did not shut down properly after receiving a preshutdown control.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
- <EventID Qualifiers="49152">7043</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:15:01.354121100Z" />
- <EventRecordID>158</EventRecordID>
- <Correlation ActivityID="{99F045C8-FD93-0002-AD46-F09993FDD101}" />
- <Execution ProcessID="720" ThreadID="800" />
- <Channel>System</Channel>
- <Computer>WIN-KUKHEJE7E8R</Computer>
- <Security />
- </System>
- <EventData>
- <Data Name="param1">Delivery Optimization</Data>
- <Binary>44006F005300760063000000</Binary>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:14:55 PM
- Event ID: 10010
- Task Category: None
- Level: Error
- Keywords: Classic
- User: LOCAL SERVICE
- Computer: WIN-KUKHEJE7E8R
- Description:
- The server {4991D34B-80A1-4291-83B6-3328366B9097} did not register with DCOM within the required timeout.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10010</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:14:55.371603200Z" />
- <EventRecordID>157</EventRecordID>
- <Correlation />
- <Execution ProcessID="912" ThreadID="2420" />
- <Channel>System</Channel>
- <Computer>WIN-KUKHEJE7E8R</Computer>
- <Security UserID="S-1-5-19" />
- </System>
- <EventData>
- <Data Name="param1">{4991D34B-80A1-4291-83B6-3328366B9097}</Data>
- </EventData>
- </Event>
- Log Name: Application
- Source: SecurityCenter
- Date: 8/23/2016 4:13:48 PM
- Event ID: 16
- Task Category: None
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: WIN-KUKHEJE7E8R
- Description:
- Error while updating Windows Defender status to SECURITY_PRODUCT_STATE_ON (error 02000000).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="SecurityCenter" />
- <EventID Qualifiers="49152">16</EventID>
- <Level>2</Level>
- <Task>0</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:13:48.198788000Z" />
- <EventRecordID>8</EventRecordID>
- <Channel>Application</Channel>
- <Computer>WIN-KUKHEJE7E8R</Computer>
- <Security />
- </System>
- <EventData>
- <Data>Windows Defender</Data>
- <Data>SECURITY_PRODUCT_STATE_ON</Data>
- <Binary>02000000</Binary>
- </EventData>
- </Event>
- Log Name: Application
- Source: SecurityCenter
- Date: 8/23/2016 4:13:48 PM
- Event ID: 16
- Task Category: None
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: WIN-KUKHEJE7E8R
- Description:
- Error while updating Windows Defender status to SECURITY_PRODUCT_STATE_ON (error 02000000).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="SecurityCenter" />
- <EventID Qualifiers="49152">16</EventID>
- <Level>2</Level>
- <Task>0</Task>
- <Keywords>0x80000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:13:48.111780500Z" />
- <EventRecordID>6</EventRecordID>
- <Channel>Application</Channel>
- <Computer>WIN-KUKHEJE7E8R</Computer>
- <Security />
- </System>
- <EventData>
- <Data>Windows Defender</Data>
- <Data>SECURITY_PRODUCT_STATE_ON</Data>
- <Binary>02000000</Binary>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:13:45 PM
- Event ID: 21
- Task Category: None
- Level: Error
- Keywords: (70368744177664),AppContainer
- User: SYSTEM
- Computer: WIN-KUKHEJE7E8R
- Description:
- CreateAppContainerProfile failed for AppContainer Microsoft.Advertising.Xaml_8wekyb3d8bbwe with error 0x8007000A.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>21</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000400000000002</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:13:45.207306600Z" />
- <EventRecordID>2</EventRecordID>
- <Correlation />
- <Execution ProcessID="412" ThreadID="928" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>WIN-KUKHEJE7E8R</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">2147942410</Data>
- <Data Name="Context">Microsoft.Advertising.Xaml_8wekyb3d8bbwe</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-AppModel-Runtime/Admin
- Source: Microsoft-Windows-AppModel-Runtime
- Date: 8/23/2016 4:13:45 PM
- Event ID: 37
- Task Category: None
- Level: Error
- Keywords: AppContainer
- User: SYSTEM
- Computer: WIN-KUKHEJE7E8R
- Description:
- App Container profile failed with error 0x800700B7 because it was unable to register the AppContainer SID.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
- <EventID>37</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x2000000000000002</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:13:45.207302100Z" />
- <EventRecordID>1</EventRecordID>
- <Correlation />
- <Execution ProcessID="412" ThreadID="928" />
- <Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
- <Computer>WIN-KUKHEJE7E8R</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="ErrorCode">2147942583</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Service Control Manager
- Date: 8/23/2016 4:13:38 PM
- Event ID: 7023
- Task Category: None
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: WIN-KUKHEJE7E8R
- Description:
- The Network List Service service terminated with the following error:
- The device is not ready.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
