| ActiveSyncProvider.dll | 1011 | ActiveSyncProvider: Gal search fails to fetch contact photo, status:%1. |
| AppReadiness.dll | 1011 | DisableInAuditMode registry value set to block API calls while in audit mode (audit mode: %1). |
| AppXDeploymentServer.dll | 1011 | Starting to setup the firewall for the %1 package with %2 binaries. |
| AuthHost.exe | 8.11011 | AuthHost about to navigate (new window) to URL: <%1!S!> from URL: <%2!S!>. |
| BrowserCore.exe | 11 | AadCloudAPPlugin MEX request status: %1 |
| CapabilityAccessManager.dll | 11 | Database could not be migrated. Old Version: %1. New Version: %2. Result code: %4 |
| FunDisc.dll | 78.11011 | End IFunctionInstanceCollectionQuery2::Stop(). Category: %1 |
| MbaeParserTask.exe | 10 | WWAN profiles applied successfully for service provider %1. |
| Microsoft.Windows.ApplicationServer.Applications.dll | 8.11011 | A BookmarkWorkItem has been scheduled for Activity '%1', DisplayName: '%2', InstanceId: '%3'. BookmarkName: %4, BookmarkScope: %5. |
| NetCellcoreCellManagerProviderResources.dll | 10 | [CellManager:CellRPCHandler] Getting cellular data enabled state ... |
| TSWorkspace.dll | 8.11011 | Multiple resources are associated with the same file extensions. Resources: %1. Associated file extensions: %2. Only one of these resources will be associated as the default program. To resolve this issue, change the file association settings for one or more of these resources so that they do not attempt to associate as the default program for the same extension. |
| WiFiNetworkManager.dll | 1011 | UiRequestMgr - Failed to convert WEP passphrase, %1, reason %1. |
| Windows.Internal.SecurityMitigationsBroker.dll | 1011 | Failed to query the IDXGIAdapter2 interface from the enumerated adapter. AdapterId=%1, ProcessId=%2, ErrorCode=%3 |
| aadWamExtension.dll | 1011 | AadCloudAPPlugin MEX request status: %1 |
| aadcloudap.dll | 1011 | AadCloudAPPlugin MEX request status: %1 |
| apds.dll | 78.11011 | Online search failed |
| bfe.dll | 7 | IPsec DoS Protection Disabled |
| capauthz.dll | 1011 | The package type %1 is not supported for package %2. |
| dhcpcore.dll | 11 | MEDIA DISCONNECT: Someone still using context. So not destroying the context |
| dhcpcore6.dll | 11 | Error in creating renewal thread. ErrorCode is %1. |
| dhcpcsvc6.dll | 11 | Error in creating renewal thread. ErrorCode is %1. |
| eapsvc.dll | 1011 | Method not registered or method's registry data could not be accessed. Unable to open registry key %1, error code %2 |
| fwpkclnt.sys | 8.1 | IPsec DoS Protection Disabled |
| mf.dll | 1011 | HandleMediaSample_Process (Stop) - Queue (%1) hr (%2) |
| microsoft-windows-kernel-pnp-events.dll | 11 | A resource rebalance operation has failed.
Device Instance ID: %1
Service Name: %2
Device Count: %3
Rebalance Phase: %4
Subtree Root Instance ID: %5
Subtree Includes Root: %6
Rebalance Due to Dynamic Partitioning: %7
Rebalance Reason: %8
Conflicting Resource Type: %9
Rebalance Failure: %10
Veto Reason: %11
Vetoing Device Node Instance ID: %12
Duration in Milliseconds: %13
Device Reset: %14 |
| mssha.dll | 78.1 | Automatic remediation for antispyware signatures succeeded. Windows Defender signatures were updated successfully. |
| mstscax.dll | 78.11011 | RDP ClientActiveX's gateway transport has recorded the following error - %2. Check Details. |
| srv2.sys | 1011 | LmCompatibilityLevel value is different from the default.
Configured LM Compatibility Level: %1
Default LM Compatibility Level: %2
Guidance:
LAN Manager (LM) authentication is the protocol used to authenticate Windows clients for network operations. This includes joining a domain, accessing network resources, and authenticating users or computers. This determines which challenge/response authentication protocol is negotiated between the client and the server computers. Specifically, the LM authentication level determines which authentication protocols the client will try to negotiate or the server will accept. The value set for LmCompatibilityLevel determines which challenge/response authentication protocol is used for network logons. This value affects the level of authentication protocol that clients use, the level of session security negotiated, and the level of authentication accepted by servers.
Value (Setting) - Description
0 (Send LM & NTLM responses) - Clients use LM and NTLM authentication and never use NTLMv2 session security. Domain controllers accept LM, NTLM, and NTLMv2 authentication.
1 (Send LM & NTLM - use NTLMv2 session security if negotiated) - Clients use LM and NTLM authentication, and use NTLMv2 session security if the server supports it. Domain controllers accept LM, NTLM, and NTLMv2 authentication.
2 (Send NTLM response only) - Clients use NTLM authentication only and use NTLMv2 session security if the server supports it. Domain controllers accept LM, NTLM, and NTLMv2 authentication.
3 (Send NTLM v2 response only) - Clients use NTLMv2 authentication only and use NTLMv2 session security if the server supports it. Domain controllers accept LM, NTLM, and NTLMv2 authentication.
4 (Send NTLMv2 response only/refuse LM) - Clients use NTLMv2 authentication only and use NTLMv2 session security if the server supports it. Domain controllers refuse LM and accept only NTLM and NTLMv2 authentication.
5 (Send NTLM v2 response only/refuse LM & NTLM) - Clients use NTLMv2 authentication only and use NTLMv2 session security if the server supports it. Domain controllers refuse LM and NTLM and accept only NTLMv2 authentication.
Incompatibly configured LmCompatibility levels between a client and server (such as 0 on a client and 5 on a server) prevent access to the server. Non-Microsoft clients and servers also provide these configuration settings. |
| tcpip.sys | 71011 | TCP: connection %8 (local=%2 remote=%4) connect failed: route lookup status = %5. |
| tunnel.sys | 1011 | Teredo Wfp created IPv4 flow with following parameters.
LocalV4:%1 RemoteV4:%2
LocalPort:%3 RemotePort:%4. |
| twinui.dll | 8.1 | The notification payload contains more than one visual element |
| wbiosrvc.dll | 1011 | The Windows Biometric Service cannot complete a request because Terminal Server client sessions are not allowed to access the System sensor pool. |
| webauthn.dll | 1011 | WebAuthN Ngc MakeCredential completed.
TransactionId: %1 |
| winnat.sys | 1011 | NAT instance %1 external interface index is %6 for prefix %4/%3 |
| wlidres.dll | 8.11011 | SignOutUser_RegistryOpenOrReadFailure.
RegistryLocation: %1.
Status: %2 |
| wpncore.dll | 1011 | The Connection Manager has failed to connect: %1. |