Microsoft-Windows-AppXDeployment-Server
Event ID 300: error ErrorCode: Cannot register the PackageName package due to the following error: ErrorText.
#Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | |
ErrorText UnicodeString | 1 package due to the following error. |
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 300,
"version": 0,
"level": 2,
"task": 1,
"opcode": 0,
"keywords": 4611686018427387908,
"time_created": "2023-11-06T06:22:35.295778+00:00",
"event_record_id": 5850,
"correlation": {
"ActivityID": "626F7C94-1079-0002-5E87-6F627910DA01"
},
"execution": {
"process_id": 1532,
"thread_id": 1636
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageName": "MicrosoftWindows.Client.FileExp_cw5n1h2txyewy",
"ErrorText": "Package could not be registered.\r\n",
"ErrorCode": "0x80073cf6"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 301: error {ErrorCode}: Cannot update the {PackageName} package due to the following error: {ErrorText}.
#Fields #
| Name | Description |
|---|---|
ErrorCode | |
PackageName | |
ErrorText |
Event ID 302: error ErrorCode: Cannot de-register the PackageName package due to the following error: ErrorText.
#Event ID 303: error ErrorCode: While preparing to process the request, the system failed to register the CategoryName extension due to the following error: ErrorMessage.
#Message #
Fields #
| Name | Description |
|---|---|
ErrorCode HexInt32 | |
ErrorMessage UnicodeString | |
CategoryName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 303,
"version": 0,
"level": 2,
"task": 1,
"opcode": 0,
"keywords": 4611686018427387908,
"time_created": "2026-02-12T04:54:20.729813+00:00",
"event_record_id": 10546,
"correlation": {
"ActivityID": "43A6D212-9A2A-0003-5B5E-AA432A9ADC01"
},
"execution": {
"process_id": 9772,
"thread_id": 11928
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"ErrorCode": "0x80070422",
"ErrorMessage": "The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.\r\n",
"CategoryName": "windows.webAccountProvider"
},
"message": ""
}
Event ID 304: error {ErrorCode}: While preparing to update the {PackageName} package; the system failed to register the {CategoryName} extension due to the follo...
#Event ID 305: ErrorCode: While preparing to register the request, the system failed to register the CategoryName extension due to the following error: ErrorMessage.
#Event ID 306: error ErrorCode: While processing the request, the system failed to register the CategoryName extension due to the following error: ErrorMessage.
#Message #
Fields #
| Name | Description |
|---|---|
ErrorCode HexInt32 | |
ErrorMessage UnicodeString | 3 extension due to the following error. |
CategoryName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 306,
"version": 0,
"level": 2,
"task": 1,
"opcode": 0,
"keywords": 4611686018427387908,
"time_created": "2023-11-06T06:22:35.293410+00:00",
"event_record_id": 5848,
"correlation": {
"ActivityID": "626F7C94-1079-0002-5E87-6F627910DA01"
},
"execution": {
"process_id": 1532,
"thread_id": 1636
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"ErrorCode": "0x800706d9",
"ErrorMessage": "There are no more endpoints available from the endpoint mapper.\r\n",
"CategoryName": "windows.firewall"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 307: error {ErrorCode}: While updating the {PackageName} package; the system failed to register the {CategoryName} extension due to the following error:...
#Event ID 310: error ErrorCode: Cannot register the request because the following error was encountered while initializing the CategoryName extension: ErrorMessage.
#Event ID 311: error ErrorCode : Cannot register the request because the following error was encountered while creating the CategoryName extension: ErrorMessage.
#Event ID 312: Injected a failure on evaluate due to the following error: ErrorMessage (ErrorCode).
#Event ID 313: Injected a failure on commit due to the following error: ErrorMessage (ErrorCode).
#Event ID 314: error ErrorCode: While removing the request, the system failed to de-register the CategoryName extension due to the following error: ErrorMessage.
#Event ID 315: error ErrorCode: While reverting the request, the system failed to de-register the CategoryName extension due to the following error: ErrorMessage.
#Event ID 316: error ErrorCode: Cannot register the request because the following error was encountered during the registration of the CategoryName extension: ErrorMessage.
#Message #
Fields #
| Name | Description |
|---|---|
ErrorCode HexInt32 | |
ErrorMessage UnicodeString | 3 extension. |
CategoryName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 316,
"version": 0,
"level": 2,
"task": 1,
"opcode": 0,
"keywords": 4611686018427387908,
"time_created": "2023-11-06T06:22:35.293572+00:00",
"event_record_id": 5849,
"correlation": {
"ActivityID": "626F7C94-1079-0002-5E87-6F627910DA01"
},
"execution": {
"process_id": 1532,
"thread_id": 1636
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"ErrorCode": "0x800706d9",
"ErrorMessage": "There are no more endpoints available from the endpoint mapper.\r\n",
"CategoryName": "windows.firewall"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 317: {FileName}({Line};{Column}): warning: The '{ExtensionName}' extension category in the {PackageName} package is unrecognized.
#Fields #
| Name | Description |
|---|---|
FileName | |
Line | |
Column | |
ExtensionName | |
PackageName |
Event ID 318: error ErrorCode: Cannot register the PackageName package because the following error was encountered while determining the level of trust for the package: ErrorText.
#Event ID 319: error ErrorCode: Cannot register the PackageName package because the following error was encountered: ErrorText.
#Description
error ErrorCode: Cannot register the PackageName package because the following error was encountered: ErrorText. Verify that the package's 'resources.pri' file in the package is valid.
Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | |
ErrorText UnicodeString | |
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 319,
"version": 0,
"level": 2,
"task": 1,
"opcode": 0,
"keywords": 4611686018427387908,
"time_created": "2026-02-10T04:22:14.026925+00:00",
"event_record_id": 8269,
"correlation": {
"ActivityID": "43A6D212-9A2A-0002-C886-A7432A9ADC01"
},
"execution": {
"process_id": 5816,
"thread_id": 6428
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageName": "microsoft.windowscommunicationsapps_16005.14326.22342.0_x64__8wekyb3d8bbwe",
"ErrorText": "The volume for a file has been externally altered so that the opened file is no longer valid.\r\n",
"ErrorCode": "0x800703ee"
},
"message": ""
}
Event ID 320: error ErrorCode: Cannot register the PackageName package because the following error was encountered while determining whether the package identity is valid: ErrorText.
#Event ID 321: error ErrorCode: Cannot register the PackageName package because the following error was encountered while determining the package's root location: ErrorText.
#Event ID 322: error ErrorCode: Cannot register the PackageName package because the following error was encountered while trying to read the package: ErrorText.
#Event ID 323: error ErrorCode: Cannot register the PackageName package because the following error was encountered while reading the package repository: ErrorText.
#Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | |
ErrorText UnicodeString | |
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 323,
"version": 0,
"level": 2,
"task": 1,
"opcode": 0,
"keywords": 4611686018427387908,
"time_created": "2026-03-11T19:32:55.985671+00:00",
"event_record_id": 13292,
"correlation": {
"ActivityID": "164E10E5-B120-0009-6BC0-4E1620B1DC01"
},
"execution": {
"process_id": 4756,
"thread_id": 7764
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageName": "PythonSoftwareFoundation.Python.3.13_3.13.3312.0_x64__qbz5n2kfra8p0",
"ErrorText": "Element not found.\r\n",
"ErrorCode": "0x80070490"
},
"message": ""
}
Event ID 324: error ErrorCode: Failed to load the extension DLL due to the following error: ErrorMessage.
#Event ID 325: error ErrorCode: While preparing to process the request, the system failed to register the CategoryName extension due to the following error: ErrorMessage.
#Message #
Fields #
| Name | Description |
|---|---|
ErrorCode HexInt32 | |
ErrorMessage UnicodeString | |
CategoryName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 325,
"version": 0,
"level": 3,
"task": 1,
"opcode": 0,
"keywords": 4611686018427387908,
"time_created": "2026-03-21T03:01:35.0861189+00:00",
"event_record_id": 14093,
"correlation": {
"ActivityID": "{520A1857-B89C-0002-92AB-0A529CB8DC01}"
},
"execution": {
"process_id": 1028,
"thread_id": 4108
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "JD-WIN11-22H2-1.ludus.domain",
"security": {
"user_id": "S-1-5-21-3407486967-1585450050-1838039599-1000"
}
},
"event_data": {
"ErrorCode": "0x80070005",
"ErrorMessage": "Access is denied.\n",
"CategoryName": "windows.indexedDB"
},
"message": "error 0x80070005: While preparing to process the request, the system failed to register the windows.indexedDB extension due to the following error: Access is denied.\r\n."
}
Event ID 326: error {ErrorCode}: While preparing to update the {PackageName} package; the system failed to register the {CategoryName} extension due to the follo...
#Event ID 327: ErrorCode: While preparing to register the request, the system failed to register the CategoryName extension due to the following error: ErrorMessage.
#Event ID 328: error ErrorCode: While processing the request, the system failed to register the CategoryName extension due to the following error: ErrorMessage.
#Event ID 329: error {ErrorCode}: While updating the {PackageName} package; the system failed to register the {CategoryName} extension due to the following error:...
#Event ID 330: error ErrorCode: While removing the request, the system failed to de-register the CategoryName extension due to the following error: ErrorMessage.