- <EventID Qualifiers="49152">7023</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:13:38.302931300Z" />
- <EventRecordID>148</EventRecordID>
- <Correlation />
- <Execution ProcessID="720" ThreadID="800" />
- <Channel>System</Channel>
- <Computer>WIN-KUKHEJE7E8R</Computer>
- <Security />
- </System>
- <EventData>
- <Data Name="param1">Network List Service</Data>
- <Data Name="param2">%%21</Data>
- <Binary>6E0065007400700072006F0066006D000000</Binary>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-DistributedCOM
- Date: 8/23/2016 4:13:38 PM
- Event ID: 10010
- Task Category: None
- Level: Error
- Keywords: Classic
- User: SYSTEM
- Computer: WIN-KUKHEJE7E8R
- Description:
- The server {A47979D2-C419-11D9-A5B4-001185AD2B89} did not register with DCOM within the required timeout.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
- <EventID Qualifiers="0">10010</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:13:38.300930800Z" />
- <EventRecordID>147</EventRecordID>
- <Correlation />
- <Execution ProcessID="912" ThreadID="948" />
- <Channel>System</Channel>
- <Computer>WIN-KUKHEJE7E8R</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="param1">{A47979D2-C419-11D9-A5B4-001185AD2B89}</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Service Control Manager
- Date: 8/23/2016 4:11:43 PM
- Event ID: 7023
- Task Category: None
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: WIN-KUKHEJE7E8R
- Description:
- The IP Helper service terminated with the following error:
- The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
- <EventID Qualifiers="49152">7023</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:11:43.227111400Z" />
- <EventRecordID>51</EventRecordID>
- <Correlation />
- <Execution ProcessID="720" ThreadID="804" />
- <Channel>System</Channel>
- <Computer>WIN-KUKHEJE7E8R</Computer>
- <Security />
- </System>
- <EventData>
- <Data Name="param1">IP Helper</Data>
- <Data Name="param2">%%1058</Data>
- <Binary>6900700068006C0070007300760063000000</Binary>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-SMBWitnessClient/Admin
- Source: Microsoft-Windows-SMBWitnessClient
- Date: 8/23/2016 4:11:38 PM
- Event ID: 1
- Task Category: None
- Level: Error
- Keywords:
- User: NETWORK SERVICE
- Computer: WIN-KUKHEJE7E8R
- Description:
- Witness Client initialization failed with error (The system cannot find the file specified.)
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-SMBWitnessClient" Guid="{32254F6C-AA33-46F0-A5E3-1CBCC74BF683}" />
- <EventID>1</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:11:38.958473500Z" />
- <EventRecordID>1</EventRecordID>
- <Correlation />
- <Execution ProcessID="1632" ThreadID="1884" />
- <Channel>Microsoft-Windows-SMBWitnessClient/Admin</Channel>
- <Computer>WIN-KUKHEJE7E8R</Computer>
- <Security UserID="S-1-5-20" />
- </System>
- <EventData>
- <Data Name="ErrorCode">2</Data>
- </EventData>
- </Event>
- Log Name: System
- Source: Service Control Manager
- Date: 8/23/2016 4:11:38 PM
- Event ID: 7023
- Task Category: None
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: WIN-KUKHEJE7E8R
- Description:
- The netprofm service terminated with the following error:
- The device is not ready.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
- <EventID Qualifiers="49152">7023</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:11:38.242354900Z" />
- <EventRecordID>48</EventRecordID>
- <Correlation />
- <Execution ProcessID="720" ThreadID="1348" />
- <Channel>System</Channel>
- <Computer>WIN-KUKHEJE7E8R</Computer>
- <Security />
- </System>
- <EventData>
- <Data Name="param1">netprofm</Data>
- <Data Name="param2">%%21</Data>
- <Binary>6E0065007400700072006F0066006D000000</Binary>
- </EventData>
- </Event>
- Log Name: System
- Source: Service Control Manager
- Date: 8/23/2016 4:11:37 PM
- Event ID: 7023
- Task Category: None
- Level: Error
- Keywords: Classic
- User: N/A
- Computer: WIN-KUKHEJE7E8R
- Description:
- The Spooler service terminated with the following error:
- Ran out of memory
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
- <EventID Qualifiers="49152">7023</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8080000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:11:37.820447600Z" />
- <EventRecordID>47</EventRecordID>
- <Correlation />
- <Execution ProcessID="720" ThreadID="1348" />
- <Channel>System</Channel>
- <Computer>WIN-KUKHEJE7E8R</Computer>
- <Security />
- </System>
- <EventData>
- <Data Name="param1">Spooler</Data>
- <Data Name="param2">%%2147942414</Data>
- <Binary>530070006F006F006C00650072000000</Binary>
- </EventData>
- </Event>
- Log Name: System
- Source: Microsoft-Windows-TaskScheduler
- Date: 8/23/2016 4:11:37 PM
- Event ID: 404
- Task Category: Service RPC error
- Level: Critical
- Keywords:
- User: SYSTEM
- Computer: WIN-KUKHEJE7E8R
- Description:
- Task Scheduler service has encountered RPC initialization error in "RpcServerUseProtseq:ncacn_ip_tcp". Additional Data: Error Value: 14.
