| AppXDeploymentServer.dll | 1011 | Starting to create the AppContainer profile for the %1 package. |
| BrowserCore.exe | 11 | Http request status: %1. Method: %2 Endpoint Uri: %3 Correlation ID: %4 |
| CapabilityAccessManager.dll | 11 | Consent for Package %2 and User %1 has been deemed invalid for capability %3. Removing consent. Justification: %4 |
| FunDisc.dll | 78.11011 | End IFunctionInstanceQuery::Execute(). Category: %1 |
| Microsoft.Windows.ApplicationServer.Applications.dll | 8.11011 | The BookmarkScope that had TemporaryId: '%1' has been initialized with Id: '%2'. |
| NetCellcoreCellManagerProviderResources.dll | 10 | [CellManager:CellRPCHandler] Setting data affinity to slot [%1] |
| PimIndexMaintenance.dll | 1011 | PimIndexMaintenance::Service is already running. |
| SmsRouterSvc.dll | 1011 | Error - Could not decode SMS message.
Error is %1: %2 |
| TSWorkspace.dll | 8.11011 | An error occurred while Windows was installing file-type associations for the default connection. You will not be able to open files with the %1 RemoteApp program because the program couldn't be associated with any file types. Contact your workplace administrator for assistance.
Connection name: %2
Connection URL: %3
Error code: %4 |
| WiFiNetworkManager.dll | 1011 | UiRequestMgr - Received unsupported OneX Request Type, %1. |
| Windows.Internal.SecurityMitigationsBroker.dll | 1011 | Remote downgrade is disabled through settings. AdapterId=%1, ProcessId=%2 |
| WsmRes.dll | 8.11011 | Sending response error packet for ActionURI: %1 |
| aadWamExtension.dll | 1011 | Http request status: %1. Method: %2 Endpoint Uri: %3 Correlation ID: %4 |
| aadcloudap.dll | 1011 | Http request status: %1. Method: %2 Endpoint Uri: %3 Correlation ID: %4 |
| apds.dll | 78.11011 | Online server TOC response is not valid |
| bfe.dll | 7 | IPsec: Receive ISAKMP Packet |
| capauthz.dll | 1011 | Trying to provision %1 as side loaded app when none of IsDeveloperModeEnabled or IsSideloadingEnabled is true. |
| dhcpcore.dll | 11 | Waiting for Offer on %1. Wait time is %2 milliseconds |
| dhcpcore6.dll | 11 | MEDIA DISCONNECT: Someone still using context. So not destroying the context |
| dhcpcsvc6.dll | 11 | MEDIA DISCONNECT: Someone still using context. So not destroying the context |
| fwpkclnt.sys | 8.1 | IPsec: Receive ISAKMP Packet |
| mf.dll | 1011 | MediaProcSourceManagerOnStreamSample (Stop) - Queue (%1) hr(%2) |
| mssha.dll | 78.1 | The Windows Security Health Agent specified a new security health state for the computer.
The correlation id for this transaction is %1 |
| spaceport.sys | 11 | All clean entries in the DRT for space %1 have been removed. Current entries: %2. Flush status: %3. Write statuses: %4 %5. |
| srv2.sys | 1011 | One or more named pipes or shares have been marked for access by anonymous users. This increases the security risk of the computer by allowing unauthenticated users to connect to this server.
Registry Key: HKLM\System\CurrentControlSet\Services\LanmanServer\Parameters
Registry Values: NullSessionPipes, NullSessionShares
Default Value: Empty (or not present)
Current Value: Non-empty
Guidance:
You should expect this event when modifying the default values of NullSessionShares and NullSessionPipes. On a typical file server, these settings do not exist or do not contain values, which is the most secure configuration. By default, domain controllers populate the NullSessionShares entry with netlogon, samr, and lsarpc to allow legacy access methods. |
| tcpip.sys | 71011 | TCP: %6 rate-limiting paths %3 backlogged connections. |
| tunnel.sys | 1011 | Tunnel type %1 offloaded %2 NBLs, Could not offload %3 NBLs |
| twinui.dll | 8.1 | Successfully resolved the notification template attribute for this version of Windows |
| usbport.sys | 1011 | EHCI Miniport Start Complete |
| wcmsvc.dll | 1011 | Released NDIS NIC Active Reference for interface: %1 |
| webauthn.dll | 1011 | WebAuthN Ngc GetAssertion completed.
TransactionId: %1
Error: %2. %3 |
| winnat.sys | 1011 | Removed external address %3:%4-%5 from NAT instance %1 |
| wpncore.dll | 1011 | A Power event was fired: %1 [PowerEventType] %2 [Enabled]. |