#Message #
Fields #
| Name | Description |
|---|---|
ErrorCode HexInt32 | |
ErrorMessage UnicodeString | 3 extension due to the following error. |
CategoryName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 330,
"version": 0,
"level": 3,
"task": 1,
"opcode": 0,
"keywords": 4611686018427387908,
"time_created": "2026-06-13T15:11:01.5664696+00:00",
"event_record_id": 12696,
"correlation": {
"ActivityID": "{C62F76BC-EF88-000B-1D7C-32C688EFDC01}"
},
"execution": {
"process_id": 5788,
"thread_id": 3340
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-W11-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"ErrorCode": "0x80070005",
"ErrorMessage": "Access is denied.\n",
"CategoryName": "windows.indexedDB"
},
"message": "error 0x80070005: While removing the request, the system failed to de-register the windows.indexedDB extension due to the following error: Access is denied.\r\n."
}
Event ID 331: error ErrorCode: While reverting the request, the system failed to de-register the CategoryName extension due to the following error: ErrorMessage.
#Event ID 332: error ErrorCode: Cannot register the request because the following error was encountered during the registration of the CategoryName extension: ErrorMessage.
#Event ID 333: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package because the following error was encountered while determining whether the ExtendedData string resource co...
#Description
FileName(Line,Column): error ErrorCode: Cannot register the PackageName package because the following error was encountered while determining whether the ExtendedData string resource could be localized: ErrorText. Check that the string resource is defined and that there is at least one instance defined in the resources.pri file contained in this package.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString | |
ErrorText UnicodeString | |
ExtendedData UnicodeString |
Event ID 334: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package because the following error was encountered while determining whether the ExtendedData file resource coul...
#Description
FileName(Line,Column): error ErrorCode: Cannot register the PackageName package because the following error was encountered while determining whether the ExtendedData file resource could be localized: ErrorText. Check sure that the file resource is defined and that there exists at least one instance defined in the resources.pri file contained in this package.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString | |
ErrorText UnicodeString | |
ExtendedData UnicodeString |
Event ID 335: error ErrorCode: An unexpected error occurred while refreshing the shell after a fileType association or protocol change.
#Event ID 336: AppXDeployment.Task.Server.OSIM336
#Event ID 337: AppXDeployment.Task.Server.OSIM337
#Event ID 338: error ErrorCode: An unexpected error occurred while refreshing the shell after a fileType association or protocol change.
#Event ID 339: Registration will process the {ListType} extensions in the following order: {ExtensionsExecutionOrder}.
#Fields #
| Name | Description |
|---|---|
ListType | |
ExtensionsExecutionOrder |
Event ID 340: Registration has successfully created the following extensions on Package PackageName: ExtensionsCategoryNames.
#Event ID 341: Cannot open manifest file for package PackageFullName (ErrorCode).
#Event ID 342: The current impersonation for 1RunAsSystem(RunAsSystem:DehName) is invalid, we will correct it.
#Event ID 343: Cannot open manifest file for package PackageFullName (ErrorCode).
#Event ID 400: Deployment DeploymentOperation operation with target volume MountPoint on Package PackageFullName from: Path finished successfully.
#Message #
Fields #
| Name | Description | Rules |
|---|---|---|
DeploymentOperation UInt32 | ||
PackageFullName UnicodeString | 2 detection rules | |
Path UnicodeString | 2 from. | |
MountPoint UnicodeString | ||
TargetPlatform HexInt32 | ||
SystemVolume Boolean | ||
StorageId UnicodeString | ||
IsCentennial Boolean | ||
PackageType HexInt32 | ||
IsPackageEncrypted Boolean | ||
DeploymentOptions HexInt64 | ||
IsStreamingPackage Boolean | ||
IsInRelatedSet Boolean | ||
IsPackageUsingBDC Boolean | ||
MainPackageFamilyName UnicodeString | ||
CallingProcess UnicodeString | 2 detection rules | |
IsOptional Boolean | ||
PackageFlags HexInt32 | ||
PackageFlags2 HexInt32 | ||
HasWin32alacarte Boolean | ||
HasFullTrust Boolean | 2 detection rules | |
ExternalLocation UnicodeString | ||
PackageSourceUri UnicodeString | 6 detection rules | |
PackageDisplayName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 400,
"version": 0,
"level": 4,
"task": 3,
"opcode": 2,
"keywords": 4611686018427387905,
"time_created": "2026-06-13T05:45:51.0302554+00:00",
"event_record_id": 1807,
"correlation": {
"ActivityID": "{C6821FB2-EF88-0003-695B-82C688EFDC01}"
},
"execution": {
"process_id": 1492,
"thread_id": 7976
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"DeploymentOperation": "4",
"PackageFullName": "Microsoft.MicrosoftEdge.Stable_149.0.4022.62_neutral__8wekyb3d8bbwe",
"Path": " (identity_helper.Sparse.stable.msix) ",
"MountPoint": "C:",
"TargetPlatform": "0x0",
"SystemVolume": "true",
"StorageId": "\\\\?\\Volume{77ac4d73-0000-0000-0000-100000000000}",
"IsCentennial": "true",
"PackageType": "0x1",
"IsPackageEncrypted": "false",
"DeploymentOptions": "0x40000000040000",
"IsStreamingPackage": "false",
"IsInRelatedSet": "false",
"IsPackageUsingBDC": "false",
"MainPackageFamilyName": "NULL",
"CallingProcess": "setup.exe",
"IsOptional": "false",
"PackageFlags": "0x2b0004c",
"PackageFlags2": "0x0",
"HasWin32alacarte": "true",
"HasFullTrust": "true",
"ExternalLocation": "Application",
"PackageSourceUri": "file:///C:/Program%20Files%20(x86)/Microsoft/Edge/Application/149.0.4022.62/identity_proxy/win10/identity_helper.Sparse.stable.msix",
"PackageDisplayName": "Microsoft Edge"
},
"message": "Deployment Stage operation with target volume C: on Package Microsoft.MicrosoftEdge.Stable_149.0.4022.62_neutral__8wekyb3d8bbwe from: (identity_helper.Sparse.stable.msix) finished successfully."
}
Common Indicators #
Field/value combinations most frequently checked by detection rules targeting this event, derived from cross-vendor predicate analysis.
| Field | Kind | Value | Rules | Vendors |
|---|---|---|---|---|
HasFullTrust | eq | true | 2 rules | sigma, splunk |
Detection Rules #
Full rule details for this event, including ATT&CK technique mappings and native queries →Sigma # view in coverage
T1204, T1204.002, T1553, T1553.005Splunk # view in coverage
T1204, T1204.002, T1553, T1553.005
Event ID 401: Deployment DeploymentOperation operation with target volume MountPoint on Package PackageFullName from: Path failed with error ErrorCode.
#Description
Deployment DeploymentOperation operation with target volume MountPoint on Package PackageFullName from: Path failed with error ErrorCode. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
Message #
Fields #
| Name | Description | Rules |
|---|---|---|
DeploymentOperation UInt32 | ||
PackageFullName UnicodeString | ||
Path UnicodeString | 2 from. | |
ErrorCode HexInt32 | 1 detection rule | |
MountPoint UnicodeString | ||
TargetPlatform HexInt32 | ||
SystemVolume Boolean | ||
StorageId UnicodeString | ||
IsCentennial Boolean | ||
PackageType HexInt32 | ||
IsPackageEncrypted Boolean | ||
DeploymentOptions HexInt64 | ||
IsStreamingPackage Boolean | ||
IsInRelatedSet Boolean | ||
IsPackageUsingBDC Boolean | ||
MainPackageFamilyName UnicodeString | ||
CallingProcess UnicodeString | ||
IsInPlaceUpdate HexInt32 | ||
ErrorFileInfo UnicodeString | ||
DetailedMessageInfo UnicodeString | ||
RollbackErrorFileInfo UnicodeString | ||
RollbackDetailedMessageInfo UnicodeString | ||
IsOptional UInt32 | ||
PackageFlags HexInt32 | ||
PackageFlags2 HexInt32 | ||
HasWin32alacarte Boolean | ||
HasFullTrust Boolean | ||
ExternalLocation UnicodeString | ||
PackageSourceUri UnicodeString | ||
PackageDisplayName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 401,
"version": 0,
"level": 2,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-06-13T05:45:51.1408651+00:00",
"event_record_id": 1817,
"correlation": {
"ActivityID": "{C6821FB2-EF88-0004-9642-82C688EFDC01}"
},
"execution": {
"process_id": 1492,
"thread_id": 7976
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"DeploymentOperation": "29",
"PackageFullName": "Microsoft.MicrosoftEdge.Stable_149.0.4022.62_neutral__8wekyb3d8bbwe",
"Path": "",
"ErrorCode": "0x80070032",
"MountPoint": "C:",
"TargetPlatform": "0xffffffff",
"SystemVolume": "true",
"StorageId": "\\\\?\\Volume{77ac4d73-0000-0000-0000-100000000000}",
"IsCentennial": "false",
"PackageType": "0x0",
"IsPackageEncrypted": "false",
"DeploymentOptions": "0x0",
"IsStreamingPackage": "false",
"IsInRelatedSet": "false",
"IsPackageUsingBDC": "false",
"MainPackageFamilyName": "NULL",
"CallingProcess": "setup.exe",
"IsInPlaceUpdate": "0x0",
"ErrorFileInfo": "indexingstatehandler.cpp,5024,80070032;indexingstatehandler.cpp,6261,80070032;deploymentmanager.cpp,246,80070032;deploymentrequest.cpp,1864,80070032;deploymentrequest.cpp,2080,80070032;",
"DetailedMessageInfo": "NULL",
"RollbackErrorFileInfo": "NULL",
"RollbackDetailedMessageInfo": "NULL",
"IsOptional": "0",
"PackageFlags": "0x0",
"PackageFlags2": "0x0",
"HasWin32alacarte": "false",
"HasFullTrust": "false",
"ExternalLocation": "",
"PackageSourceUri": "",
"PackageDisplayName": ""
},
"message": "Deployment ProvisionPackageOperation operation with target volume C: on Package Microsoft.MicrosoftEdge.Stable_149.0.4022.62_neutral__8wekyb3d8bbwe from: failed with error 0x80070032. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues."
}
Detection Rules #
Full rule details for this event, including ATT&CK technique mappings and native queries →Sigma # view in coverage
Event ID 402: error ErrorCode: Reading manifest from location: ManifestPath failed with error: ErrorString.
#Event ID 403: error ErrorCode: Failure to get staging session for: PackageUri.
#Message #
Fields #
| Name | Description |
|---|---|
PackageUri UnicodeString | |
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 403,
"version": 0,
"level": 2,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-02-12T20:24:35.162238+00:00",
"event_record_id": 11214,
"correlation": {
"ActivityID": "43A6D212-9A2A-0001-3288-B0432A9ADC01"
},
"execution": {
"process_id": 14100,
"thread_id": 11380
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageUri": "x-windowsupdate://EA1E7865-B1C0-4B4D-B60D-0E9FD48CEA66/60D317C1-21B3-4F94-B5BB-52126864802F/e8fb2e40d2c429ac45d91d1b94069deabca59c6f",
"ErrorCode": "0x8000000b"
},
"message": ""
}
Event ID 404: AppX Deployment operation failed for package PackageFullName with error ErrorCode.
#Description
AppX Deployment operation failed for package PackageFullName with error ErrorCode. The specific error text for this failure is: SummaryError.
Message #
Fields #
| Name | Description |
|---|---|
SummaryError UnicodeString | 3. The specific error text for this failure is. |
PackageFullName UnicodeString | |
ErrorCode HexInt32 | |
MountPoint UnicodeString | |
TargetPlatform HexInt32 | |
CallingProcess UnicodeString | |
ExternalLocation UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 404,
"version": 0,
"level": 2,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-06-13T05:45:51.1418780+00:00",
"event_record_id": 1818,
"correlation": {
"ActivityID": "{C6821FB2-EF88-0004-9642-82C688EFDC01}"
},
"execution": {
"process_id": 1492,
"thread_id": 7976
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"SummaryError": "Windows can't provision the package Microsoft.MicrosoftEdge.Stable_149.0.4022.62_neutral__8wekyb3d8bbwe because it is an unsupported package type.",
"PackageFullName": "Microsoft.MicrosoftEdge.Stable_149.0.4022.62_neutral__8wekyb3d8bbwe",
"ErrorCode": "0x80070032",
"MountPoint": "C:",
"TargetPlatform": "0xffffffff",
"CallingProcess": "setup.exe",
"ExternalLocation": ""
},
"message": "AppX Deployment operation failed for package Microsoft.MicrosoftEdge.Stable_149.0.4022.62_neutral__8wekyb3d8bbwe with error 0x80070032. The specific error text for this failure is: Windows can't provision the package Microsoft.MicrosoftEdge.Stable_149.0.4022.62_neutral__8wekyb3d8bbwe because it is an unsupported package type."
}
Event ID 405: error ErrorCode: Opening file from location: ManifestPath failed with error: ErrorString.
#Event ID 406: Windows cannot register the package PackageName because the specified value from the DeploymentOptions enumeration is DevelopmentMode.
#Description
Windows cannot register the package PackageName because the specified value from the DeploymentOptions enumeration is DevelopmentMode. DevelopmentMode is not allowed when registering framework or resource packages. If this is meant to be an app package, remove the framework or resource attribute from the properties element in the AppXManifest.xml. Otherwise, do not specify DevelopmentMode.
Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 407: The current user has already installed an unpackaged version of this app.
#Event ID 408: Another user has already installed an unpackaged version of this app.
#Description
Another user has already installed an unpackaged version of this app. The current user cannot replace this with a packaged version. The conflicting package is PackageName and it was published by PublisherName.
Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | |
PublisherName UnicodeString |
Event ID 409: The current user has already installed a packaged version of this app.
#Event ID 410: Another user has already installed a packaged version of this app.
#Event ID 411: Windows cannot install package PackageMoniker because this package requires a higher Windows version.
#Description
Windows cannot install package PackageMoniker because this package requires a higher Windows version. The package requested Windows version RequestedVersionMajor.RequestedVersionMinor with AppModel version RequestedVersionAppModel, while the current Windows version is OSVersionMajor.OSVersionMinor with AppModel version OSVersionAppModel.
Message #
Fields #
| Name | Description |
|---|---|
PackageMoniker UnicodeString | |
RequestedVersionMajor UInt32 | |
RequestedVersionMinor UInt32 | |
RequestedVersionAppModel UInt32 | |
OSVersionMajor UInt32 | |
OSVersionMinor UInt32 | |
OSVersionAppModel UInt32 |
Event ID 412: error ErrorCode: Deployment of package PackageFullName was blocked by AppLocker.
#Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 412,
"version": 0,
"level": 2,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-08-06T13:02:29.518379+00:00",
"event_record_id": 31496,
"correlation": {
"ActivityID": "09DA1D0D-259B-0007-B673-DA099B25DD01"
},
"execution": {
"process_id": 2108,
"thread_id": 4816
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "JD-WIN11-22H2-1.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"PackageFullName": "dwhappx.30cc483844f148f1becd46222caebce8_1.0.0.0_x64__3fzshd114epga",
"ErrorCode": "0x800704ec"
},
"message": ""
}
Detection Rules #
Full rule details for this event, including ATT&CK technique mappings and native queries →Sigma # view in coverage
Event ID 413: Deployment of package PackageFullName with package origin PackageOrigin failed because no valid license or sideloading policy could be applied.
#Description
Deployment of package PackageFullName with package origin PackageOrigin failed because no valid license or sideloading policy could be applied. A developer license (http://go.microsoft.com/fwlink/?LinkId=233074) or enterprise sideloading configuration (http://go.microsoft.com/fwlink/?LinkId=231020) may be required.
Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
PackageOrigin UInt32 |
Event ID 414: Checking whether deployment is in developer mode because package PackageFullName is unsigned.
#Event ID 415: The check for the origin of package PackageFullName returned SignatureOrigin origin.
#Event ID 416: The check for enterprise qualifications to approve package PackageFullName returned CheckResult.
#Event ID 417: The check for a developer license to approve package PackageFullName returned CheckResult.
#Event ID 418: error Error: The package filename being removed cannot be automatically closed; some part of the package may exist temporarily.
#Event ID 419: error Error: Unable to install because the following apps need to be closed filename.
#Message #
Fields #
| Name | Description |
|---|---|
filename UnicodeString | |
Error HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 419,
"version": 0,
"level": 2,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-06-13T08:26:56.0923856+00:00",
"event_record_id": 12474,
"correlation": {
"ActivityID": "{C62F76BC-EF88-0008-D97E-37C688EFDC01}"
},
"execution": {
"process_id": 10680,
"thread_id": 2636
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-W11-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1104"
}
},
"event_data": {
"filename": "Microsoft.YourPhone_0.26032.102.0_x64__8wekyb3d8bbwe",
"Error": "0x80073d02"
},
"message": "error 0x80073D02: Unable to install because the following apps need to be closed Microsoft.YourPhone_0.26032.102.0_x64__8wekyb3d8bbwe."
}
Event ID 420: Windows cannot install package {PackageName} because this package depends on another package that could not be found.
#Event ID 421: Package {PackageName} requires minimum version {DependencyMinVersion} of framework {DependencyName} published by {DependencyPublisher} to install.
#Description
Package {PackageName} requires minimum version {DependencyMinVersion} of framework {DependencyName} published by {DependencyPublisher} to install. The cross-architecture framework was not found.
Message #
Fields #
| Name | Description |
|---|---|
PackageName | |
DependencyMinVersion | |
DependencyName | |
DependencyPublisher |
Event ID 422: Windows cannot install framework PackageMoniker because it declares a dependency.
#Event ID 423: Windows cannot register package PackageMoniker because it is in development mode and the package is already installed.
#Description
Windows cannot register package PackageMoniker because it is in development mode and the package is already installed. Increment the version number of the package to be registered, or remove the old package for every user on the system before registering this package.
Message #
Fields #
| Name | Description |
|---|---|
PackageMoniker UnicodeString |
Event ID 424: Windows cannot remove framework PackageMoniker because package(s)PackageMoniker2 currently depends on the framework.
#Description
Windows cannot remove framework PackageMoniker because package(s)PackageMoniker2 currently depends on the framework. Removing all packages that depend on the framework automatically removes the framework.
Message #
Fields #
| Name | Description |
|---|---|
PackageMoniker UnicodeString | |
PackageMoniker2 UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 424,
"version": 0,
"level": 2,
"task": 4,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2023-10-25T22:53:47.809178+00:00",
"event_record_id": 4642,
"correlation": {
"ActivityID": "D5BBEBF4-0795-0002-BB13-BCD59507DA01"
},
"execution": {
"process_id": 5348,
"thread_id": 7452
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "WinDevEval",
"security": {
"user_id": "S-1-5-21-2533829718-189860685-2477588761-500"
}
},
"event_data": {
"PackageMoniker": "Microsoft.UI.Xaml.2.4_2.42007.9001.0_x64__8wekyb3d8bbwe",
"PackageMoniker2": " Microsoft.Windows.Photos"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 425: Windows cannot remove framework PackageMoniker because package(s)PackageMoniker2 currently depends on the framework.