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-TaskScheduler" Guid="{DE7B24EA-73C8-4A09-985D-5BDADCFA9017}" />
- <EventID>404</EventID>
- <Version>0</Version>
- <Level>1</Level>
- <Task>404</Task>
- <Opcode>0</Opcode>
- <Keywords>0x4000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:11:37.767727500Z" />
- <EventRecordID>46</EventRecordID>
- <Correlation />
- <Execution ProcessID="96" ThreadID="1592" />
- <Channel>System</Channel>
- <Computer>WIN-KUKHEJE7E8R</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData Name="RpcInitializationError">
- <Data Name="ErrorDescription">RpcServerUseProtseq:ncacn_ip_tcp</Data>
- <Data Name="ResultCode">14</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-Kernel-EventTracing/Admin
- Source: Microsoft-Windows-Kernel-EventTracing
- Date: 8/23/2016 4:11:34 PM
- Event ID: 2
- Task Category: Session
- Level: Error
- Keywords: Session
- User: SYSTEM
- Computer: WIN-KUKHEJE7E8R
- Description:
- Session "SceSetup" failed to start with the following error: 0xC0000035
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
- <EventID>2</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>2</Task>
- <Opcode>12</Opcode>
- <Keywords>0x8000000000000010</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:11:34.060278600Z" />
- <EventRecordID>3</EventRecordID>
- <Correlation />
- <Execution ProcessID="1216" ThreadID="1220" />
- <Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
- <Computer>WIN-KUKHEJE7E8R</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="SessionName">SceSetup</Data>
- <Data Name="FileName">
- </Data>
- <Data Name="ErrorCode">3221225525</Data>
- <Data Name="LoggingMode">268435461</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-Kernel-EventTracing/Admin
- Source: Microsoft-Windows-Kernel-EventTracing
- Date: 8/23/2016 4:11:26 PM
- Event ID: 2
- Task Category: Session
- Level: Error
- Keywords: Session
- User: SYSTEM
- Computer: WIN-KUKHEJE7E8R
- Description:
- Session "SceSetup" failed to start with the following error: 0xC0000035
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
- <EventID>2</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>2</Task>
- <Opcode>12</Opcode>
- <Keywords>0x8000000000000010</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:11:26.914626100Z" />
- <EventRecordID>2</EventRecordID>
- <Correlation />
- <Execution ProcessID="1132" ThreadID="1136" />
- <Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
- <Computer>WIN-KUKHEJE7E8R</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="SessionName">SceSetup</Data>
- <Data Name="FileName">
- </Data>
- <Data Name="ErrorCode">3221225525</Data>
- <Data Name="LoggingMode">268435461</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin
- Source: Microsoft-Windows-DeviceManagement-Pushrouter
- Date: 8/23/2016 4:11:23 PM
- Event ID: 506
- Task Category: None
- Level: Error
- Keywords:
- User: SYSTEM
- Computer: WIN-KUKHEJE7E8R
- Description:
- DmWapPushService: Failed to register WNF with EventAggregator for WAP messages received by SMS Router. Result: (0xC0020036).
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-DeviceManagement-Pushrouter" Guid="{F1201B5A-E170-42B6-8D20-B57AC57E6416}" />
- <EventID>506</EventID>
- <Version>0</Version>
- <Level>2</Level>
- <Task>0</Task>
- <Opcode>0</Opcode>
- <Keywords>0x8000000000000000</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:11:23.031162900Z" />
- <EventRecordID>6</EventRecordID>
- <Correlation />
- <Execution ProcessID="96" ThreadID="8" />
- <Channel>Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin</Channel>
- <Computer>WIN-KUKHEJE7E8R</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="HexInt1">0xc0020036</Data>
- </EventData>
- </Event>
- Log Name: Microsoft-Windows-Kernel-EventTracing/Admin
- Source: Microsoft-Windows-Kernel-EventTracing
- Date: 8/23/2016 4:11:13 PM
- Event ID: 3
- Task Category: Session
- Level: Error
- Keywords: Session
- User: SYSTEM
- Computer: WIN-KUKHEJE7E8R
- Description:
- Session "AutoLogger-Diagtrack-Listener" stopped due to the following error: 0xC000003A
- Event Xml:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
- <Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
- <EventID>3</EventID>
- <Version>1</Version>
- <Level>2</Level>
- <Task>2</Task>
- <Opcode>14</Opcode>
- <Keywords>0x8000000000000010</Keywords>
- <TimeCreated SystemTime="2016-08-23T23:11:13.876743200Z" />
- <EventRecordID>1</EventRecordID>
- <Correlation />
- <Execution ProcessID="4" ThreadID="144" />
- <Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
- <Computer>WIN-KUKHEJE7E8R</Computer>
- <Security UserID="S-1-5-18" />
- </System>
- <EventData>
- <Data Name="SessionName">AutoLogger-Diagtrack-Listener</Data>
- <Data Name="FileName">x:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl</Data>
- <Data Name="ErrorCode">3221225530</Data>
- <Data Name="LoggingMode">142606337</Data>
- <Data Name="FailureReason">0</Data>
- </EventData>
- </Event>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement