Device Registration Service

220 events across 2 channels

Event	Title	Channel	Sample
100	The Device Registration Service started successfully.	Admin	Y
100	Event ID 100	Unknown	Y
101	There was an error while starting the Device Registration Service.	Admin	N
101	Event ID 101	Unknown	N
102	The Device Registration Service is being stopped.	Admin	N
102	Event ID 102	Unknown	N
103	The Device Registration Service was stopped successfully.	Admin	Y
103	Event ID 103	Unknown	Y
104	The service account, {Data1\Data2} requires Data3 access on conatiner Data4.	Admin	N
104	Event ID 104	Unknown	N
105	The service was downgraded from Data1 to Data2 due to failure in configuring an …	Admin	N
105	Event ID 105	Unknown	N
110	Failed to get the metadata information from the local AD FS service at URL …	Admin	N
110	Event ID 110	Unknown	N
111	Unable to find any SecurityTokenService sections in the AD FS metadata at URL …	Admin	N
111	Event ID 111	Unknown	N
112	No services were found in the AD FS Metadata document at URL Data1.	Admin	N
112	Event ID 112	Unknown	N
113	Unable to find the SecurityTokenService section in the AD FS metadata at URL …	Admin	N
113	Event ID 113	Unknown	N
114	Failed to find AD FS endpoint Data1.	Admin	N
114	Event ID 114	Unknown	N
115	Invalid MEX Document: The Secure Token Service MEX document Data1 does not …	Admin	N
115	Event ID 115	Unknown	N
116	Invalid MEX Document: The Secure Token Service MEX document Data1 did not …	Admin	N
116	Event ID 116	Unknown	N
117	The issuer name associated with the AD FS service was not found.	Admin	N
117	Event ID 117	Unknown	N
118	The certificate used by the AD FS service for singing could not be found.	Admin	N
118	Event ID 118	Unknown	N
119	The Service Manager could not be initialized.	Admin	N
119	Event ID 119	Unknown	N
120	The root issuing certificate for the Device Registration Service could not be …	Admin	Y
120	Event ID 120	Unknown	Y
121	The URL suffix Data1 is not a valid suffix.	Admin	N
121	Event ID 121	Unknown	N
122	Failed to get metadata sections from URL Data1.	Admin	N
122	Event ID 122	Unknown	N
123	Too many entity descriptors found in metadata at URL Data1.	Admin	N
123	Event ID 123	Unknown	N
124	Could not determine the SSL port over which the AD FS service is listening on.	Admin	N
124	Event ID 124	Unknown	N
125	The following exception occured while enrolling a device.	Admin	N
125	Event ID 125	Unknown	N
126	The following exception occured while enrolling a device.	Admin	N
126	Event ID 126	Unknown	N
127	The Device Registration Service could not authenticate the caller.	Admin	N
127	Event ID 127	Unknown	N
128	The Device Registration Service will be disabled because either it is not …	Admin	N
128	Event ID 128	Unknown	N
129	Querying device with ID Data1 failed.	Admin	N
129	Event ID 129	Unknown	N
130	Failed to locate a domain controller for domain Data1 to provision the device …	Admin	N
130	Event ID 130	Unknown	N
131	Failed to lookup the invocation ID for domain controller Data1 to provision the …	Admin	N
131	Event ID 131	Unknown	N
132	Creating device Data1 in the store failed.	Admin	N
132	Event ID 132	Unknown	N
133	Updating device Data1 in the store failed.	Admin	N
133	Event ID 133	Unknown	N
134	Unable to find user Data1.	Admin	N
134	Event ID 134	Unknown	N
135	Failed to update last use timestamp on object Data1.	Admin	N
135	Event ID 135	Unknown	N
136	Failed to create the Device Registration Service object: Data1.	Admin	N
136	Event ID 136	Unknown	N
137	Failed to find the Device Registration Service object at Data1.	Admin	Y
137	Event ID 137	Unknown	Y
138	Failed to set the public certificate on object Data1.	Admin	N
138	Event ID 138	Unknown	N
139	Failed to set the issuance certificate on object Data1.	Admin	N
139	Event ID 139	Unknown	N
140	Failed to create instance of the Device Registration Service object Data1.	Admin	N
140	Event ID 140	Unknown	N
141	Failed to locate the private key store for the Device Registration Service at …	Admin	N
141	Event ID 141	Unknown	N
142	A corrupt or invalid certificate was found in the Device Registration Service …	Admin	N
142	Event ID 142	Unknown	N
143	Writing a Device Registration Service certificate to the service account's MY …	Admin	N
143	Event ID 143	Unknown	N
144	No certificate could be found on the Device Registration Service object that can …	Admin	Y
144	Event ID 144	Unknown	Y
145	An error occured while decryping a protected certificate.	Admin	N
145	Event ID 145	Unknown	N
146	Found a certificate retrieved from the Device Registration Service object that …	Admin	N
146	Event ID 146	Unknown	N
147	Failed to get SAML token for user Data1.	Admin	N
147	Event ID 147	Unknown	N
148	Failed to get OAuth2 token for user Data1.	Admin	N
148	Event ID 148	Unknown	N
149	Successfully enrolled device for user Data1.	Admin	N
149	Event ID 149	Unknown	N
150	The service object, Data1, was updated with the following settings.	Admin	N
150	Event ID 150	Unknown	N
151	Successfully enrolled device ID Data1 using certificate thumbprint Data2 for …	Admin	N
151	Event ID 151	Unknown	N
152	An error occurred while processing the discovery request for Enterprise …	Admin	N
152	Event ID 152	Unknown	N
153	An error occurred while processing the discovery request for Enterprise …	Admin	N
153	Event ID 153	Unknown	N
154	An error occurred while processing the discovery request.	Admin	N
154	Event ID 154	Unknown	N
155	The Device Registration Service could not find any Single Sign-On endpoints from …	Admin	N
155	Event ID 155	Unknown	N
156	The Device Registration Service could not load the SSL certificate used by the …	Admin	N
156	Event ID 156	Unknown	N
157	An error occurred.	Admin	N
157	Event ID 157	Unknown	N
158	An error occurred while starting the endpoint for Data1.	Admin	N
158	Event ID 158	Unknown	N
159	Failed to find a GC in forest Data1 when looking up Device Registration Service …	Admin	N
159	Event ID 159	Unknown	N
160	Successfully polled the Device Registration Service configuration from server …	Admin	Y
160	Event ID 160	Unknown	Y
161	Failed to poll for the Device Registration Service object at Data1.	Admin	N
161	Event ID 161	Unknown	N
162	The action identified by the call stack below was successful after Data1 …	Admin	N
162	Event ID 162	Unknown	N
163	The action identified by the call stack below failed after Data1 retry/retries.	Admin	N
163	Event ID 163	Unknown	N
167	Successfully provisioned key with identifier Data1.	Admin	N
167	Event ID 167	Unknown	N
168	Successfully provisioned key with identifier Data1.	Admin	N
168	Event ID 168	Unknown	N
169	Successfully updated key with identifier Data1.	Admin	N
169	Event ID 169	Unknown	N
170	Successfully updated key with identifier Data1.	Admin	N
170	Event ID 170	Unknown	N
171	Successfully deleted key with identifier Data1.	Admin	N
171	Event ID 171	Unknown	N
172	Successfully deleted key with identifier Data1.	Admin	N
172	Event ID 172	Unknown	N
173	Successfully joined device for user Data1.	Admin	N
173	Event ID 173	Unknown	N
174	Successfully joined device ID Data1 using certificate thumbprint Data2 for user …	Admin	N
174	Event ID 174	Unknown	N
175	Successfully renewed device certificate for user Data1.	Admin	N
175	Event ID 175	Unknown	N
176	Successfully renewed the device ID Data1 using certificate thumbprint Data2.	Admin	N
176	Event ID 176	Unknown	N
177	Successfully deleted device Data1 using Data2 for user Data3.	Admin	N
177	Event ID 177	Unknown	N
178	Successfully patched the device STK with device identifier Data1.	Admin	N
178	Event ID 178	Unknown	N
179	Successfully patched device ID Data1 using certificate thumbprint Data2 for STK.	Admin	N
179	Event ID 179	Unknown	N
180	Successfully updated device enrollment for user Data1.	Admin	N
180	Event ID 180	Unknown	N
181	Successfully processed request for Scep challenge Duration(ms).	Admin	N
181	Event ID 181	Unknown	N
182	The device object with identifier Data1 was purged because it was beyond the …	Admin	N
182	Event ID 182	Unknown	N
183	Successfully deleted the device with identifier: Data1.	Admin	N
183	Event ID 183	Unknown	N
184	Successfully deleted device: Data1.	Admin	N
184	Event ID 184	Unknown	N
1000	Failed to logon as user Data1.	Admin	N
1000	Event ID 1000	Unknown	N
1001	Failed to Data1 for the Device Registration Service.	Admin	N
1001	Event ID 1001	Unknown	N
3000	An error occurred during an attempt to register the event source for the …	Admin	N
3000	Event ID 3000	Unknown	N
3001	The Security log event source for the Device Registration Service could not be …	Admin	N
3001	Event ID 3001	Unknown	N
3002	An attempt to write to the Security event log failed.	Admin	N
3002	Event ID 3002	Unknown	N
3009	Failed to enroll device for user Data1.	Admin	N
3009	Event ID 3009	Unknown	N
3011	Failed to find one or more objects in domain: Data1.	Admin	N
3011	Event ID 3011	Unknown	N
3012	Failed to process request for Scep challenge Duration(ms).	Admin	N
3012	Event ID 3012	Unknown	N
3013	Failed to process request for device attribute Additional Data Exception …	Admin	N
3013	Event ID 3013	Unknown	N
3014	Failed to process request for device update Additional Data Exception details.	Admin	N
3014	Event ID 3014	Unknown	N
3015	Failed to process request for device delete Additional Data Exception details.	Admin	N
3015	Event ID 3015	Unknown	N
3016	Failed to process request to activate EAS, please try again later or contact …	Admin	N
3016	Event ID 3016	Unknown	N
3017	An attempt to write to the Security event log failed.	Admin	N
3017	Event ID 3017	Unknown	N
3018	Failed to join the device for user Data1.	Admin	N
3018	Event ID 3018	Unknown	N
3019	Failed to join the device for user Data1.	Admin	N
3019	Event ID 3019	Unknown	N
3020	Failed to configure service identity for Data1.	Admin	N
3020	Event ID 3020	Unknown	N
3021	Successfully configured service identity for Data1.	Admin	N
3021	Event ID 3021	Unknown	N
3022	Successfully configured service identity for Data1 to use MFA.	Admin	N
3022	Event ID 3022	Unknown	N
3023	Successfully deleted device.	Admin	N
3023	Event ID 3023	Unknown	N
3024	Failed to delete device.	Admin	N
3024	Event ID 3024	Unknown	N
3025	Failed to provision key.	Admin	N
3025	Event ID 3025	Unknown	N
3026	Failed to update key with identifier Data1.	Admin	N
3026	Event ID 3026	Unknown	N
3027	Failed to delete key with identifier Data1.	Admin	N
3027	Event ID 3027	Unknown	N
3028	Failed to patch the STK for the device with identifier Data1.	Admin	N
3028	Event ID 3028	Unknown	N
3029	Failed to add key in domain: Data1.	Admin	N
3029	Event ID 3029	Unknown	N
3030	Failed to delete the key in domain: Data1.	Admin	N
3030	Event ID 3030	Unknown	N
3031	Failed to update the key in domain: Data1.	Admin	N
3031	Event ID 3031	Unknown	N
3033	Failed to update device enrollment for user Data1.	Admin	N
3033	Event ID 3033	Unknown	N
3034	Failed to delete the device with identifier: Data1.	Admin	N
3034	Event ID 3034	Unknown	N
3035	Successfully downloaded Windows Hello key receipt public issuer certificates.	Admin	N
3035	Event ID 3035	Unknown	N
3036	Failed to download Windows Hello key receipt public issuer certificates.	Admin	N
3036	Event ID 3036	Unknown	N
3037	An error occurred while sending the web request.	Admin	N
3037	Event ID 3037	Unknown	N