#Description
Windows cannot remove framework PackageMoniker because package(s)PackageMoniker2 currently depends on the framework. Removing all packages that depend on the framework automatically removes the framework.
Message #
Fields #
| Name | Description |
|---|---|
PackageMoniker UnicodeString | |
PackageMoniker2 UnicodeString |
Event ID 427: Windows cannot install package PackageName because it has version PackageVersion.
#Description
Windows cannot install package PackageName because it has version PackageVersion. A higher version PackageVersion2 of this package is already installed.
Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | |
PackageVersion UnicodeString | |
PackageVersion2 UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 427,
"version": 0,
"level": 2,
"task": 4,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2023-11-05T22:29:17.055953+00:00",
"event_record_id": 7593,
"correlation": {
"ActivityID": "59A0D65F-1037-0001-E4F0-A0593710DA01"
},
"execution": {
"process_id": 5296,
"thread_id": 5800
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-21-1992711665-1655669231-58201500-1000"
}
},
"event_data": {
"PackageName": "Microsoft.VCLibs.140.00_14.0.30704.0_x64__8wekyb3d8bbwe",
"PackageVersion": "14.0.30704.0",
"PackageVersion2": "14.0.32530.0"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 428: Windows cannot install package PackageMoniker because package PackageMoniker2 was provided but not used.
#Event ID 429: Windows cannot install package PackageMoniker because a different package PackageMoniker2 with the same name is already installed.
#Event ID 430: Windows cannot update package PackageMoniker because the previous version is not installed.
#Event ID 431: Windows cannot install package PackageName because it depends on another package with the same name.
#Event ID 432: Windows cannot install package PackageName because the package requires architecture PackageArchitecture, but this computer has architecture MachineArchitecture.
#Event ID 433: Windows cannot remove non-qualified resource package PackageMoniker because package(s)PackageMoniker2 currently depends on the package.
#Event ID 434: Windows cannot install package {PackageName} because this package depends on another package that could not be found.
#Event ID 435: Package {PackageName} requires minimum version {DependencyMinVersion} of framework {DependencyName} published by {DependencyPublisher} to install.
#Event ID 436: Package {PackageName} requires minimum version {DependencyMinVersion} of framework {DependencyName} published by {DependencyPublisher} to install.
#Event ID 437: Windows cannot install resource package PackageMoniker because the app package it requires could not be found.
#Event ID 438: Framework PackageMoniker is no longer explicitly installed but remains implicitly installed because packages still depend on it.
#Description
Framework is no longer explicitly installed but remains implicitly installed because packages still depend on it. Windows will automatically remove the framework when no other packages depend on it.
Message #
Fields #
| Name | Description |
|---|---|
PackageMoniker UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 438,
"version": 0,
"level": 5,
"task": 4,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2023-10-25T22:54:15.216190+00:00",
"event_record_id": 4935,
"correlation": {
"ActivityID": "D5BBEBF4-0795-0001-E929-BCD59507DA01"
},
"execution": {
"process_id": 5348,
"thread_id": 7452
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "WinDevEval",
"security": {
"user_id": "S-1-5-21-2533829718-189860685-2477588761-500"
}
},
"event_data": {
"PackageMoniker": "Microsoft.UI.Xaml.2.7_7.2208.15002.0_x86__8wekyb3d8bbwe"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 439: Windows cannot install the bundle because the resource Id of the resource package PackageMoniker is invalid as it is the same as the resource id of the main pa...
#Event ID 440: Package PackageFullName with SignatureOrigin origin cannot be sideloaded or installed using developer mode option.
#Event ID 441: The package deployment operation is blocked by the "Allow deployment operations in special profiles" policy.
#Detection Rules #
Full rule details for this event, including ATT&CK technique mappings and native queries →Sigma # view in coverage
Event ID 442: Deployment of package PackageFullName to volume MountPoint failed because deployments to non-system volumes are blocked by the "Disable deployment of Windows Store apps...
#Description
Deployment of package PackageFullName to volume MountPoint failed because deployments to non-system volumes are blocked by the "Disable deployment of Windows Store apps to non-system volumes" policy.
Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
MountPoint UnicodeString |
Detection Rules #
Full rule details for this event, including ATT&CK technique mappings and native queries →Sigma # view in coverage
Event ID 443: Failed to initialize a MRT resource manager for the inbox application: PackageFullName and file path: FilePath .
#Event ID 444: Failed to initialize a MRT resource manager for the package: PackageFullName and file path: FilePath .
#Event ID 445: GetFullyQualifiedReference from the File Resource Map for package full name: {PackageFullName} and reference string: {ReferenceString} failed.
#Fields #
| Name | Description |
|---|---|
PackageFullName | |
ReferenceString |
Event ID 446: GetFullyQualifiedReference from the Main Resource Map for package full name: {PackageFullName} and reference string: {ReferenceString} failed.
#Fields #
| Name | Description |
|---|---|
PackageFullName | |
ReferenceString |
Event ID 447: GetFullyQualifiedReference from the String Resource Map for package full name: {PackageFullName} and reference string: {ReferenceString} failed.
#Fields #
| Name | Description |
|---|---|
PackageFullName | |
ReferenceString |
Event ID 448: Merging resource PRIs failed with error ErrorCode for paths: PriPaths.
#Event ID 449: Writing registry key for user UserSid returned ErrorCode.
#Description
Writing registry key for user UserSid returned ErrorCode. User had outdated package OldMainPackageFullName, which will be updated to NewMainPackageFullName. User was online: Online.
Message #
Fields #
| Name | Description |
|---|---|
UserSid UnicodeString | |
NewMainPackageFullName UnicodeString | |
OldMainPackageFullName UnicodeString | |
ErrorCode HexInt32 | |
Online Boolean |
Event ID 450: Package dependency PackageMoniker could not be found in the repository database.
#Event ID 451: Skipping some operations for remove of package PackageName due to repair.
#Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 451,
"version": 0,
"level": 4,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-06-13T15:11:01.7401906+00:00",
"event_record_id": 12711,
"correlation": {
"ActivityID": "{C62F76BC-EF88-0005-2124-34C688EFDC01}"
},
"execution": {
"process_id": 5788,
"thread_id": 3340
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-W11-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"PackageName": "c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.26100.1_neutral_neutral_cw5n1h2txyewy"
},
"message": "Skipping some operations for remove of package c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.26100.1_neutral_neutral_cw5n1h2txyewy due to repair."
}
Event ID 452: Can't complete the applocker check for package because reason.
#Event ID 453: Package PackageFullName is blocked by a platform policy: PolicyReason.
#Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
PolicyReason UInt32 |
Detection Rules #
Full rule details for this event, including ATT&CK technique mappings and native queries →Sigma # view in coverage
Event ID 454: Package PackageFullName is blocked by a platform policy: PolicyReason.
#Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
PolicyReason UInt32 |
Detection Rules #
Full rule details for this event, including ATT&CK technique mappings and native queries →Sigma # view in coverage
Event ID 455: User UserSid had outdated package OldMainPackageFullName, which will be updated to NewMainPackageFullName.
#Description
User UserSid had outdated package OldMainPackageFullName, which will be updated to NewMainPackageFullName. User was online: Online.
Message #
Fields #
| Name | Description |
|---|---|
UserSid UnicodeString | |
NewMainPackageFullName UnicodeString | |
OldMainPackageFullName UnicodeString | |
ErrorCode HexInt32 | |
Online Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 455,
"version": 0,
"level": 5,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-03-11T19:32:54.833062+00:00",
"event_record_id": 13271,
"correlation": {
"ActivityID": "164E10E5-B120-0009-6BC0-4E1620B1DC01"
},
"execution": {
"process_id": 4756,
"thread_id": 7764
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-21-3407486967-1585450050-1838039599-1000"
}
},
"event_data": {
"UserSid": "S-1-5-21-1006758700-2167138679-1475694448-1104",
"NewMainPackageFullName": "Microsoft.DesktopAppInstaller_1.28.220.0_x64__8wekyb3d8bbwe",
"OldMainPackageFullName": "Microsoft.DesktopAppInstaller_1.27.470.0_x64__8wekyb3d8bbwe",
"ErrorCode": "0x0",
"Online": false
},
"message": ""
}
Event ID 456: Removed registry for package MainPackageFullName for user UserSid.
#Description
Removed registry for package MainPackageFullName for user UserSid. This package will be installed for the user on next logon.
Message #
Fields #
| Name | Description |
|---|---|
UserSid UnicodeString | |
MainPackageFullName UnicodeString | |
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 456,
"version": 0,
"level": 5,
"task": 6,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-03-11T19:32:55.852761+00:00",
"event_record_id": 13290,
"correlation": {
"ActivityID": "164E10E5-B120-0009-6BC0-4E1620B1DC01"
},
"execution": {
"process_id": 4756,
"thread_id": 7764
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"UserSid": "S-1-5-21-1006758700-2167138679-1475694448-1104",
"MainPackageFullName": "Microsoft.DesktopAppInstaller_2026.306.1850.0_neutral_~_8wekyb3d8bbwe",
"ErrorCode": "0x0"
},
"message": ""
}
Event ID 457: Deployment of package PackageFullName to volume MountPoint failed because deployments to non-system volumes are blocked for this package's package family.
