Microsoft-Windows-All-User-Install-Agent

EventTitleChannelSampleRule
2Event ID 2DebugNN
3Event ID 3DebugNN
4Event ID 4AnalyticNN
5Event ID 5AnalyticNN
6Event ID 6DebugNN
7Event ID 7DebugNN
8Event ID 8AnalyticNN
9Event ID 9AnalyticNN
10Event ID 10AnalyticNN
11Event ID 11AnalyticNN
256The Windows All-User Install Agent could not schedule a package registration for …AdminNN
257The Windows All-User Install Agent could not schedule a package registration for …AdminNN
258The Windows All-User Install Agent could not schedule a package registration for …AdminNN
259The Windows All-User Install Agent could not register the package named {Param1} …AdminNN
260The Windows All-User Install Agent successfully registered the package named …AdminNN
261The Windows All-User Install Agent could not retrieve user information from …AdminNN
1280The Windows All-User Install Agent started registering the package named …AdminNN
1281The Windows All-User Install Agent successfully registered the package named …AdminNN
1282The Windows All-User Install Agent could not register the package named {Param1} …AdminNN
1283The Windows All-User Install Agent retrieved {Param1} packages for the user …AdminNN
1284The Windows All-User Install Agent registered {Param1} packages for the user …AdminNN
1286The Windows All-User Install Agent recovery request for the user account …AdminNN
1287A profile deletion triggered the Windows All-User Install Agent to uninstall all …AdminNN
1288The Windows All-User Install Agent could not remove PackageMoniker packages …AdminNN
1289The Windows All-User Install Agent detected an invalid user SID {UserSid}.AdminNN
1290The Windows All-User Install Agent could not unregister an application.AdminNN
1291The Windows All-User Install Agent cannot determine if user SID {UserSid} is a …AdminNN
1292The Windows All-User Install Agent cannot determine if user SID {UserSid} is a …AdminNN
1293The Windows All-User Install Agent detected that the user account …AdminNN
1294The Windows All-User Install Agent starts package registration for user account …AdminNN
1295The Windows All-User Install Agent starts package registration for user account …AdminNN
1296The Windows All-User Install Agent starts package registration for user account …AdminNN
1297The Windows All-User Install Agent could not update timestamp for user user …AdminNN
1298Start the Windows All-User Install Agent to update packages for the user on …AdminNN
1300The Windows All-User Install Agent could not delete the registered packages …AdminNN
1301The Windows All-User Install Agent detected an attempt to delete a temporary or …AdminNN
1302The Windows All-User Install Agent will delete NumberOfPackages packages for …AdminNN
1303The Windows All-User Install Agent could not retrieve a list of packages for …AdminNN
1304The Windows All-User Install Agent will delete package Package for user SID …AdminNN
1305GetApplicability API failed to determine status of package Package.AdminNN
1306GetApplicability API has determined that package Package is either …AdminNN
1307Dependent Package Package is already installed, registration will be skipped.AdminNN
1312Package registration is not required for user account {Param1}\{Param2}.AdminNN
1313The Windows All-User Install Agent is no longer waiting to register a package …AdminNN
1314The Windows All-User Install Agent is waiting to register a package for user …AdminNN
1536The Windows All-User Install Agent could not update the registration status for …AdminNN
1537The Windows All-User Install Agent could not to retrieve a list of packages for …AdminNN

Event ID 2

#
Channel
Debug

Description

{message}.

Message #

{message}

Fields #

NameDescription
message

Event ID 3

#
Channel
Debug

Description

{message}.

Message #

{message}

Fields #

NameDescription
message

Event ID 4

#
Channel
Analytic

Description

{message}.

Message #

{message}

Fields #

NameDescription
message

Event ID 5

#
Channel
Analytic

Description

{message}.

Message #

{message}

Fields #

NameDescription
message

Event ID 6

#
Channel
Debug

Description

{message}.

Message #

{message}

Fields #

NameDescription
message

Event ID 7

#
Channel
Debug

Description

{message}.

Message #

{message}

Fields #

NameDescription
message

Event ID 8

#
Channel
Analytic

Description

{message}.

Message #

{message}

Fields #

NameDescription
message

Event ID 9

#
Channel
Analytic

Description

{message}.

Message #

{message}

Fields #

NameDescription
message

Event ID 10

#
Channel
Analytic

Description

{message}.

Message #

{message}

Fields #

NameDescription
message

Event ID 11

#
Channel
Analytic

Description

{message}.

Message #

{message}

Fields #

NameDescription
message

Event ID 256: The Windows All-User Install Agent could not schedule a package registration for session {Param1} and the user account {Param2}\{Param3}.

#
Channel
Admin

Description

The Windows All-User Install Agent could not schedule a package registration for session {Param1} and the user account {Param2}\{Param3}. The error code is {Param4}.