Event ID 100: The Device Registration Service started successfully.

Provider: Device Registration Service
Channel: Admin
Level: Informational

Description

The Device Registration Service started successfully.

Message #

The Device Registration Service started successfully.

Example Event #

{
  "system": {
    "provider": "Device Registration Service",
    "guid": "0745ECC7-87DD-4E6E-BE80-58821FD6BC18",
    "event_source_name": "",
    "event_id": 100,
    "version": 0,
    "level": 4,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036854775810,
    "time_created": "2026-03-13T23:09:24.375852+00:00",
    "event_record_id": 14,
    "correlation": {
      "ActivityID": "54200319-8C6A-4231-A39C-49CFE548F17D"
    },
    "execution": {
      "process_id": 13608,
      "thread_id": 4688
    },
    "channel": "DRS/Admin",
    "computer": "LAB-DC01.ludus.domain",
    "security": {
      "user_id": "S-1-5-21-1006758700-2167138679-1475694448-1283"
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 100

Provider: Device Registration Service
Channel: Unknown
Level: 4

Description

The Device Registration Service started successfully.

Example Event #

{
  "system": {
    "provider": "Device Registration Service",
    "event_id": 100,
    "level": 4,
    "task": 0,
    "opcode": 0,
    "time_created": "2026-03-13T23:09:24.3758523Z",
    "computer": "JD-DC01-2022.ludus.domain",
    "channel": "DRS"
  },
  "event_data": {}
}

Event ID 101: There was an error while starting the Device Registration Service.

Provider: Device Registration Service
Channel: Admin

Description

There was an error while starting the Device Registration Service.

Message #

There was an error while starting the Device Registration Service. 

Additional Data 
Exception details: 
%1

Fields #

Name	Description
`Data1` UnicodeString

Event ID 101

Provider: Device Registration Service
Channel: Unknown

Description

There was an error while starting the Device Registration Service.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 102: The Device Registration Service is being stopped.

Provider: Device Registration Service
Channel: Admin

Description

The Device Registration Service is being stopped.

Message #

The Device Registration Service is being stopped. 

Additional Data 
Reason: 
%1

Fields #

Name	Description
`Data1` UnicodeString

Event ID 102

Provider: Device Registration Service
Channel: Unknown

Description

The Device Registration Service is being stopped.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 103: The Device Registration Service was stopped successfully.

Provider: Device Registration Service
Channel: Admin
Level: Informational

Description

The Device Registration Service was stopped successfully.

Message #

The Device Registration Service was stopped successfully.

Example Event #

{
  "system": {
    "provider": "Device Registration Service",
    "guid": "0745ECC7-87DD-4E6E-BE80-58821FD6BC18",
    "event_source_name": "",
    "event_id": 103,
    "version": 0,
    "level": 4,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036854775810,
    "time_created": "2026-03-13T23:04:06.380091+00:00",
    "event_record_id": 3,
    "correlation": {},
    "execution": {
      "process_id": 11528,
      "thread_id": 12484
    },
    "channel": "DRS/Admin",
    "computer": "LAB-DC01.ludus.domain",
    "security": {
      "user_id": "S-1-5-21-1006758700-2167138679-1475694448-1283"
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 103

Provider: Device Registration Service
Channel: Unknown
Level: 4

Description

The Device Registration Service was stopped successfully.

Example Event #

{
  "system": {
    "provider": "Device Registration Service",
    "event_id": 103,
    "level": 4,
    "task": 0,
    "opcode": 0,
    "time_created": "2026-04-23T15:32:28.4352968Z",
    "computer": "JD-DC01-2022.ludus.domain",
    "channel": "DRS"
  },
  "event_data": {}
}

Event ID 104: The service account, {Data1\Data2} requires Data3 access on conatiner Data4.

Provider: Device Registration Service
Channel: Admin

Description

The service account, {Data1\Data2} requires Data3 access on conatiner Data4.

Message #

The service account, {%1\%2} requires %3 access on conatiner %4. 

Additional Data 
Reason: 
%5

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString

Event ID 104

Provider: Device Registration Service
Channel: Unknown

Description

The service account, {\} requires access on conatiner .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString

Event ID 105: The service was downgraded from Data1 to Data2 due to failure in configuring an operation critical for Data1.

Provider: Device Registration Service
Channel: Admin

Description

The service was downgraded from Data1 to Data2 due to failure in configuring an operation critical for Data1.

Message #

The service was downgraded from %1 to %2 due to failure in configuring an operation critical for %1. 

Additional Data 
Reason: 
%3

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString

Event ID 105

Provider: Device Registration Service
Channel: Unknown

Description

The service was downgraded from to due to failure in configuring an operation critical for .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString

Event ID 110: Failed to get the metadata information from the local AD FS service at URL Data1.

Provider: Device Registration Service
Channel: Admin

Description

Failed to get the metadata information from the local AD FS service at URL Data1.

Message #

Failed to get the metadata information from the local AD FS service at URL %1. 

User Action 
Make sure that the AD FS service is running and that all of its endpoint are listening.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 110

Provider: Device Registration Service
Channel: Unknown

Description

Failed to get the metadata information from the local AD FS service at URL .

Fields #

Name	Description
`Data1` UnicodeString

Event ID 111: Unable to find any SecurityTokenService sections in the AD FS metadata at URL Data1.

Provider: Device Registration Service
Channel: Admin

Description

Unable to find any SecurityTokenService sections in the AD FS metadata at URL Data1.

Message #

Unable to find any SecurityTokenService sections in the AD FS metadata at URL %1. 

User Action 
Make sure that the AD FS service is running and the endpoint at URL %1 contains the SecurityTokenService element.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 111

Provider: Device Registration Service
Channel: Unknown

Description

Unable to find any SecurityTokenService sections in the AD FS metadata at URL .