#Event ID 459: Error ErrorCode: Deployment of package OldMainPackageFullName failed becuase user UserSid with package NewMainPackageFullName is logged in.
#Description
Error ErrorCode: Deployment of package OldMainPackageFullName failed becuase user UserSid with package NewMainPackageFullName is logged in. Packages with singleton components will fail if other users are logged in and have the package installed.
Message #
Fields #
| Name | Description |
|---|---|
UserSid UnicodeString | |
NewMainPackageFullName UnicodeString | |
OldMainPackageFullName UnicodeString | |
ErrorCode HexInt32 | |
Online Boolean |
Event ID 460: error ErrorCode: Creating DataSource to PackageUri failed.
#Event ID 461: error ErrorCode: Creating folder FilePath failed.
#Event ID 462: error ErrorCode: Creating file FilePath failed.
#Event ID 463: Writing to file FileName at offset Offset of size Size failed.
#Event ID 464: error ErrorCode: Hard linking to file FilePath failed.
#Event ID 465: error ErrorCode: Opening the package from location PackageUri failed.
#Message #
Fields #
| Name | Description |
|---|---|
PackageUri UnicodeString | |
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 465,
"version": 0,
"level": 2,
"task": 5,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-02-12T20:24:35.161606+00:00",
"event_record_id": 11212,
"correlation": {
"ActivityID": "43A6D212-9A2A-0001-3288-B0432A9ADC01"
},
"execution": {
"process_id": 14100,
"thread_id": 11380
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageUri": "e8fb2e40d2c429ac45d91d1b94069deabca59c6f",
"ErrorCode": "0x8000000b"
},
"message": ""
}
Event ID 466: error ErrorCode: Creating the package metadata directory FilePath failed.
#Event ID 467: error ErrorCode: Setting file attributes for package metadata directory FilePath failed.
#Event ID 468: error ErrorCode: Failed to set access rights to FilePath.
#Event ID 469: Integrity check failed for file FilePath.
#Event ID 470: error ErrorCode: Package update failed for PackageMonikerOld.
#Event ID 471: error ErrorCode: Deleting file FilePath failed.
#Message #
Fields #
| Name | Description |
|---|---|
FilePath UnicodeString | |
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 471,
"version": 0,
"level": 4,
"task": 5,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-02-10T06:05:21.777878+00:00",
"event_record_id": 10273,
"correlation": {
"ActivityID": "43A6D212-9A2A-0001-458A-AA432A9ADC01"
},
"execution": {
"process_id": 4336,
"thread_id": 8672
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"FilePath": "\\\\?\\C:\\Program Files\\WindowsApps\\Deleted\\MicrosoftTeams_25227.501.3887.7600_x64__8wekyb3d8bbwed5328095-50c8-4e74-bb6d-030d9c6f2f90\\boost_filesystem-vc143-mt-x64-1_86.dll",
"ErrorCode": "0x5"
},
"message": ""
}
Event ID 472: Moving package folder SourceFolderPath to DestinationFolderPath.
#Description
Moving package folder SourceFolderPath to DestinationFolderPath. Result: ErrorCode.
Message #
Fields #
| Name | Description |
|---|---|
SourceFolderPath UnicodeString | |
DestinationFolderPath UnicodeString | |
ErrorCode HexInt32 | 2. Result. |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 472,
"version": 0,
"level": 5,
"task": 5,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-06-13T05:45:51.0439428+00:00",
"event_record_id": 1809,
"correlation": {
"ActivityID": "{C6821FB2-EF88-0003-695B-82C688EFDC01}"
},
"execution": {
"process_id": 1492,
"thread_id": 7976
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"SourceFolderPath": "\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftEdge.Stable_148.0.3967.83_neutral__8wekyb3d8bbwe",
"DestinationFolderPath": "\\\\?\\C:\\Program Files\\WindowsApps\\Deleted\\Microsoft.MicrosoftEdge.Stable_148.0.3967.83_neutral__8wekyb3d8bbweb5bec794-9335-4d6a-bbed-56f86b4f6f23",
"ErrorCode": "0x0"
},
"message": "Moving package folder \\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftEdge.Stable_148.0.3967.83_neutral__8wekyb3d8bbwe to \\\\?\\C:\\Program Files\\WindowsApps\\Deleted\\Microsoft.MicrosoftEdge.Stable_148.0.3967.83_neutral__8wekyb3d8bbweb5bec794-9335-4d6a-bbed-56f86b4f6f23. Result: 0x0."
}
Event ID 473: Failed to read signature of already-installed package PackageMoniker with error Error; installation is assumed to be corrupted.
#Event ID 474: Deployment of package PackageMoniker was blocked because the provided package has the same identity as an already-installed package but the contents are differ...
#Description
Deployment of package PackageMoniker was blocked because the provided package has the same identity as an already-installed package but the contents are different. Increment the version number of the package to be installed, or remove the old package for every user on the system before installing this package.
Message #
Fields #
| Name | Description |
|---|---|
PackageMoniker UnicodeString |
Event ID 475: error ErrorCode: Reading manifest from location: ManifestPath failed with error: ErrorString.
#Event ID 476: Service is being shut down forcefully while still executing a deployment request.
#Description
Service is being shut down forcefully while still executing a deployment request. Please cancel all pending and running deployment requests before shutting down the service or before rebooting a machine. Executing deployment request count: RequestCount. Request queue length: QueueLength. LazyFlush queue length: LazyFlushQueueLength. IdleTasksInProgress: IdleTaskInProgress.
Message #
Fields #
| Name | Description |
|---|---|
RequestCount UInt32 | |
QueueLength UInt32 | |
LazyFlushQueueLength UInt32 | |
IdleTaskInProgress UInt32 |
Event ID 477: Hard linking file SourceFilePath to LinkDestinationPath failed with HRESULT ErrorCode.
#Message #
Fields #
| Name | Description |
|---|---|
SourceFilePath UnicodeString | |
LinkDestinationPath UnicodeString | |
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 477,
"version": 0,
"level": 3,
"task": 50,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2023-11-06T01:43:39.305535+00:00",
"event_record_id": 9492,
"correlation": {
"ActivityID": "E4DB489E-1037-0001-CE30-F2E43710DA01"
},
"execution": {
"process_id": 17796,
"thread_id": 20072
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-21-1992711665-1655669231-58201500-1000"
}
},
"event_data": {
"SourceFilePath": "desktop-assets\\serve-configs\\work.json",
"LinkDestinationPath": "\\\\?\\C:\\Program Files\\WindowsApps\\MicrosoftTeams_23258.704.2395.9691_x64__8wekyb3d8bbwe\\desktop-assets\\serve-configs\\work.json",
"ErrorCode": "0x80073cfc"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 478: Deployment DeploymentOperation operation with target volume MountPoint on Package PackageFullName from: Path finished successfully.
#Message #
Fields #
| Name | Description |
|---|---|
DeploymentOperation UInt32 | |
PackageFullName UnicodeString | |
Path UnicodeString | 2 from. |
MountPoint UnicodeString | |
TargetPlatform HexInt32 | |
SystemVolume Boolean | |
StorageId UnicodeString | |
IsCentennial Boolean | |
PackageType HexInt32 | |
IsPackageEncrypted Boolean | |
DeploymentOptions HexInt64 | |
IsStreamingPackage Boolean | |
IsInRelatedSet Boolean | |
IsPackageUsingBDC Boolean | |
MainPackageFamilyName UnicodeString | |
CallingProcess UnicodeString | |
IsOptional Boolean | |
PackageFlags HexInt32 | |
PackageFlags2 HexInt32 | |
HasWin32alacarte Boolean | |
HasFullTrust Boolean | |
ExternalLocation UnicodeString | |
PackageSourceUri UnicodeString | |
PackageDisplayName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 478,
"version": 0,
"level": 5,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-06-13T09:28:35.8931335+00:00",
"event_record_id": 12571,
"correlation": {
"ActivityID": "{C62F76BC-EF88-0007-BAFE-39C688EFDC01}"
},
"execution": {
"process_id": 10752,
"thread_id": 8020
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-W11-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1104"
}
},
"event_data": {
"DeploymentOperation": "6",
"PackageFullName": "Microsoft.MicrosoftOfficeHub_19.2606.39121.0_x64__8wekyb3d8bbwe",
"Path": " (AppxBundleManifest.xml) ",
"MountPoint": "C:",
"TargetPlatform": "0x3",
"SystemVolume": "true",
"StorageId": "\\\\?\\Volume{ef3318c5-4239-4f08-b989-f41675c41d87}",
"IsCentennial": "true",
"PackageType": "0x1",
"IsPackageEncrypted": "false",
"DeploymentOptions": "0x4000000044840",
"IsStreamingPackage": "false",
"IsInRelatedSet": "false",
"IsPackageUsingBDC": "false",
"MainPackageFamilyName": "NULL",
"CallingProcess": "svchost.exe,wuauserv",
"IsOptional": "false",
"PackageFlags": "0x80804c",
"PackageFlags2": "0x800",
"HasWin32alacarte": "false",
"HasFullTrust": "true",
"ExternalLocation": "",
"PackageSourceUri": "x-windowsupdate://F1874CEA-3E7E-43B5-BCF2-D0A0B5643670/EAAC6C6B-10A4-4659-815B-44F151ECA61A/10bd310c81068727b004761a0ea946c4e5f9f0cf",
"PackageDisplayName": "Microsoft 365 Copilot"
},
"message": "Deployment Register operation with target volume C: on Package Microsoft.MicrosoftOfficeHub_19.2606.39121.0_x64__8wekyb3d8bbwe from: (AppxBundleManifest.xml) finished successfully."