Message #

The Windows All-User Install Agent could not schedule a package registration for session {Param1} and the user account {Param2}\{Param3}. The error code is {Param4}.

Fields #

NameDescription
Param1
Param2
Param3
Param4

Event ID 257: The Windows All-User Install Agent could not schedule a package registration for session {Param2}.

#
Channel
Admin

Description

The Windows All-User Install Agent could not schedule a package registration for session {Param2}. The error code is {Param1}.

Message #

The Windows All-User Install Agent could not schedule a package registration for session {Param2}. The error code is {Param1}.

Fields #

NameDescription
Param2
Param1

Event ID 258: The Windows All-User Install Agent could not schedule a package registration for the user acccount {Param1}\{Param2} due to a security error.

#
Channel
Admin

Fields #

NameDescription
Param1
Param2

Event ID 259: The Windows All-User Install Agent could not register the package named {Param1} for the user account {Param2}\{Param3}.

#
Channel
Admin

Description

The Windows All-User Install Agent could not register the package named {Param1} for the user account {Param2}\{Param3}. The error code is {Param4}.

Message #

The Windows All-User Install Agent could not register the package named {Param1} for the user account {Param2}\{Param3}. The error code is {Param4}.

Fields #

NameDescription
Param1
Param2
Param3
Param4

Event ID 260: The Windows All-User Install Agent successfully registered the package named {Param1} for the user account {Param2}\{Param3}.

#
Channel
Admin

Fields #

NameDescription
Param1
Param2
Param3

Event ID 261: The Windows All-User Install Agent could not retrieve user information from session {Param2}.

#
Channel
Admin

Description

The Windows All-User Install Agent could not retrieve user information from session {Param2}. The package will not be updated. The error code is {Param1}.

Message #

The Windows All-User Install Agent could not retrieve user information from session {Param2}. The package will not be updated. The error code is {Param1}.

Fields #

NameDescription
Param2
Param1

Event ID 1280: The Windows All-User Install Agent started registering the package named {Param1} for the user account {Param2}\{Param3}.

#
Channel
Admin

Fields #

NameDescription
Param1
Param2
Param3

Event ID 1281: The Windows All-User Install Agent successfully registered the package named {Param1} for the user account {Param2}\{Param3}.

#
Channel
Admin

Description

The Windows All-User Install Agent successfully registered the package named {Param1} for the user account {Param2}\{Param3}. The registration took {Param4} milliseconds.

Message #

The Windows All-User Install Agent successfully registered the package named {Param1} for the user account {Param2}\{Param3}. The registration took {Param4} milliseconds.

Fields #

NameDescription
Param1
Param2
Param3
Param4

Event ID 1282: The Windows All-User Install Agent could not register the package named {Param1} for the user account {Param2}\{Param3}.

#
Channel
Admin

Description

The Windows All-User Install Agent could not register the package named {Param1} for the user account {Param2}\{Param3}. The status is {Param4}. The registration attempt took {Param5} milliseconds.

Message #

The Windows All-User Install Agent could not register the package named {Param1} for the user account {Param2}\{Param3}. The status is {Param4}. The registration attempt took {Param5} milliseconds.

Fields #

NameDescription
Param1
Param2
Param3
Param4
Param5

Event ID 1283: The Windows All-User Install Agent retrieved {Param1} packages for the user account {Param2}\{Param3} in {Param4} milliseconds.

#
Channel
Admin

Fields #

NameDescription
Param1
Param2
Param3
Param4

Event ID 1284: The Windows All-User Install Agent registered {Param1} packages for the user account {Param2}\{Param3} in {Param4} milliseconds.

#
Channel
Admin

Fields #

NameDescription
Param1
Param2
Param3
Param4

Event ID 1286: The Windows All-User Install Agent recovery request for the user account {Param1}\{Param2} failed with the following error code: {Param3}.

#
Channel
Admin

Fields #

NameDescription
Param1
Param2
Param3

Event ID 1287: A profile deletion triggered the Windows All-User Install Agent to uninstall all packages for the user profile Param1.

#
Channel
Admin

Message #

A profile deletion triggered the Windows All-User Install Agent to uninstall all packages for the user profile %1.

Fields #

NameDescription
Param1 UnicodeString

Event ID 1288: The Windows All-User Install Agent could not remove PackageMoniker packages during the profile deletion of the user profile UserSid.

#
Channel
Admin

Description

The Windows All-User Install Agent could not remove PackageMoniker packages during the profile deletion of the user profile UserSid. The error code is Error.

Message #

The Windows All-User Install Agent could not remove %1 packages during the profile deletion of the user profile %2. The error code is %3.

Fields #

NameDescription
PackageMoniker UnicodeString
UserSid UnicodeString
Error HexInt32

Event ID 1289: The Windows All-User Install Agent detected an invalid user SID {UserSid}.