Fields #

Name	Description
`Data1` UnicodeString

Event ID 112: No services were found in the AD FS Metadata document at URL Data1.

Provider: Device Registration Service
Channel: Admin

Description

No services were found in the AD FS Metadata document at URL Data1.

Message #

No services were found in the AD FS Metadata document at URL %1. 

User Action 
Make sure that the AD FS service is running and the endpoint at URL %1 contains the SecurityTokenService element.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 112

Provider: Device Registration Service
Channel: Unknown

Description

No services were found in the AD FS Metadata document at URL .

Fields #

Name	Description
`Data1` UnicodeString

Event ID 113: Unable to find the SecurityTokenService section in the AD FS metadata at URL Data1.

Provider: Device Registration Service
Channel: Admin

Description

Unable to find the SecurityTokenService section in the AD FS metadata at URL Data1.

Message #

Unable to find the SecurityTokenService section in the AD FS metadata at URL %1. 

User Action 
Make sure that the AD FS service is running and the endpoint at URL %1 contains the SecurityTokenService element.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 113

Provider: Device Registration Service
Channel: Unknown

Description

Unable to find the SecurityTokenService section in the AD FS metadata at URL .

Fields #

Name	Description
`Data1` UnicodeString

Event ID 114: Failed to find AD FS endpoint Data1.

Provider: Device Registration Service
Channel: Admin

Description

Failed to find AD FS endpoint Data1.

Message #

Failed to find AD FS endpoint %1. 

User Action 
Make sure that the AD FS service is running and that all of its endpoint are listening.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 114

Provider: Device Registration Service
Channel: Unknown

Description

Failed to find AD FS endpoint .

Fields #

Name	Description
`Data1` UnicodeString

Event ID 115: Invalid MEX Document: The Secure Token Service MEX document Data1 does not contain any metadata.

Provider: Device Registration Service
Channel: Admin

Description

Invalid MEX Document: The Secure Token Service MEX document Data1 does not contain any metadata.

Message #

Invalid MEX Document: The Secure Token Service MEX document %1 does not contain any metadata. 

User Action 
Make sure that the AD FS service is running and that AD FS is configured correctly.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 115

Provider: Device Registration Service
Channel: Unknown

Description

Invalid MEX Document: The Secure Token Service MEX document does not contain any metadata.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 116: Invalid MEX Document: The Secure Token Service MEX document Data1 did not contain the entity section.

Provider: Device Registration Service
Channel: Admin

Description

Invalid MEX Document: The Secure Token Service MEX document Data1 did not contain the entity section.

Message #

Invalid MEX Document: The Secure Token Service MEX document %1 did not contain the entity section. 

User Action 
Make sure that the AD FS service is running and that AD FS is configured correctly.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 116

Provider: Device Registration Service
Channel: Unknown

Description

Invalid MEX Document: The Secure Token Service MEX document did not contain the entity section.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 117: The issuer name associated with the AD FS service was not found.

Provider: Device Registration Service
Channel: Admin

Description

The issuer name associated with the AD FS service was not found.

Message #

The issuer name associated with the AD FS service was not found. 

User Action 
Make sure that the AD FS service is running and that AD FS is configured correctly.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 117

Provider: Device Registration Service
Channel: Unknown

Description

The issuer name associated with the AD FS service was not found.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 118: The certificate used by the AD FS service for singing could not be found.

Provider: Device Registration Service
Channel: Admin

Description

The certificate used by the AD FS service for singing could not be found.

Message #

The certificate used by the AD FS service for singing could not be found. 

User Action 
Make sure that the AD FS service is running and that AD FS is configured correctly.

Event ID 118

Provider: Device Registration Service
Channel: Unknown

Description

The certificate used by the AD FS service for singing could not be found.

Event ID 119: The Service Manager could not be initialized.

Provider: Device Registration Service
Channel: Admin

Description

The Service Manager could not be initialized. Refer to earlier event logs for additional information.

Message #

The Service Manager could not be initialized. Refer to earlier event logs for additional information.

Event ID 119

Provider: Device Registration Service
Channel: Unknown

Description

The Service Manager could not be initialized. Refer to earlier event logs for additional information.

Event ID 120: The root issuing certificate for the Device Registration Service could not be found.

Provider: Device Registration Service
Channel: Admin
Level: Error

Description

The root issuing certificate for the Device Registration Service could not be found. Refer to earlier event logs for additional information.

Message #

The root issuing certificate for the Device Registration Service could not be found. Refer to earlier event logs for additional information.

Example Event #

{
  "system": {
    "provider": "Device Registration Service",
    "guid": "0745ECC7-87DD-4E6E-BE80-58821FD6BC18",
    "event_source_name": "",
    "event_id": 120,
    "version": 0,
    "level": 2,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036854775810,
    "time_created": "2026-03-13T23:07:34.164975+00:00",
    "event_record_id": 11,
    "correlation": {},
    "execution": {
      "process_id": 9844,
      "thread_id": 9504
    },
    "channel": "DRS/Admin",
    "computer": "LAB-DC01.ludus.domain",
    "security": {
      "user_id": "S-1-5-21-1006758700-2167138679-1475694448-1283"
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 120

Provider: Device Registration Service
Channel: Unknown
Level: 2

Description

The root issuing certificate for the Device Registration Service could not be found. Refer to earlier event logs for additional information.

Example Event #

{
  "system": {
    "provider": "Device Registration Service",
    "event_id": 120,
    "level": 2,
    "task": 0,
    "opcode": 0,
    "time_created": "2026-03-13T23:07:34.1649757Z",
    "computer": "JD-DC01-2022.ludus.domain",
    "channel": "DRS"
  },
  "event_data": {}
}

Event ID 121: The URL suffix Data1 is not a valid suffix.

Provider: Device Registration Service
Channel: Admin

Description

The URL suffix Data1 is not a valid suffix.

Message #

The URL suffix %1 is not a valid suffix.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 121

Provider: Device Registration Service
Channel: Unknown

Description

The URL suffix is not a valid suffix.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 122: Failed to get metadata sections from URL Data1.

Provider: Device Registration Service
Channel: Admin

Description

Failed to get metadata sections from URL Data1.

Message #

Failed to get metadata sections from URL %1. 

User Action 
Make sure that the AD FS service is running and that AD FS is configured correctly.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 122

Provider: Device Registration Service
Channel: Unknown

Description

Failed to get metadata sections from URL .

Fields #

Name	Description
`Data1` UnicodeString

Event ID 123: Too many entity descriptors found in metadata at URL Data1.

Provider: Device Registration Service
Channel: Admin

Description

Too many entity descriptors found in metadata at URL Data1.

Message #

Too many entity descriptors found in metadata at URL %1. 

User Action 
Make sure that the AD FS service is running and that AD FS is configured correctly.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 123

Provider: Device Registration Service
Channel: Unknown

Description

Too many entity descriptors found in metadata at URL .

Fields #

Name	Description
`Data1` UnicodeString

Event ID 124: Could not determine the SSL port over which the AD FS service is listening on.

Provider: Device Registration Service
Channel: Admin

Description

Could not determine the SSL port over which the AD FS service is listening on.

Message #

Could not determine the SSL port over which the AD FS service is listening on. 

User Action 
Make sure that the AD FS service is running and that AD FS is configured correctly.

Event ID 124

Provider: Device Registration Service
Channel: Unknown

Description

Could not determine the SSL port over which the AD FS service is listening on.

Event ID 125: The following exception occured while enrolling a device.

Provider: Device Registration Service
Channel: Admin

Description

The following exception occured while enrolling a device.

Message #

The following exception occured while enrolling a device. 

Additional information 
Error: %1.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 125

Provider: Device Registration Service
Channel: Unknown

Description

The following exception occured while enrolling a device.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 126: The following exception occured while enrolling a device.

Provider: Device Registration Service
Channel: Admin

Description

The following exception occured while enrolling a device.

Message #

The following exception occured while enrolling a device. 

Additional information 
Error Type: %1 
Error: %2.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 126

Provider: Device Registration Service
Channel: Unknown

Description

The following exception occured while enrolling a device.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 127: The Device Registration Service could not authenticate the caller.

Provider: Device Registration Service
Channel: Admin

Description

The Device Registration Service could not authenticate the caller.

Message #

The Device Registration Service could not authenticate the caller. 

Additional information 
Failure Type: %1. 
Failure Reason: %2.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 127

Provider: Device Registration Service
Channel: Unknown

Description

The Device Registration Service could not authenticate the caller.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 128: The Device Registration Service will be disabled because either it is not enabled or it's enabled in other cloud-based services.

Provider: Device Registration Service
Channel: Admin

Description

The Device Registration Service will be disabled because either it is not enabled or it's enabled in other cloud-based services.

Message #

The Device Registration Service will be disabled because either it is not enabled or it's enabled in other cloud-based services. 

Additional information 
Enabled On-Premises? %1. 
Enabled in cloud-based services? %2.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 128

Provider: Device Registration Service
Channel: Unknown

Description

The Device Registration Service will be disabled because either it is not enabled or it's enabled in other cloud-based services.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 129: Querying device with ID Data1 failed.

Provider: Device Registration Service
Channel: Admin

Description

Querying device with ID Data1 failed.

Message #

Querying device with ID %1 failed. 

Error details 
Exception message: %2.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 129

Provider: Device Registration Service
Channel: Unknown

Description

Querying device with ID failed.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 130: Failed to locate a domain controller for domain Data1 to provision the device object on.

Provider: Device Registration Service
Channel: Admin

Description

Failed to locate a domain controller for domain Data1 to provision the device object on.

Message #

Failed to locate a domain controller for domain %1 to provision the device object on. 

Additional information 
Locator flags: %2.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 130

Provider: Device Registration Service
Channel: Unknown

Description

Failed to locate a domain controller for domain to provision the device object on.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 131: Failed to lookup the invocation ID for domain controller Data1 to provision the device object on.

Provider: Device Registration Service
Channel: Admin

Description

Failed to lookup the invocation ID for domain controller Data1 to provision the device object on.

Message #

Failed to lookup the invocation ID for domain controller %1 to provision the device object on.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 131

Provider: Device Registration Service
Channel: Unknown

Description

Failed to lookup the invocation ID for domain controller to provision the device object on.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 132: Creating device Data1 in the store failed.

Provider: Device Registration Service
Channel: Admin

Description

Creating device Data1 in the store failed.

Message #

Creating device %1 in the store failed. 

Error details 
Error Message: %2. 
Error Result code: %3.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString

Event ID 132

Provider: Device Registration Service
Channel: Unknown

Description

Creating device in the store failed.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString

Event ID 133: Updating device Data1 in the store failed.

Provider: Device Registration Service
Channel: Admin

Description

Updating device Data1 in the store failed.

Message #

Updating device %1 in the store failed. 

Error details 
Error Message: %2. 
Error Result code: %3.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString

Event ID 133

Provider: Device Registration Service
Channel: Unknown

Description

Updating device in the store failed.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString

Event ID 134: Unable to find user Data1.

Provider: Device Registration Service
Channel: Admin

Description

Unable to find user Data1.

Message #

Unable to find user %1.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 134

Provider: Device Registration Service
Channel: Unknown

Description

Unable to find user .

Fields #

Name	Description
`Data1` UnicodeString

Event ID 135: Failed to update last use timestamp on object Data1.

Provider: Device Registration Service
Channel: Admin

Description

Failed to update last use timestamp on object Data1.

Message #

Failed to update last use timestamp on object %1. 

Additional information 
Error Message: %2. 
Error Result code: %3.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString

Event ID 135

Provider: Device Registration Service
Channel: Unknown

Description

Failed to update last use timestamp on object .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString

Event ID 136: Failed to create the Device Registration Service object: Data1.

Provider: Device Registration Service
Channel: Admin

Description

Failed to create the Device Registration Service object: Data1.

Message #

Failed to create the Device Registration Service object: %1. 

Additional information 
Error Message: %2. 
Error Result code: %3.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString

Event ID 136

Provider: Device Registration Service
Channel: Unknown

Description

Failed to create the Device Registration Service object: .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString

Event ID 137: Failed to find the Device Registration Service object at Data1.

Provider: Device Registration Service
Channel: Admin
Level: Error

Description

Failed to find the Device Registration Service object at Data1.

Message #

Failed to find the Device Registration Service object at %1. 

Additional information 
Error Message: %2. 
Error Result code: %3.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString

Example Event #

{
  "system": {
    "provider": "Device Registration Service",
    "guid": "0745ECC7-87DD-4E6E-BE80-58821FD6BC18",
    "event_source_name": "",
    "event_id": 137,
    "version": 0,
    "level": 2,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036854775810,
    "time_created": "2026-03-13T23:03:57.595637+00:00",
    "event_record_id": 1,
    "correlation": {
      "ActivityID": "96D70028-FAC6-41CE-85EE-3C1EC5A8377A"
    },
    "execution": {
      "process_id": 11528,
      "thread_id": 1688
    },
    "channel": "DRS/Admin",
    "computer": "LAB-DC01.ludus.domain",
    "security": {
      "user_id": "S-1-5-21-1006758700-2167138679-1475694448-1283"
    }
  },
  "event_data": {
    "Data1": "DeviceRegistrationService",
    "Data2": "The object does not exist.",
    "Data3": "NoSuchObject"
  },
  "message": ""
}

Event ID 137

Provider: Device Registration Service
Channel: Unknown
Level: 2

Description

Failed to find the Device Registration Service object at .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString

Example Event #

{
  "system": {
    "provider": "Device Registration Service",
    "event_id": 137,
    "level": 2,
    "task": 0,
    "opcode": 0,
    "time_created": "2026-03-13T23:04:13.4338540Z",
    "computer": "JD-DC01-2022.ludus.domain",
    "channel": "DRS"
  },
  "event_data": {
    "Data1": "DeviceRegistrationService",
    "Data2": "The object does not exist.",
    "Data3": "NoSuchObject"
  }
}

Event ID 138: Failed to set the public certificate on object Data1.

Provider: Device Registration Service
Channel: Admin

Description

Failed to set the public certificate on object Data1.

Message #

Failed to set the public certificate on object %1. 

Additional information 
Error Message: %2. 
Error Result code: %3.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString

Event ID 138

Provider: Device Registration Service
Channel: Unknown

Description

Failed to set the public certificate on object .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString

Event ID 139: Failed to set the issuance certificate on object Data1.

Provider: Device Registration Service
Channel: Admin

Description

Failed to set the issuance certificate on object Data1.

Message #

Failed to set the issuance certificate on object %1. 

Additional information 
Error Message: %2. 
Error Result code: %3.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString

Event ID 139

Provider: Device Registration Service
Channel: Unknown

Description

Failed to set the issuance certificate on object .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString

Event ID 140: Failed to create instance of the Device Registration Service object Data1.

Provider: Device Registration Service
Channel: Admin

Description

Failed to create instance of the Device Registration Service object Data1.

Message #

Failed to create instance of the Device Registration Service object %1. 

Additional information 
Error Message: %2.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 140

Provider: Device Registration Service
Channel: Unknown

Description

Failed to create instance of the Device Registration Service object .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 141: Failed to locate the private key store for the Device Registration Service at Data1.

Provider: Device Registration Service
Channel: Admin

Description

Failed to locate the private key store for the Device Registration Service at Data1.

Message #

Failed to locate the private key store for the Device Registration Service at %1. 

Additional information 
Error Message: %2.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 141

Provider: Device Registration Service
Channel: Unknown

Description

Failed to locate the private key store for the Device Registration Service at .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 142: A corrupt or invalid certificate was found in the Device Registration Service object.

Provider: Device Registration Service
Channel: Admin

Description

A corrupt or invalid certificate was found in the Device Registration Service object.

Message #

A corrupt or invalid certificate was found in the Device Registration Service object. 

User Action 
Please reset the Device Registration Service object's certificate in the store.

Event ID 142

Provider: Device Registration Service
Channel: Unknown

Description

A corrupt or invalid certificate was found in the Device Registration Service object.

Event ID 143: Writing a Device Registration Service certificate to the service account's MY store failed.

Provider: Device Registration Service
Channel: Admin

Description

Writing a Device Registration Service certificate to the service account's MY store failed.

Message #

Writing a Device Registration Service certificate to the service account's MY store failed. 

Additional information 
Error Message: %1.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 143

Provider: Device Registration Service
Channel: Unknown

Description

Writing a Device Registration Service certificate to the service account's MY store failed.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 144: No certificate could be found on the Device Registration Service object that can be used as the issuing certificate.

Provider: Device Registration Service
Channel: Admin
Level: Error

Description

No certificate could be found on the Device Registration Service object that can be used as the issuing certificate.

Message #

No certificate could be found on the Device Registration Service object that can be used as the issuing certificate.

Example Event #

{
  "system": {
    "provider": "Device Registration Service",
    "guid": "0745ECC7-87DD-4E6E-BE80-58821FD6BC18",
    "event_source_name": "",
    "event_id": 144,
    "version": 0,
    "level": 2,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036854775810,
    "time_created": "2026-03-13T23:07:34.085428+00:00",
    "event_record_id": 6,
    "correlation": {},
    "execution": {
      "process_id": 9844,
      "thread_id": 13256
    },
    "channel": "DRS/Admin",
    "computer": "LAB-DC01.ludus.domain",
    "security": {
      "user_id": "S-1-5-21-1006758700-2167138679-1475694448-1283"
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 144

Provider: Device Registration Service
Channel: Unknown
Level: 2

Description

No certificate could be found on the Device Registration Service object that can be used as the issuing certificate.

Example Event #

{
  "system": {
    "provider": "Device Registration Service",
    "event_id": 144,
    "level": 2,
    "task": 0,
    "opcode": 0,
    "time_created": "2026-03-13T23:07:34.1647934Z",
    "computer": "JD-DC01-2022.ludus.domain",
    "channel": "DRS"
  },
  "event_data": {}
}

Event ID 145: An error occured while decryping a protected certificate.

Provider: Device Registration Service
Channel: Admin

Description

An error occured while decryping a protected certificate.

Message #

An error occured while decryping a protected certificate. 

Additional information 
Error Message: %1.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 145

Provider: Device Registration Service
Channel: Unknown

Description

An error occured while decryping a protected certificate.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 146: Found a certificate retrieved from the Device Registration Service object that is not a valid certificate.

Provider: Device Registration Service
Channel: Admin

Description

Found a certificate retrieved from the Device Registration Service object that is not a valid certificate.

Message #

Found a certificate retrieved from the Device Registration Service object that is not a valid certificate. 

User Action 
Please reset the Device Registration Service object's certificate in the store.

Event ID 146

Provider: Device Registration Service
Channel: Unknown

Description

Found a certificate retrieved from the Device Registration Service object that is not a valid certificate.

Event ID 147: Failed to get SAML token for user Data1.

Provider: Device Registration Service
Channel: Admin

Description

Failed to get SAML token for user Data1.

Message #

Failed to get SAML token for user %1. 

Additional information 
Error Message: %2.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 147

Provider: Device Registration Service
Channel: Unknown

Description

Failed to get SAML token for user .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 148: Failed to get OAuth2 token for user Data1.

Provider: Device Registration Service
Channel: Admin

Description

Failed to get OAuth2 token for user Data1.

Message #

Failed to get OAuth2 token for user %1. 

Additional information 
Error Message: %2.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 148

Provider: Device Registration Service
Channel: Unknown

Description

Failed to get OAuth2 token for user .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 149: Successfully enrolled device for user Data1.

Provider: Device Registration Service
Channel: Admin

Description

Successfully enrolled device for user Data1.

Message #

Successfully enrolled device for user %1. 

Duration(ms): %2. 
Tenant: %3. 
Device type: %4. 
Device OS version: %5. 
Tenant name: %6. 
Protocol: %7.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString
`Data6` UnicodeString
`Data7` UnicodeString

Event ID 149

Provider: Device Registration Service
Channel: Unknown

Description

Successfully enrolled device for user .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString
`Data6` UnicodeString
`Data7` UnicodeString

Event ID 150: The service object, Data1, was updated with the following settings.

Provider: Device Registration Service
Channel: Admin

Description

The service object, Data1, was updated with the following settings.

Message #

The service object, %1, was updated with the following settings: 

Registration quota (old, new): (%2, %3) 
Inactivity period (old, new): (%4, %5) 
IsEnabled (old, new): (%6, %7) 
CloudIsEnabled (old, new): (%8, %9) 
Issuance certificates count (old, new): (%10, %11) 
Public issuance certificates count (old, new): (%12, %13)

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString
`Data6` UnicodeString
`Data7` UnicodeString
`Data8` UnicodeString
`Data9` UnicodeString
`Data10` UnicodeString
`Data11` UnicodeString
`Data12` UnicodeString
`Data13` UnicodeString

Event ID 150

Provider: Device Registration Service
Channel: Unknown

Description

The service object, , was updated with the following settings.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString
`Data6` UnicodeString
`Data7` UnicodeString
`Data8` UnicodeString
`Data9` UnicodeString
`Data10` UnicodeString
`Data11` UnicodeString
`Data12` UnicodeString
`Data13` UnicodeString

Event ID 151: Successfully enrolled device ID Data1 using certificate thumbprint Data2 for user Data3.

Provider: Device Registration Service
Channel: Admin

Description

Successfully enrolled device ID Data1 using certificate thumbprint Data2 for user Data3.

Message #

Successfully enrolled device ID %1 using certificate thumbprint %2 for user %3. 

Additional information 
User ID: %4 
Domain or tenant ID: %5 
New device: %6 
Protocol: %7

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString
`Data6` UnicodeString
`Data7` UnicodeString

Event ID 151

Provider: Device Registration Service
Channel: Unknown

Description

Successfully enrolled device ID using certificate thumbprint for user .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString
`Data6` UnicodeString
`Data7` UnicodeString

Event ID 152: An error occurred while processing the discovery request for Enterprise Enrollment.

Provider: Device Registration Service
Channel: Admin

Description

An error occurred while processing the discovery request for Enterprise Enrollment.

Message #

An error occurred while processing the discovery request for Enterprise Enrollment. 

Additional information 
Error: %1

Fields #

Name	Description
`Data1` UnicodeString

Event ID 152

Provider: Device Registration Service
Channel: Unknown

Description

An error occurred while processing the discovery request for Enterprise Enrollment.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 153: An error occurred while processing the discovery request for Enterprise Registration.

Provider: Device Registration Service
Channel: Admin

Description

An error occurred while processing the discovery request for Enterprise Registration.

Message #

An error occurred while processing the discovery request for Enterprise Registration. 

Additional information 
Error: %1

Fields #

Name	Description
`Data1` UnicodeString

Event ID 153

Provider: Device Registration Service
Channel: Unknown

Description

An error occurred while processing the discovery request for Enterprise Registration.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 154: An error occurred while processing the discovery request.

Provider: Device Registration Service
Channel: Admin

Description

An error occurred while processing the discovery request.

Message #

An error occurred while processing the discovery request. 

Additional information 
Error: %1

Fields #

Name	Description
`Data1` UnicodeString

Event ID 154

Provider: Device Registration Service
Channel: Unknown

Description

An error occurred while processing the discovery request.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 155: The Device Registration Service could not find any Single Sign-On endpoints from AD FS.

Provider: Device Registration Service
Channel: Admin

Description

The Device Registration Service could not find any Single Sign-On endpoints from AD FS.

Message #

The Device Registration Service could not find any Single Sign-On endpoints from AD FS. 

User Action 
Ensure the SAML 2.0/WS-Federation AD FS service endpoint is enabled.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 155

Provider: Device Registration Service
Channel: Unknown

Description

The Device Registration Service could not find any Single Sign-On endpoints from AD FS.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 156: The Device Registration Service could not load the SSL certificate used by the AD FS service.

Provider: Device Registration Service
Channel: Admin

Description

The Device Registration Service could not load the SSL certificate used by the AD FS service.

Message #

The Device Registration Service could not load the SSL certificate used by the AD FS service. 

Additional information 
Certificate thumbprint: %1 
Error: %2 

User Action 
Ensure the certificate is in the Local Machine's Personal certificate store, and that the Device Registration Service has Read access to the private key.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 156

Provider: Device Registration Service
Channel: Unknown

Description

The Device Registration Service could not load the SSL certificate used by the AD FS service.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 157: An error occurred.

Provider: Device Registration Service
Channel: Admin

Description

An error occurred.

Message #

An error occurred. 

Additional information 
Error: %1

Fields #

Name	Description
`Data1` UnicodeString

Event ID 157

Provider: Device Registration Service
Channel: Unknown

Description

An error occurred.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 158: An error occurred while starting the endpoint for Data1.

Provider: Device Registration Service
Channel: Admin

Description

An error occurred while starting the endpoint for Data1.

Message #

An error occurred while starting the endpoint for %1. 

Additional information 
Error: %2 
Visit http://go.microsoft.com/fwlink/?LinkID=325381&clcid=0x409 for help troubleshooting the failure.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 158

Provider: Device Registration Service
Channel: Unknown

Description

An error occurred while starting the endpoint for .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 159: Failed to find a GC in forest Data1 when looking up Device Registration Service configuration.

Provider: Device Registration Service
Channel: Admin

Description

Failed to find a GC in forest Data1 when looking up Device Registration Service configuration.

Message #

Failed to find a GC in forest %1 when looking up Device Registration Service configuration. 

Visit http://go.microsoft.com/fwlink/?LinkID=397374&clcid=0x409 to troubleshoot the failure.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 159

Provider: Device Registration Service
Channel: Unknown

Description

Failed to find a GC in forest when looking up Device Registration Service configuration.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 160: Successfully polled the Device Registration Service configuration from server Data1.

Provider: Device Registration Service
Channel: Admin
Level: Informational

Description

Successfully polled the Device Registration Service configuration from server Data1.

Message #

Successfully polled the Device Registration Service configuration from server %1.

Fields #

Name	Description
`Data1` UnicodeString

Example Event #

{
  "system": {
    "provider": "Device Registration Service",
    "guid": "0745ECC7-87DD-4E6E-BE80-58821FD6BC18",
    "event_source_name": "",
    "event_id": 160,
    "version": 0,
    "level": 4,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036854775810,
    "time_created": "2026-03-13T23:07:34.125387+00:00",
    "event_record_id": 8,
    "correlation": {},
    "execution": {
      "process_id": 9844,
      "thread_id": 13256
    },
    "channel": "DRS/Admin",
    "computer": "LAB-DC01.ludus.domain",
    "security": {
      "user_id": "S-1-5-21-1006758700-2167138679-1475694448-1283"
    }
  },
  "event_data": {
    "Data1": "LAB-DC01.ludus.domain"
  },
  "message": ""
}

Event ID 160

Provider: Device Registration Service
Channel: Unknown
Level: 4

Description

Successfully polled the Device Registration Service configuration from server .