}
Event ID 479: error ErrorCode: Creating the system metadata directory FilePath failed.
#Event ID 480: error ErrorCode: Deleting the system metadata directory FilePath failed.
#Event ID 481: error ErrorCode: Opening the loose file package from location PackageUri failed.
#Event ID 482: error ErrorCode: Creating file FilePath failed.
#Event ID 483: error ErrorCode: Package volume operation DeploymentOperation for PackageName failed at line LineNumber.
#Event ID 484: error ErrorCode: Package volume state update for PackageName failed for user UserSid.
#Event ID 485: error ErrorCode: No package table row PackageTableRowKey associated with visibility table row for user UserSid.
#Event ID 486: AppX Deployment operation failed with error ErrorCode from API SummaryError.
#Message #
Fields #
| Name | Description |
|---|---|
SummaryError UnicodeString | |
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"event_id": 486,
"level": 2,
"task": 3,
"opcode": 0,
"time_created": "2026-05-27T16:22:51.5669143+00:00",
"computer": "DESKTOP-FF3N5XK.ludus.domain",
"channel": "Microsoft-Windows-AppXDeploymentServer"
},
"event_data": {
"SummaryError": "Microsoft.StorePurchaseApp_22603.1401.4.0_x64__8wekyb3d8bbwe Background Task Activation for update task StoreExperienceHost.Tasks.StoreExperienceUpdateTask",
"ErrorCode": "0x10000000"
}
}
Event ID 487: Removing directory Path failed with error ErrorCode.
#Event ID 488: Error ErrorCode: Could not mount volume with Single Instance Store Path and Media ID MediaID.
#Event ID 489: Notification to setting monitor of the change to PackageName failed with error: ErrorCode.
#Event ID 490: Found partially downloaded file to resume.
#Event ID 491: Resume requires full block hash validation for package PackageName.
#Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"event_id": 491,
"level": 5,
"task": 3,
"opcode": 0,
"time_created": "2026-05-27T16:22:21.2960544+00:00",
"computer": "DESKTOP-FF3N5XK.ludus.domain",
"channel": "Microsoft-Windows-AppXDeploymentServer"
},
"event_data": {
"PackageName": "Microsoft.WindowsAppRuntime.1.8_8000.859.21.0_x86__8wekyb3d8bbwe"
}
}
Event ID 492: Removing mounted folder Path failed with error ErrorCode.
#Event ID 493: There were ErrorCount additional files that failed to be deleted under the folder FilePath.
#Message #
Fields #
| Name | Description |
|---|---|
FilePath UnicodeString | |
ErrorCount UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 493,
"version": 0,
"level": 3,
"task": 5,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-02-10T06:05:21.779713+00:00",
"event_record_id": 10274,
"correlation": {
"ActivityID": "43A6D212-9A2A-0001-458A-AA432A9ADC01"
},
"execution": {
"process_id": 4336,
"thread_id": 8672
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"FilePath": "\\\\?\\C:\\Program Files\\WindowsApps\\Deleted",
"ErrorCount": 15
},
"message": ""
}
Event ID 494: There were ErrorCount additional files that failed to be hardlinked.
#Message #
Fields #
| Name | Description |
|---|---|
ErrorCount UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 494,
"version": 0,
"level": 3,
"task": 5,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-05-30T02:09:27.8376031+00:00",
"event_record_id": 3831,
"correlation": {
"ActivityID": "{208980A3-EFD9-0000-85A3-8920D9EFDC01}"
},
"execution": {
"process_id": 4612,
"thread_id": 6336
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "WIN11-25H2-X64",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"ErrorCount": "253"
},
"message": "There were 253 additional files that failed to be hardlinked."
}
Event ID 495: String in MsixvcStagingSession failed with error ErrorCode.
#Event ID 496: Invalid footprint file String1 for package String2, error ErrorCode.
#Event ID 497: Error ErrorCode: Opening the Msixvc package from location PackageUri failed.
#Description
Error ErrorCode: Opening the Msixvc package from location PackageUri failed. Please check whether the Msixvc support services are installed.
Message #
Fields #
| Name | Description |
|---|---|
PackageUri UnicodeString | |
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 497,
"version": 0,
"level": 2,
"task": 5,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-02-12T20:24:35.162029+00:00",
"event_record_id": 11213,
"correlation": {
"ActivityID": "43A6D212-9A2A-0001-3288-B0432A9ADC01"
},
"execution": {
"process_id": 14100,
"thread_id": 11380
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageUri": "e8fb2e40d2c429ac45d91d1b94069deabca59c6f",
"ErrorCode": "0x80070002"
},
"message": ""
}
Event ID 498: MSIXVC data source called to remove package PackageName root Path successfully.
#Event ID 499: Removing mounted package folder String.
#Event ID 500: Framework package PackageMoniker download failed, file write size is Writesize, actual file size is Filesize.
#Event ID 501: error ErrorCode: Failed to delete ResourceName for package PackageFullName.
#Event ID 502: Successfully deleted ResourceName for package PackageFullName.
#Event ID 503: The file system entries for package PackageName could not be cleaned up after reboot.
#Description
The file system entries for package PackageName could not be cleaned up after reboot. The package is removed from the purge list.
Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 503,
"version": 0,
"level": 3,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-03-09T00:22:22.330948+00:00",
"event_record_id": 12447,
"correlation": {
"ActivityID": "AFC537E6-AF5A-0002-513B-C5AF5AAFDC01"
},
"execution": {
"process_id": 5168,
"thread_id": 5992
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageName": "MicrosoftTeams_8wekyb3d8bbwe"
},
"message": ""
}
Event ID 504: Error ErrorCode: Failed to Scavenge Application Data from volume Path with media ID MediaID.
#Event ID 505: Error ErrorCode: Failed to Scavenge Application Data for User UserSid from volume Path with media ID MediaID.
#Event ID 506: Error ErrorCode: Failed to Scavenge Application Data for User UserSid and Package Package from volume Path with media ID MediaID.
#Event ID 507: Succeeded to Scavenge Application Data for User UserSid and Package Package from volume Path with media ID MediaID.
#Event ID 509: Finished scanning and cleaning up orphan packages.
#Event ID 510: Successfully Removed orphan backup manifest FileName.
#Event ID 511: Removing orphan backup manifest FileName failed.
#Event ID 512: Staging session streaming data source prefetch canceled, session key SessionKey, data source prefetch canceled StreamingDataSourcePrefetchCanceled.
#Event ID 520: error ErrorCode: Windows cannot process a deployment operation because the package repository database encountered an unrecoverable error.
#Event ID 521: error {ErrorCode}: Windows cannot find the repository database.
#Event ID 522: error ErrorCode: Failed to create package repository folder FolderPath.
#Event ID 523: error ErrorCode: Failed to open package manifest file FolderPath due to reason
#Description
error : Failed to open package manifest file due to reason .
Fields #
| Name | Description |
|---|---|
FolderPath UnicodeString | |
ErrorCode HexInt32 | |
Reason HexInt32 |
Event ID 523: error ErrorCode: Failed to open package manifest file FolderPath due to reason Reason.
#Event ID 530: Failed to create data source provider with CLSID CLSID.
#Event ID 531: Failed to get the stream from the undocked data source for Uri: Uri.
#Event ID 532: Failed to shut down the userdatasource.
#Event ID 533: Shut down the userdatasource.
#Event ID 540: Started bytecode generation for package PackageFullName on Architecture-bit architecture.
#Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
Architecture Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 540,
"version": 0,
"level": 5,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2023-11-06T06:23:20.607337+00:00",
"event_record_id": 6902,
"correlation": {},
"execution": {
"process_id": 1532,
"thread_id": 1016
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageFullName": "Microsoft.VCLibs.140.00_14.0.32530.0_x86__8wekyb3d8bbwe",
"Architecture": 32
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 541: Finished bytecode generation for package PackageFullName on Architecture-bit architecture.
#Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
Architecture Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 541,
"version": 0,
"level": 5,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2023-11-06T06:23:22.167962+00:00",
"event_record_id": 6937,
"correlation": {},
"execution": {
"process_id": 1532,
"thread_id": 1016
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageFullName": "Microsoft.VCLibs.140.00_14.0.32530.0_x86__8wekyb3d8bbwe",
"Architecture": 32
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 542: ErrorCode: Failed to generate bytecode for package PackageFullName on Architecture-bit architecture.
#Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
Architecture Int32 | |
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 542,
"version": 0,
"level": 2,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2023-11-06T06:23:18.616725+00:00",
"event_record_id": 6811,
"correlation": {
"ActivityID": "626F7C94-1079-0000-B9AE-6F627910DA01"
},
"execution": {
"process_id": 1532,
"thread_id": 1660
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageFullName": "MicrosoftWindows.Client.WebExperience_423.23500.0.0_x64__cw5n1h2txyewy",
"Architecture": 64,
"ErrorCode": "0x80070490"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 543: Failed to generate bytecode for Count JS files in package PackageFullName on Architecture-bit architecture.
#Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
Architecture Int32 | |
Count Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 543,
"version": 0,
"level": 2,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-04-18T00:40:26.5198033+00:00",
"event_record_id": 20313,
"correlation": {
"ActivityID": "{5D13569F-CEA5-0006-EE54-195DA5CEDC01}"
},
"execution": {
"process_id": 11328,
"thread_id": 12108
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "JD-WIN11-22H2-1.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageFullName": "MicrosoftWindows.Client.WebExperience_526.7600.30.0_x64__cw5n1h2txyewy",
"Architecture": "64",
"Count": "4062"
},
"message": "Failed to generate bytecode for 4062 JS files in package MicrosoftWindows.Client.WebExperience_526.7600.30.0_x64__cw5n1h2txyewy on 64-bit architecture."
}
Event ID 544: File FullFilePath in package PackageFullName is missing the UTF-8 BOM.
#Event ID 545: Script error occurred in file ErrorDescription in package ErrorText at line: FullFilePath column: LineNumber.
#Description
Script error occurred in file ErrorDescription in package ErrorText at line: FullFilePath column: LineNumber. ErrorText: column. ErrorDescription: PackageFullName.
Message #
Fields #
| Name | Description |
|---|---|
ErrorText UnicodeString | |
ErrorDescription UnicodeString | |
column | |
PackageFullName UnicodeString | |
FullFilePath UnicodeString | |
LineNumber Int32 | |
ColumnNumber Int32 |
Event ID 546: File FullFilePath in package PackageFullName could not be validated from the package blockmap.
#Event ID 547: ByteCodeGenerator process terminated with exit code ExitCode for package PackageFullName.
#Event ID 548: ErrorCode: Failed to generate bytecode for FullFilePath in package PackageFullName.
#Event ID 549: Bytecode for file FullFilePath in package PackageFullName can only be generated at runtime.
#Event ID 550: Bytecode generation for package PackageFullName on Architecture-bit architecture got cancelled because of a new deployment operation.
#Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
Architecture Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 550,
"version": 0,
"level": 5,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2023-11-06T01:42:37.605156+00:00",
"event_record_id": 9469,
"correlation": {
"ActivityID": "E4DB489E-1037-0000-FF0E-EDE43710DA01"
},
"execution": {
"process_id": 17796,
"thread_id": 20072
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageFullName": "Microsoft.WindowsAppRuntime.1.2_2000.802.31.0_x64__8wekyb3d8bbwe",
"Architecture": 64
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 551: ByteCodeGenerator process for package PackageFullName did not shutdown in time.
#Event ID 552: Valid bytecode file FullFilePath is already present for package PackageFullName; so bytecode generation is unnecessary.
#Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
FullFilePath UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 552,
"version": 0,
"level": 5,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2022-04-07T17:04:34.495404+00:00",
"event_record_id": 561,
"correlation": {
"ActivityID": "DD7B0B6A-4A9E-0001-314A-7BDD9E4AD801"
},
"execution": {
"process_id": 5972,
"thread_id": 2672
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "WIN-FPV0DSIC9O6",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageFullName": "Microsoft.UI.Xaml.2.4_2.42007.9001.0_x64__8wekyb3d8bbwe",
"FullFilePath": "\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.UI.Xaml.2.4_2.42007.9001.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_64"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 553: Staging failed with error code ErrorCode because package folder String does not have the correct ACLs applied.
#Event ID 560: Staging roaming data for package PackageMoniker failed with error Error.
#Event ID 561: Not staging roaming data for package PackageMoniker.
#Event ID 562: Establishing the sync relationship for package PackageMoniker failed with error Error.
#Event ID 563: Application Data for package {PackageMoniker} not found at the expected location.
#Event ID 564: Application Data for package {PackageMoniker} not found on either destination volume or original volume.
#Fields #
| Name | Description |
|---|---|
PackageMoniker |
Event ID 565: Alternate staging location was cleared for package PackageMoniker.
#Event ID 566: Acquiring roaming data for already registered package PackageMoniker.
#Event ID 567: Performed deferred roaming data acquirisition for registered package PackageMoniker with error Error.
#Event ID 568: Deferring staging of roaming data for package PackageMoniker without blocking app launch.
#Event ID 569: Deferring staging of roaming data for package PackageMoniker, will block app launch for roaming data.
#Event ID 570: Failed to get or set roaming data status for package PackageMoniker with error Error.
#Event ID 571: First user logon Started before installing package PackageMoniker.
#Event ID 572: First user logon ended before installing package PackageMoniker.
#Event ID 573: Setting Sync Enabled status, package family name PackageFamilyName, enabled SettingSyncEnabled.
#Message #
Fields #
| Name | Description |
|---|---|
PackageFamilyName UnicodeString | |
SettingSyncEnabled Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 573,
"version": 0,
"level": 4,
"task": 47,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-05-28T18:29:52.9965510+00:00",
"event_record_id": 1732,
"correlation": {
"ActivityID": "{AFDF3271-EE92-0002-D461-DFAF92EEDC01}"
},
"execution": {
"process_id": 7404,
"thread_id": 5504
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"PackageFamilyName": "MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy",
"SettingSyncEnabled": "false"
},
"message": "Setting Sync Enabled status, package family name MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy, enabled false."
}
Event ID 574
#Description
Preferred package version for package family is changing. Current preferred version is: . New preferred version will be: .
Fields #
| Name | Description |
|---|---|
PackageMoniker UnicodeString | |
PackageMoniker2 UnicodeString |
Event ID 574: Preferred package version for package family is changing.
#Event ID 575
#Description
Preferred package version for package family is not changing. Current preferred version is: . Version in deployment operation is: .
Fields #
| Name | Description |
|---|---|
PackageMoniker UnicodeString | |
PackageMoniker2 UnicodeString |
Event ID 575: Preferred package version for package family is not changing.
#Event ID 600: The package PackageMoniker was installed for the current user.
#Event ID 601: error ErrorCode: Unable to recover this package PackageMoniker for the current user.
#Event ID 602: Identified RequestCount request(s) in the Queue Store for potential restoration.
#Event ID 603: Started deployment DeploymentOperation operation on a package with main parameter Path and Options Flags and FlagsHigh.
#Description
Started deployment DeploymentOperation operation on a package with main parameter Path and Options Flags and FlagsHigh. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
Message #
Fields #
| Name | Description | Rules |
|---|---|---|
DeploymentOperation UInt32 | ||
Path UnicodeString | ||
Flags UInt32 | 1 detection rule | |
FlagsHigh UInt32 | ||
CallingProcess UnicodeString | ||
ExternalLocation UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 603,
"version": 0,
"level": 4,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-06-13T05:45:51.0703713+00:00",
"event_record_id": 1812,
"correlation": {
"ActivityID": "{C6821FB2-EF88-0004-9642-82C688EFDC01}"
},
"execution": {
"process_id": 1492,
"thread_id": 7328
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"DeploymentOperation": "29",
"Path": "Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe",
"Flags": "0",
"FlagsHigh": "0",
"CallingProcess": "setup.exe",
"ExternalLocation": ""
},
"message": "Started deployment ProvisionPackageOperation operation on a package with main parameter Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe and Options 0 and 0. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues."
}
Common Indicators #
Field/value combinations most frequently checked by detection rules targeting this event, derived from cross-vendor predicate analysis.
| Field | Kind | Value | Rules | Vendors |
|---|---|---|---|---|
Flags | eq | 8388608 | 2 rules | sigma, splunk |
Detection Rules #
Full rule details for this event, including ATT&CK technique mappings and native queries →Sigma # view in coverage
Splunk # view in coverage
T1204, T1204.002, T1553, T1553.005↳ also matches Event ID 855: Finished resolving action lists.
Event ID 604: Started deployment DeploymentOperation operation on a package with main parameter Path, dependency parameters DependencyPaths and Options Flags and FlagsHigh.
#Description
Started deployment operation on a package with main parameter , dependency parameters and Options and . See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
Message #
Fields #
| Name | Description |
|---|---|
DeploymentOperation UInt32 | |
Path UnicodeString | |
DependencyPaths UnicodeString | |
Flags UInt32 | |
FlagsHigh UInt32 | |
CallingProcess UnicodeString | |
ExternalLocation UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 604,
"version": 0,
"level": 4,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-05-28T11:13:15.0345541+00:00",
"event_record_id": 1293,
"correlation": {
"ActivityID": "{AFDF3271-EE92-0003-AA39-DFAF92EEDC01}"
},
"execution": {
"process_id": 4744,
"thread_id": 3672
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"DeploymentOperation": "27",
"Path": "",
"DependencyPaths": "MicrosoftWindows.UndockedDevKit_10.0.20348.1_neutral_neutral_cw5n1h2txyewy,",
"Flags": "268435456",
"FlagsHigh": "0",
"CallingProcess": "svchost.exe,AppReadiness",
"ExternalLocation": ""
},
"message": "Started deployment OnDemandRegisterOperation operation on a package with main parameter , dependency parameters MicrosoftWindows.UndockedDevKit_10.0.20348.1_neutral_neutral_cw5n1h2txyewy, and Options ImmediatePriorityRequest and 0. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues."
}
Event ID 605: Error NextDeploymentState: Failure in the DeploymentState state handler.
#Message #
Fields #
| Name | Description |
|---|---|
DeploymentState | |
NextDeploymentState | |
ErrorCode HexInt32 | |
FailedDeploymentState |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 605,
"version": 0,
"level": 4,
"task": 3,
"opcode": 0,
"keywords": 4611756387171565569,
"time_created": "2026-06-13T05:45:51.0925416+00:00",
"event_record_id": 1816,
"correlation": {
"ActivityID": "{C6821FB2-EF88-0004-9642-82C688EFDC01}"
},
"execution": {
"process_id": 1492,
"thread_id": 7976
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"DeploymentState": "4",
"NextDeploymentState": "5",
"ErrorCode": "0x80070032"
},
"message": "The last successful state reached was BundleProcessed. Failure occurred before reaching the next state Indexed. hr: 0x80070032"
}
Event ID 606: OnDemandRegisterPackage PackageMoniker, skipped due to remove package override in RemoveDefaultPackages policy
#Description
OnDemandRegisterPackage , skipped due to remove package override in RemoveDefaultPackages policy.