#
Channel
Admin

Description

The Windows All-User Install Agent detected an invalid user SID {UserSid}. All packages associated with this user SID will be unregistered. The error code is {Error}.

Message #

The Windows All-User Install Agent detected an invalid user SID {UserSid}. All packages associated with this user SID will be unregistered. The error code is {Error}.

Fields #

NameDescription
UserSid
Error

Event ID 1290: The Windows All-User Install Agent could not unregister an application.

#
Channel
Admin

Description

The Windows All-User Install Agent could not unregister an application. The error code is {Error}.

Message #

The Windows All-User Install Agent could not unregister an application. The error code is {Error}.

Fields #

NameDescription
Error

Event ID 1291: The Windows All-User Install Agent cannot determine if user SID {UserSid} is a valid user account.

#
Channel
Admin

Description

The Windows All-User Install Agent cannot determine if user SID {UserSid} is a valid user account. The error code is {Error}.

Message #

The Windows All-User Install Agent cannot determine if user SID {UserSid} is a valid user account. The error code is {Error}.

Fields #

NameDescription
UserSid
Error

Event ID 1292: The Windows All-User Install Agent cannot determine if user SID {UserSid} is a valid user account.

#
Channel
Admin

Description

The Windows All-User Install Agent cannot determine if user SID {UserSid} is a valid user account. The Windows All-User Install Agent will try again later.

Message #

The Windows All-User Install Agent cannot determine if user SID {UserSid} is a valid user account. The Windows All-User Install Agent will try again later.

Fields #

NameDescription
UserSid

Event ID 1293: The Windows All-User Install Agent detected that the user account {DomainName}\{AccountName} has been assigned a temporary or mandatory profile.

#
Channel
Admin

Message #

The Windows All-User Install Agent detected that the user account {DomainName}\{AccountName} has been assigned a temporary or mandatory profile. Ensure that packages can be registered for temporary or mandatory profiles by using Group Policy.

Fields #

NameDescription
DomainName
AccountName

Event ID 1294: The Windows All-User Install Agent starts package registration for user account {DomainName}\{AccountName} because of recovery action; detail code ...

#
Channel
Admin

Description

The Windows All-User Install Agent starts package registration for user account {DomainName}\{AccountName} because of recovery action; detail code is {DetailCode}.

Message #

The Windows All-User Install Agent starts package registration for user account {DomainName}\{AccountName} because of recovery action; detail code is {DetailCode}.

Fields #

NameDescription
DomainName
AccountName
DetailCode

Event ID 1295: The Windows All-User Install Agent starts package registration for user account {DomainName}\{AccountName} because of new or updated application; d...

#
Channel
Admin

Description

The Windows All-User Install Agent starts package registration for user account {DomainName}\{AccountName} because of new or updated application; detail code is {DetailCode}.

Message #

The Windows All-User Install Agent starts package registration for user account {DomainName}\{AccountName} because of new or updated application; detail code is {DetailCode}.

Fields #

NameDescription
DomainName
AccountName
DetailCode

Event ID 1296: The Windows All-User Install Agent starts package registration for user account {DomainName}\{AccountName} because of user has been assigned a temp...

#
Channel
Admin

Message #

The Windows All-User Install Agent starts package registration for user account {DomainName}\{AccountName} because of user has been assigned a temporary or mandatory profile; detail code is {DetailCode}.

Fields #

NameDescription
DomainName
AccountName
DetailCode

Event ID 1297: The Windows All-User Install Agent could not update timestamp for user user account {DomainName}\{AccountName}.

#
Channel
Admin

Description

The Windows All-User Install Agent could not update timestamp for user user account {DomainName}\{AccountName}. The error code is {Error}.

Message #

The Windows All-User Install Agent could not update timestamp for user user account {DomainName}\{AccountName}. The error code is {Error}.

Fields #

NameDescription
DomainName
AccountName
Error

Event ID 1298: Start the Windows All-User Install Agent to update packages for the user on session {SessId}.

#
Channel
Admin

Description

Start the Windows All-User Install Agent to update packages for the user on session {SessId}. The detail code is {DetailCode}.

Message #

Start the Windows All-User Install Agent to update packages for the user on session {SessId}. The detail code is {DetailCode}.

Fields #

NameDescription
SessId
DetailCode

Event ID 1300: The Windows All-User Install Agent could not delete the registered packages after the profile was deleted for user SID Additional_information.

#
Channel
Admin

Description

The Windows All-User Install Agent could not delete the registered packages after the profile was deleted for user SID Additional_information. Error code: UserSid. Additional information: Error.

Message #

The Windows All-User Install Agent could not delete the registered packages after the profile was deleted for user SID %1. Error code: %2.  Additional information: %3.