Fields #

Name	Description
`Data1` UnicodeString

Example Event #

{
  "system": {
    "provider": "Device Registration Service",
    "event_id": 160,
    "level": 4,
    "task": 0,
    "opcode": 0,
    "time_created": "2026-03-13T23:07:34.1253874Z",
    "computer": "JD-DC01-2022.ludus.domain",
    "channel": "DRS"
  },
  "event_data": {
    "Data1": "JD-DC01-2022.ludus.domain"
  }
}

Event ID 161: Failed to poll for the Device Registration Service object at Data1.

Provider: Device Registration Service
Channel: Admin

Description

Failed to poll for the Device Registration Service object at Data1.

Message #

Failed to poll for the Device Registration Service object at %1. 

Additional information 
Error Message: %2.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 161

Provider: Device Registration Service
Channel: Unknown

Description

Failed to poll for the Device Registration Service object at .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 162: The action identified by the call stack below was successful after Data1 retry/retries.

Provider: Device Registration Service
Channel: Admin

Description

The action identified by the call stack below was successful after Data1 retry/retries.

Message #

The action identified by the call stack below was successful after %1 retry/retries. 

Additional information 
Call Stack: %2

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 162

Provider: Device Registration Service
Channel: Unknown

Description

The action identified by the call stack below was successful after retry/retries.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 163: The action identified by the call stack below failed after Data1 retry/retries.

Provider: Device Registration Service
Channel: Admin

Description

The action identified by the call stack below failed after Data1 retry/retries.

Message #

The action identified by the call stack below failed after %1 retry/retries. 

Additional information 
Call Stack: %2

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 163

Provider: Device Registration Service
Channel: Unknown

Description

The action identified by the call stack below failed after retry/retries.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 167: Successfully provisioned key with identifier Data1.

Provider: Device Registration Service
Channel: Admin

Description

Successfully provisioned key with identifier Data1.

Message #

Successfully provisioned key with identifier %1. 

Duration(ms): %2. 
Domain: %3.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString

Event ID 167

Provider: Device Registration Service
Channel: Unknown

Description

Successfully provisioned key with identifier .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString

Event ID 168: Successfully provisioned key with identifier Data1.

Provider: Device Registration Service
Channel: Admin

Description

Successfully provisioned key with identifier Data1.

Message #

Successfully provisioned key with identifier %1. 

Additional information 
Domain ID: %2

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 168

Provider: Device Registration Service
Channel: Unknown

Description

Successfully provisioned key with identifier .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 169: Successfully updated key with identifier Data1.

Provider: Device Registration Service
Channel: Admin

Description

Successfully updated key with identifier Data1.

Message #

Successfully updated key with identifier %1. 

Duration(ms): %2. 
Domain: %3.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString

Event ID 169

Provider: Device Registration Service
Channel: Unknown

Description

Successfully updated key with identifier .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString

Event ID 170: Successfully updated key with identifier Data1.

Provider: Device Registration Service
Channel: Admin

Description

Successfully updated key with identifier Data1.

Message #

Successfully updated key with identifier %1. 

Additional information 
Domain ID: %2

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 170

Provider: Device Registration Service
Channel: Unknown

Description

Successfully updated key with identifier .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 171: Successfully deleted key with identifier Data1.

Provider: Device Registration Service
Channel: Admin

Description

Successfully deleted key with identifier Data1.

Message #

Successfully deleted key with identifier %1. 

Duration(ms): %2. 
Domain ID: %3.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString

Event ID 171

Provider: Device Registration Service
Channel: Unknown

Description

Successfully deleted key with identifier .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString

Event ID 172: Successfully deleted key with identifier Data1.

Provider: Device Registration Service
Channel: Admin

Description

Successfully deleted key with identifier Data1.

Message #

Successfully deleted key with identifier %1. 

Additional information 
Domain ID: %2

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 172

Provider: Device Registration Service
Channel: Unknown

Description

Successfully deleted key with identifier .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 173: Successfully joined device for user Data1.

Provider: Device Registration Service
Channel: Admin

Description

Successfully joined device for user Data1.

Message #

Successfully joined device for user %1. 

Duration(ms): %2.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 173

Provider: Device Registration Service
Channel: Unknown

Description

Successfully joined device for user .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 174: Successfully joined device ID Data1 using certificate thumbprint Data2 for user Data3.

Provider: Device Registration Service
Channel: Admin

Description

Successfully joined device ID Data1 using certificate thumbprint Data2 for user Data3.

Message #

Successfully joined device ID %1 using certificate thumbprint %2 for user %3. 

Additional information 
User ID: %4 
Domain ID: %5

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString

Event ID 174

Provider: Device Registration Service
Channel: Unknown

Description

Successfully joined device ID using certificate thumbprint for user .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString

Event ID 175: Successfully renewed device certificate for user Data1.

Provider: Device Registration Service
Channel: Admin

Description

Successfully renewed device certificate for user Data1.

Message #

Successfully renewed device certificate for user %1. 
Duration(ms): %2.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 175

Provider: Device Registration Service
Channel: Unknown

Description

Successfully renewed device certificate for user .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 176: Successfully renewed the device ID Data1 using certificate thumbprint Data2.

Provider: Device Registration Service
Channel: Admin

Description

Successfully renewed the device ID Data1 using certificate thumbprint Data2.

Message #

Successfully renewed the device ID %1 using certificate thumbprint %2. 

Additional information 
Domain ID: %3

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString

Event ID 176

Provider: Device Registration Service
Channel: Unknown

Description

Successfully renewed the device ID using certificate thumbprint .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString

Event ID 177: Successfully deleted device Data1 using Data2 for user Data3.

Provider: Device Registration Service
Channel: Admin

Description

Successfully deleted device Data1 using Data2 for user Data3.

Message #

Successfully deleted device %1 using %2 for user %3. 

Additional information 
User ID: %4 
Domain ID: %5

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString

Event ID 177

Provider: Device Registration Service
Channel: Unknown

Description

Successfully deleted device using for user .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString

Event ID 178: Successfully patched the device STK with device identifier Data1.

Provider: Device Registration Service
Channel: Admin

Description

Successfully patched the device STK with device identifier Data1.

Message #

Successfully patched the device STK with device identifier %1.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 178

Provider: Device Registration Service
Channel: Unknown

Description

Successfully patched the device STK with device identifier .

Fields #

Name	Description
`Data1` UnicodeString

Event ID 179: Successfully patched device ID Data1 using certificate thumbprint Data2 for STK.

Provider: Device Registration Service
Channel: Admin

Description

Successfully patched device ID Data1 using certificate thumbprint Data2 for STK.

Message #

Successfully patched device ID %1 using certificate thumbprint %2 for STK.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 179

Provider: Device Registration Service
Channel: Unknown

Description

Successfully patched device ID using certificate thumbprint for STK.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 180: Successfully updated device enrollment for user Data1.

Provider: Device Registration Service
Channel: Admin

Description

Successfully updated device enrollment for user Data1.

Message #

Successfully updated device enrollment for user %1. 

Duration(ms): %2. 
Domain: %3. 
Device type: %4. 
Device OS version: %5. 
Domain name: %6. 
Protocol: %7.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString
`Data6` UnicodeString
`Data7` UnicodeString

Event ID 180

Provider: Device Registration Service
Channel: Unknown

Description

Successfully updated device enrollment for user .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString
`Data6` UnicodeString
`Data7` UnicodeString

Event ID 181: Successfully processed request for Scep challenge Duration(ms).

Provider: Device Registration Service
Channel: Admin

Description

Successfully processed request for Scep challenge.

Message #

Successfully processed request for Scep challenge 
Duration(ms): %1. 
Domain: %2. 
Metadata only: %3. 
New device: %4. 
Device type: %5. 
Device OS version: %6. 
Domain name: %7.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString
`Data6` UnicodeString
`Data7` UnicodeString

Event ID 181

Provider: Device Registration Service
Channel: Unknown

Description

Successfully processed request for Scep challenge.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString
`Data6` UnicodeString
`Data7` UnicodeString

Event ID 182: The device object with identifier Data1 was purged because it was beyond the configured inactivity period, Data2.

Provider: Device Registration Service
Channel: Admin

Description

The device object with identifier Data1 was purged because it was beyond the configured inactivity period, Data2.

Message #

The device object with identifier %1 was purged because it was beyond the configured inactivity period, %2.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 182

Provider: Device Registration Service
Channel: Unknown

Description

The device object with identifier was purged because it was beyond the configured inactivity period, .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 183: Successfully deleted the device with identifier: Data1.

Provider: Device Registration Service
Channel: Admin

Description

Successfully deleted the device with identifier: Data1.

Message #

Successfully deleted the device with identifier: %1.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 183

Provider: Device Registration Service
Channel: Unknown

Description

Successfully deleted the device with identifier: .

Fields #

Name	Description
`Data1` UnicodeString

Event ID 184: Successfully deleted device: Data1.

Provider: Device Registration Service
Channel: Admin

Description

Successfully deleted device: Data1.

Message #

Successfully deleted device: %1. 

Additional information 
Domain or tenant ID: %2

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 184

Provider: Device Registration Service
Channel: Unknown

Description

Successfully deleted device: .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 1000: Failed to logon as user Data1.

Provider: Device Registration Service
Channel: Admin

Description

Failed to logon as user Data1.

Message #

Failed to logon as user %1. 

Additional information 
Error Message: %2.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 1000

Provider: Device Registration Service
Channel: Unknown

Description

Failed to logon as user .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 1001: Failed to Data1 for the Device Registration Service.

Provider: Device Registration Service
Channel: Admin

Description

Failed to Data1 for the Device Registration Service.

Message #

Failed to %1 for the Device Registration Service. 

Additional information 
Error Message: %2. 

User Action 
Please visit http://go.microsoft.com/fwlink/?LinkID=286701&clcid=0x409 for help troubleshooting deployment issues.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 1001

Provider: Device Registration Service
Channel: Unknown

Description

Failed to for the Device Registration Service.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 3000: An error occurred during an attempt to register the event source for the Security log.

Provider: Device Registration Service
Channel: Admin

Description

An error occurred during an attempt to register the event source for the Security log.

Message #

An error occurred during an attempt to register the event source for the Security log. 

User Action 
Ensure that the Device Registration Service has the correct permissions to write to the Security log.

Event ID 3000

Provider: Device Registration Service
Channel: Unknown

Description

An error occurred during an attempt to register the event source for the Security log.

Event ID 3001: The Security log event source for the Device Registration Service could not be registered.

Provider: Device Registration Service
Channel: Admin

Description

The Security log event source for the Device Registration Service could not be registered.

Message #

The Security log event source for the Device Registration Service could not be registered. 

Additional Data 
Windows error code: %1 
Exception details: 
%2

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 3001

Provider: Device Registration Service
Channel: Unknown

Description

The Security log event source for the Device Registration Service could not be registered.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 3002: An attempt to write to the Security event log failed.

Provider: Device Registration Service
Channel: Admin

Description

An attempt to write to the Security event log failed.

Message #

An attempt to write to the Security event log failed. 

Additional Data 
Windows error code: %1 
Exception details: 
%2

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 3002

Provider: Device Registration Service
Channel: Unknown

Description

An attempt to write to the Security event log failed.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 3009: Failed to enroll device for user Data1.

Provider: Device Registration Service
Channel: Admin

Description

Failed to enroll device for user Data1.

Message #

Failed to enroll device for user %1. 

Domain: %2. 
Device type: %3. 
Device OS version: %4. 
Domain name: %5. 
Protocol: %6.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString
`Data` UnicodeString

Event ID 3009

Provider: Device Registration Service
Channel: Unknown

Description

Failed to enroll device for user .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString
`Data` UnicodeString

Event ID 3011: Failed to find one or more objects in domain: Data1.

Provider: Device Registration Service
Channel: Admin

Description

Failed to find one or more objects in domain: Data1.

Message #

Failed to find one or more objects in domain: %1. 

Additional Data 
Exception details: 
%2

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 3011

Provider: Device Registration Service
Channel: Unknown

Description

Failed to find one or more objects in domain: .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 3012: Failed to process request for Scep challenge Duration(ms).

Provider: Device Registration Service
Channel: Admin

Description

Failed to process request for Scep challenge.

Message #

Failed to process request for Scep challenge 
Duration(ms): %1. 
Domain: %2. 
Metadata only: %3. 
New device: %4. 
Device type: %5. 
Device OS version: %6. 
Domain name: %7. 

Additional Data 
Exception details: 
%8

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString
`Data6` UnicodeString
`Data7` UnicodeString
`Data8` UnicodeString

Event ID 3012

Provider: Device Registration Service
Channel: Unknown

Description

Failed to process request for Scep challenge.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString
`Data6` UnicodeString
`Data7` UnicodeString
`Data8` UnicodeString

Event ID 3013: Failed to process request for device attribute Additional Data Exception details.

Provider: Device Registration Service
Channel: Admin

Description

Failed to process request for device attribute.

Message #

Failed to process request for device attribute 

Additional Data 
Exception details: 
%1

Fields #

Name	Description
`Data1` UnicodeString

Event ID 3013

Provider: Device Registration Service
Channel: Unknown

Description

Failed to process request for device attribute.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 3014: Failed to process request for device update Additional Data Exception details.

Provider: Device Registration Service
Channel: Admin

Description

Failed to process request for device update.

Message #

Failed to process request for device update 

Additional Data 
Exception details: 
%1

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 3014

Provider: Device Registration Service
Channel: Unknown

Description

Failed to process request for device update.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 3015: Failed to process request for device delete Additional Data Exception details.

Provider: Device Registration Service
Channel: Admin

Description

Failed to process request for device delete.

Message #

Failed to process request for device delete 

Additional Data 
Exception details: 
%1

Fields #

Name	Description
`Data1` UnicodeString

Event ID 3015

Provider: Device Registration Service
Channel: Unknown

Description

Failed to process request for device delete.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 3016: Failed to process request to activate EAS, please try again later or contact your Administrator Additional Data Exception details.

Provider: Device Registration Service
Channel: Admin

Description

Failed to process request to activate EAS, please try again later or contact your Administrator.

Message #

Failed to process request to activate EAS, please try again later or contact your Administrator 

Additional Data 
Exception details: 
%1

Fields #

Name	Description
`Data1` UnicodeString

Event ID 3016

Provider: Device Registration Service
Channel: Unknown

Description

Failed to process request to activate EAS, please try again later or contact your Administrator.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 3017: An attempt to write to the Security event log failed.

Provider: Device Registration Service
Channel: Admin

Description

An attempt to write to the Security event log failed.

Message #

An attempt to write to the Security event log failed. 

Additional Data 
Windows error code: %1 
Exception details: 
%2

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 3017

Provider: Device Registration Service
Channel: Unknown

Description

An attempt to write to the Security event log failed.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 3018: Failed to join the device for user Data1.

Provider: Device Registration Service
Channel: Admin

Description

Failed to join the device for user Data1.

Message #

Failed to join the device for user %1.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 3018

Provider: Device Registration Service
Channel: Unknown

Description

Failed to join the device for user .

Fields #

Name	Description
`Data1` UnicodeString

Event ID 3019: Failed to join the device for user Data1.

Provider: Device Registration Service
Channel: Admin

Description

Failed to join the device for user Data1.

Message #

Failed to join the device for user %1.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 3019

Provider: Device Registration Service
Channel: Unknown

Description

Failed to join the device for user .

Fields #

Name	Description
`Data1` UnicodeString

Event ID 3020: Failed to configure service identity for Data1.

Provider: Device Registration Service
Channel: Admin

Description

Failed to configure service identity for Data1.

Message #

Failed to configure service identity for %1 

Additional Data 
Exception details: 
%2

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 3020

Provider: Device Registration Service
Channel: Unknown

Description

Failed to configure service identity for.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 3021: Successfully configured service identity for Data1.

Provider: Device Registration Service
Channel: Admin

Description

Successfully configured service identity for Data1.

Message #

Successfully configured service identity for %1

Fields #

Name	Description
`Data1` UnicodeString

Event ID 3021

Provider: Device Registration Service
Channel: Unknown

Description

Successfully configured service identity for.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 3022: Successfully configured service identity for Data1 to use MFA.

Provider: Device Registration Service
Channel: Admin

Description

Successfully configured service identity for Data1 to use MFA.

Message #

Successfully configured service identity for %1 to use MFA

Fields #

Name	Description
`Data1` UnicodeString

Event ID 3022

Provider: Device Registration Service
Channel: Unknown

Description

Successfully configured service identity for to use MFA.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 3023: Successfully deleted device.

Provider: Device Registration Service
Channel: Admin

Description

Successfully deleted device.

Message #

Successfully deleted device. 

Duration(ms): %1. 
Domain: %2 
Device: %3 
User: %4

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString

Event ID 3023

Provider: Device Registration Service
Channel: Unknown

Description

Successfully deleted device.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString

Event ID 3024: Failed to delete device.

Provider: Device Registration Service
Channel: Admin

Description

Failed to delete device.

Message #

Failed to delete device. 

Duration(ms): %1. 
Domain: %2 
Device: %3 
User: %4 

Additional Data 
Exception details: 
%5

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString

Event ID 3024

Provider: Device Registration Service
Channel: Unknown

Description

Failed to delete device.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString

Event ID 3025: Failed to provision key.

Provider: Device Registration Service
Channel: Admin

Description

Failed to provision key.

Message #

Failed to provision key. 