Fields #

NameDescription
UserSid UnicodeString
Error HexInt32
location Int32

Event ID 1301: The Windows All-User Install Agent detected an attempt to delete a temporary or mandatory profile for user SID Param1.

#
Channel
Admin

Description

The Windows All-User Install Agent detected an attempt to delete a temporary or mandatory profile for user SID Param1. Package information for the user will be reset.

Message #

The Windows All-User Install Agent detected an attempt to delete a temporary or mandatory profile for user SID %1. Package information for the user will be reset.

Fields #

NameDescription
Param1 UnicodeString

Event ID 1302: The Windows All-User Install Agent will delete NumberOfPackages packages for user SID UserSid because the profile was deleted.

#
Channel
Admin

Message #

The Windows All-User Install Agent will delete %1 packages for user SID %2 because the profile was deleted.

Fields #

NameDescription
NumberOfPackages Int32
UserSid UnicodeString

Event ID 1303: The Windows All-User Install Agent could not retrieve a list of packages for user SID UserSid.

#
Channel
Admin

Description

The Windows All-User Install Agent could not retrieve a list of packages for user SID UserSid. The error code is Error.

Message #

The Windows All-User Install Agent could not retrieve a list of packages for user SID %1. The error code is %2.

Fields #

NameDescription
UserSid UnicodeString
Error HexInt32

Event ID 1304: The Windows All-User Install Agent will delete package Package for user SID UserSid because the profile was deleted.

#
Channel
Admin

Message #

The Windows All-User Install Agent will delete package %1 for user SID %2 because the profile was deleted.

Fields #

NameDescription
Package UnicodeString
UserSid UnicodeString

Event ID 1305: GetApplicability API failed to determine status of package Package.

#
Channel
Admin

Description

GetApplicability API failed to determine status of package Package. The error code is Error.

Message #

GetApplicability API failed to determine status of package %1. The error code is %2.

Fields #

NameDescription
Package UnicodeString
Error HexInt32

Event ID 1306: GetApplicability API has determined that package Package is either NotInstallable or RequiresReinstall.

#
Channel
Admin

Description

GetApplicability API has determined that package Package is either NotInstallable or RequiresReinstall. The detail code is Error.

Message #

GetApplicability API has determined that package %1 is either NotInstallable or RequiresReinstall. The detail code is %2.

Fields #

NameDescription
Package UnicodeString
Error HexInt32

Event ID 1307: Dependent Package Package is already installed, registration will be skipped.

#
Channel
Admin

Message #

Dependent Package %1 is already installed, registration will be skipped.

Fields #

NameDescription
Package UnicodeString

Event ID 1312: Package registration is not required for user account {Param1}\{Param2}.

#
Channel
Admin

Fields #

NameDescription
Param1
Param2

Event ID 1313: The Windows All-User Install Agent is no longer waiting to register a package for user account {Param1}\{Param2}.

#
Channel
Admin

Description

The Windows All-User Install Agent is no longer waiting to register a package for user account {Param1}\{Param2}. The error code is {Param3}.

Message #

The Windows All-User Install Agent is no longer waiting to register a package for user account {Param1}\{Param2}. The error code is {Param3}.

Fields #

NameDescription
Param1
Param2
Param3

Event ID 1314: The Windows All-User Install Agent is waiting to register a package for user account {Param1}\{Param2}.

#
Channel
Admin

Fields #

NameDescription
Param1
Param2

Event ID 1536: The Windows All-User Install Agent could not update the registration status for the package named {AppXPackage} for the user account {UserDomain}\{...

#
Channel
Admin

Description

The Windows All-User Install Agent could not update the registration status for the package named {AppXPackage} for the user account {UserDomain}\{UserAccount}. The error code is {Error}.

Message #

The Windows All-User Install Agent could not update the registration status for the package named {AppXPackage} for the user account {UserDomain}\{UserAccount}. The error code is {Error}.

Fields #

NameDescription
AppXPackage
UserDomain
UserAccount
Error

Event ID 1537: The Windows All-User Install Agent could not to retrieve a list of packages for the user account {UserDomain}\{UserAccount}.

#
Channel
Admin

Description

The Windows All-User Install Agent could not to retrieve a list of packages for the user account {UserDomain}\{UserAccount}. The error code is {Error}.

Message #

The Windows All-User Install Agent could not to retrieve a list of packages for the user account {UserDomain}\{UserAccount}. The error code is {Error}.

Fields #

NameDescription
UserDomain
UserAccount
Error

Provenance

ETW provider GUID d2e990da-8504-4702-a5e5-367fc2f823bf

Defined in RDSAppXHelper.dll, which carries the event manifest.

  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.4767, captured 2026-06-02 — Manifest XML pack, 1.9 MB
  • Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1150, captured 2026-06-02 — Manifest XML pack, 2.0 MB