Duration(ms): %1. 
Domain:%2 

Additional Data 
Exception details: 
%3 

Fault contract: 
%4

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString

Event ID 3025

Provider: Device Registration Service
Channel: Unknown

Description

Failed to provision key.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString

Event ID 3026: Failed to update key with identifier Data1.

Provider: Device Registration Service
Channel: Admin

Description

Failed to update key with identifier Data1.

Message #

Failed to update key with identifier %1. 

Duration(ms): %2. 
Domain:%3 

Additional Data 
Exception details: 
%4 

Fault contract: 
%5

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString

Event ID 3026

Provider: Device Registration Service
Channel: Unknown

Description

Failed to update key with identifier .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString

Event ID 3027: Failed to delete key with identifier Data1.

Provider: Device Registration Service
Channel: Admin

Description

Failed to delete key with identifier Data1.

Message #

Failed to delete key with identifier %1. 

Duration(ms): %2. 
Domain:%3 

Additional Data 
Exception details: 
%4 

Fault contract: 
%5

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString

Event ID 3027

Provider: Device Registration Service
Channel: Unknown

Description

Failed to delete key with identifier .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString

Event ID 3028: Failed to patch the STK for the device with identifier Data1.

Provider: Device Registration Service
Channel: Admin

Description

Failed to patch the STK for the device with identifier Data1.

Message #

Failed to patch the STK for the device with identifier %1.

Fields #

Name	Description
`Data1` UnicodeString

Event ID 3028

Provider: Device Registration Service
Channel: Unknown

Description

Failed to patch the STK for the device with identifier .

Fields #

Name	Description
`Data1` UnicodeString

Event ID 3029: Failed to add key in domain: Data1.

Provider: Device Registration Service
Channel: Admin

Description

Failed to add key in domain: Data1.

Message #

Failed to add key in domain: %1. 

Additional Data 
Key usage: 
%2 
Exception details: 
%3

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString

Event ID 3029

Provider: Device Registration Service
Channel: Unknown

Description

Failed to add key in domain: .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString

Event ID 3030: Failed to delete the key in domain: Data1.

Provider: Device Registration Service
Channel: Admin

Description

Failed to delete the key in domain: Data1.

Message #

Failed to delete the key in domain: %1. 

Additional Data 
Key identifier: 
%2 
Key usage: 
%3 
Exception details: 
%4

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString

Event ID 3030

Provider: Device Registration Service
Channel: Unknown

Description

Failed to delete the key in domain: .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString

Event ID 3031: Failed to update the key in domain: Data1.

Provider: Device Registration Service
Channel: Admin

Description

Failed to update the key in domain: Data1.

Message #

Failed to update the key in domain: %1. 

Additional Data 
Key identifier: 
%2 
Key usage: 
%3 
Exception details: 
%4

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString

Event ID 3031

Provider: Device Registration Service
Channel: Unknown

Description

Failed to update the key in domain: .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString

Event ID 3033: Failed to update device enrollment for user Data1.

Provider: Device Registration Service
Channel: Admin

Description

Failed to update device enrollment for user Data1.

Message #

Failed to update device enrollment for user %1. 
Domain: %2. 
Device type: %3. 
Device OS version: %4. 
Domain name: %5. 
Protocol: %6.

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString
`Data` UnicodeString

Event ID 3033

Provider: Device Registration Service
Channel: Unknown

Description

Failed to update device enrollment for user .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString
`Data3` UnicodeString
`Data4` UnicodeString
`Data5` UnicodeString
`Data` UnicodeString

Event ID 3034: Failed to delete the device with identifier: Data1.

Provider: Device Registration Service
Channel: Admin

Description

Failed to delete the device with identifier: Data1.

Message #

Failed to delete the device with identifier: %1. 

Additional Data 
Exception details: 
%2

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 3034

Provider: Device Registration Service
Channel: Unknown

Description

Failed to delete the device with identifier: .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 3035: Successfully downloaded Windows Hello key receipt public issuer certificates.

Provider: Device Registration Service
Channel: Admin

Description

Successfully downloaded Windows Hello key receipt public issuer certificates. Url: Data1.

Message #

Successfully downloaded Windows Hello key receipt public issuer certificates. Url: %1. 

Additional Data 
Certificates: 
%2

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 3035

Provider: Device Registration Service
Channel: Unknown

Description

Successfully downloaded Windows Hello key receipt public issuer certificates. Url: .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 3036: Failed to download Windows Hello key receipt public issuer certificates.

Provider: Device Registration Service
Channel: Admin

Description

Failed to download Windows Hello key receipt public issuer certificates. Url: Data1.

Message #

Failed to download Windows Hello key receipt public issuer certificates. Url: %1. 

Additional Data 
Exception details: 
%2

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 3036

Provider: Device Registration Service
Channel: Unknown

Description

Failed to download Windows Hello key receipt public issuer certificates. Url: .

Fields #

Name	Description
`Data1` UnicodeString
`Data2` UnicodeString

Event ID 3037: An error occurred while sending the web request.

Provider: Device Registration Service
Channel: Admin

Description

An error occurred while sending the web request.

Message #

An error occurred while sending the web request. 

Exception details: 
%1

Fields #

Name	Description
`Data1` UnicodeString

Event ID 3037

Provider: Device Registration Service
Channel: Unknown

Description

An error occurred while sending the web request.

Fields #

Name	Description
`Data1` UnicodeString

`j` / `k`	Scroll down / up
`d` / `u`	Half-page down / up
`gg` / `G`	Top / bottom
`h` / `l`	History back / forward
`f`	Follow link (`Shift` = new tab)
`/`	Focus search
`?`	Toggle this help
`↑` / `↓`	Navigate search results
`Enter`	Open highlighted result
`Esc`	Close results / dialog

`type:`	`events` / `rules` / `providers`
`vendor:`	`sigma` / `elastic` / `splunk` / `kusto` / `chronicle` (vendor name alone also works: `sigma:`, `kql:`, `secops:`…)
`tactic:`	TA-id, slug, or name: `credential_access`, `TA0006`
`technique:`	technique or sub-technique ID: `T1003`, `T1003.001` (alias `tech:`)
`severity:`	`critical` / `high` / `medium` / `low` / `informational` (alias `sev:`)
`risk_score`	Numeric comparison on the Elastic risk score (0 to 100): `risk_score>50`, `risk_score<=20`, `risk_score=99` (alias `risk`; Elastic rules only)
`stages:`	Rules with exactly N pipeline stages
`correlation:`	`single_event` / `sequence` / `alternatives` / `alternatives_cross_log` / `all_required` / `correlated`
`with:`	Co-occurrence event-id; stacks (`with:4624 with:4769`) to require all, while a comma list in one occurrence (`with:4624,4769`) is an either-or group. Implies multi-event
`like:`	Structural neighbors of a rule slug (equivalents + subsumption stricter / broader): `like:comsvcs_lsass_memory_dump-splunk-sysmon`
`groupby:`	Entity-grouping substring match against `group_by_keys`: `groupby:user`, `groupby:host`
`uses:`	Rules whose predicate tree touches the field (any kind, any value): `uses:CommandLine`
`excludes:`	Rules with top-level `not()` clauses on the field (FP whitelists): `excludes:ParentImage`
`field:` / `value:`	Predicate search; narrows rule cards to those with a matching leaf and drives the indicator tier. Unquoted = substring, wildcards allowed (`value:mimikatz`)
`indicator:`	Shorthand for `field:F value:V`: `indicator:Image=*\powershell.exe`
`kind:`	Filter by predicate kind. Narrows rule cards to those carrying a matching predicate leaf (`vendor:elastic kind:cidr_match`) and drives the indicator tier: `contains` / `starts_with` / `ends_with` / `regex` / `cidr` / `eq` / `in` … (operator aliases `op:`/`match:`)
`has:` / `no:`	`sample`, `field`, `notes`, `refs`, `trace`, `thirdparty`, `rule`, `pattern`, `timewindow`, `threshold`, `newterms`, `sigma`/`elastic`/`splunk`/`kusto`/`chronicle`
`-op:val`	Exclude matches; works on most operators but not `type:`/`like:`/`has:`/`no:` (use `no:<flag>` to exclude a rule flag): `tactic:execution -vendor:splunk`. Standalone `-kind:`/`-field:`/`-value:` drop every rule carrying a matching predicate leaf (`type:rules -kind:is_null`)
`field:"…"` / `value:"…"`	Quoted value = anchored exact match (also allows spaces): `value:"net user"`
`a,b`	Comma = OR inside one operator (`vendor:sigma,elastic`, `severity:high,critical`); repeating a facet merges the same way. `field:`/`value:` never split (literal commas)
`vendors:` / `stage:`	Singular and plural spellings fold to the canonical operator and value: `tactics:` = `tactic:`, `type:event` = `type:events`, `correlation:sequences` = `correlation:sequence`, `has:thresholds` = `has:threshold`
`"quoted phrase"`	Exact-match a multi-word phrase (free text)