Fields #
| Name | Description |
|---|---|
PackageMoniker UnicodeString |
Event ID 607: Deployment DeploymentOperation operation on package PackageFullName has been de-queued and is running for user SID UserSid.
#Message #
Fields #
| Name | Description |
|---|---|
DeploymentOperation UInt32 | |
PackageFullName UnicodeString | |
UserSid UnicodeString | |
CallingProcess UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 607,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-06-13T05:45:51.0912383+00:00",
"event_record_id": 1814,
"correlation": {
"ActivityID": "{C6821FB2-EF88-0004-9642-82C688EFDC01}"
},
"execution": {
"process_id": 1492,
"thread_id": 7976
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"DeploymentOperation": "29",
"PackageFullName": "Microsoft.MicrosoftEdge.Stable_149.0.4022.62_neutral__8wekyb3d8bbwe",
"UserSid": "S-1-5-18",
"CallingProcess": "setup.exe"
},
"message": "Deployment ProvisionPackageOperation operation on package Microsoft.MicrosoftEdge.Stable_149.0.4022.62_neutral__8wekyb3d8bbwe has been de-queued and is running for user SID S-1-5-18."
}
Event ID 608: Unable to recover package PackageMoniker because it does not have any .
#Event ID 609: Recovering DeploymentRequest from file ResiliencyFilePath for DeploymentOperation Operation on Package MainPackageMoniker.
#Description
Recovering DeploymentRequest from file ResiliencyFilePath for DeploymentOperation Operation on Package MainPackageMoniker. Resuming from state ResiliencyCurrentState.
Message #
Fields #
| Name | Description |
|---|---|
DeploymentOperation UInt32 | |
MainPackageMoniker UnicodeString | |
ResiliencyCurrentState UnicodeString | |
ResiliencyFilePath UnicodeString |
Event ID 610: error ErrorCode: Recovering DeploymentRequest from file ResiliencyFilePath failed.
#Event ID 611: Failed flushing deployment data with result: HRESULT.
#Event ID 612: Could not contact Process Lifetime Management to ensure that no apps are running during servicing.
#Event ID 613: Performance summary of Deployment DeploymentOperation operation on Package PackageFullName: Summary.
#Message #
Fields #
| Name | Description |
|---|---|
DeploymentOperation UInt32 | |
PackageFullName UnicodeString | |
Summary UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 613,
"version": 0,
"level": 4,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-06-13T05:45:51.0629768+00:00",
"event_record_id": 1811,
"correlation": {
"ActivityID": "{C6821FB2-EF88-0003-695B-82C688EFDC01}"
},
"execution": {
"process_id": 1492,
"thread_id": 7976
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"DeploymentOperation": "4",
"PackageFullName": "Microsoft.MicrosoftEdge.Stable_149.0.4022.62_neutral__8wekyb3d8bbwe",
"Summary": "\nOverall time: 797 ms\nEnqueue cost: 188 ms\nDequeue delay: 15 ms\nBundle processing cost: 0 ms\nIndexing cost: 32 ms\nResolve dependency cost: 0 ms\nGap: 15 ms\nCheck approval cost: 0 ms\nEvaluation cost: 94 ms\nHardlinking evaluation cost: 0 ms\nStage required cost: 47 ms\nFlushing and closing files cost: 15 ms\nGap: 16 ms\nMachine register cost: 125 ms\nStage user data cost: 0 ms\nRegistration cost: 0 ms\nGap: 109 ms\nRepository commit transaction cost: 109 ms\nGap: 16 ms\nData flush cost: 0 ms\nPost DeStage repository commit transaction cost: 0 ms\nRemaining cost: 31 ms\n"
},
"message": "Performance summary of Deployment Stage operation on Package Microsoft.MicrosoftEdge.Stable_149.0.4022.62_neutral__8wekyb3d8bbwe: \r\nOverall time: 797 ms\r\nEnqueue cost: 188 ms\r\nDequeue delay: 15 ms\r\nBundle processing cost: 0 ms\r\nIndexing cost: 32 ms\r\nResolve dependency cost: 0 ms\r\nGap: 15 ms\r\nCheck approval cost: 0 ms\r\nEvaluation cost: 94 ms\r\nHardlinking evaluation cost: 0 ms\r\nStage required cost: 47 ms\r\nFlushing and closing files cost: 15 ms\r\nGap: 16 ms\r\nMachine register cost: 125 ms\r\nStage user data cost: 0 ms\r\nRegistration cost: 0 ms\r\nGap: 109 ms\r\nRepository commit transaction cost: 109 ms\r\nGap: 16 ms\r\nData flush cost: 0 ms\r\nPost DeStage repository commit transaction cost: 0 ms\r\nRemaining cost: 31 ms\r\n"
}
Event ID 614: RemoveDefaultPackages uninstall override policy failure during removal of package PathTwo with error code PathOne.
#Message #
Fields #
| Name | Description |
|---|---|
Error | |
PackageMoniker |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 614,
"version": 0,
"level": 5,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2023-11-06T06:23:17.523047+00:00",
"event_record_id": 6799,
"correlation": {
"ActivityID": "626F7C94-1079-0000-B9AE-6F627910DA01"
},
"execution": {
"process_id": 1532,
"thread_id": 1660
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PathOne": "C:\\Program Files\\WindowsApps\\MicrosoftWindows.Client.WebExperience_423.23500.0.0_neutral_~_cw5n1h2txyewy\\AppxMetadata\\AppxBundleManifest.xml",
"PathTwo": "\"MicrosoftWindows.Client.WebExperience_arm64.appx\": MicrosoftWindows.Client.WebExperience_423.23500.0.0_arm64__cw5n1h2txyewy \"MicrosoftWindows.Client.WebExperience_x64.appx\": MicrosoftWindows.Client.WebExperience_423.23500.0.0_x64__cw5n1h2txyewy"
},
"message": ""
}
Example keys not documented in the fields table: PathOne, PathTwo
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 615: Deployment DeploymentOperation operation on package PackageFullName has been cancelled by the caller.
#Message #
Fields #
| Name | Description |
|---|---|
DeploymentOperation UInt32 | |
PackageFullName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3f471139-acb7-4a01-b7a7-ff5da4ba2d43",
"event_source_name": "",
"event_id": 615,
"version": 0,
"level": 5,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-07-04T19:19:40.5928506+00:00",
"event_record_id": 25710,
"correlation": {
"ActivityID": "5a9ba08b-f7cd-000a-aedb-9f5acdf7dc01",
"RelatedActivityID": ""
},
"execution": {
"process_id": 7628,
"thread_id": 13356
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "JD-WIN11-22H2-1.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"DeploymentOperation": "6",
"PackageFullName": "Microsoft.WidgetsPlatformRuntime_1.6.19.0_neutral_~_8wekyb3d8bbwe"
},
"message": "Deployment Register operation on package Microsoft.WidgetsPlatformRuntime_1.6.19.0_neutral_~_8wekyb3d8bbwe has been cancelled by the caller."
}
Event ID 616: Relaunching app ApplicationUserModelId after the app was serviced.
#Event ID 617: Successfully updated the status for package StatusToClear and user StatusToSet (Clear=CallOrigin, Set=ErrorCode).
#Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
StatusToClear HexInt32 | |
StatusToSet HexInt32 | |
CallOrigin UInt32 | |
ErrorCode | |
userSid |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 617,
"version": 0,
"level": 5,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-05-28T18:29:53.1626870+00:00",
"event_record_id": 1742,
"correlation": {
"ActivityID": "{AFDF3271-EE92-0002-D461-DFAF92EEDC01}"
},
"execution": {
"process_id": 7404,
"thread_id": 5504
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageFullName": "MicrosoftWindows.UndockedDevKit_10.0.20348.1_neutral_neutral_cw5n1h2txyewy",
"StatusToClear": "0xc00",
"StatusToSet": "0x0",
"CallOrigin": "0"
},
"message": "Successfully updated the status for package MicrosoftWindows.UndockedDevKit_10.0.20348.1_neutral_neutral_cw5n1h2txyewy (Clear=0xC00, Set=0x0)."
}
Event ID 618: error ErrorCode: Unable to update the status for package PackageFullName and user userSid (Clear=StatusToClear, Set=StatusToSet).
#Event ID 619: error ErrorCode: Unable to change application state for package PackageFullName (BiApplicationStateTransition=BiApplicationStateTransition).
#Event ID 620: error ErrorCode: Unable to set package status for dependents of package PackageFullName (context=Context).
#Event ID 621: error ErrorCode: Unable to reset package status for dependencies of package PackageFullName (key=PackageKey).
#Event ID 622: task_0Start
#Event ID 623: error ErrorCode: Unable to reset package status for dependencies of package PackageFullName (key=PackageKey).
#Event ID 624: Started deployment DeploymentOperation operation on all applications with Options Flags and FlagsHigh.
#Description
Started deployment DeploymentOperation operation on all applications with Options Flags and FlagsHigh. Exempt applications: DependencyPaths. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
Message #
Fields #
| Name | Description |
|---|---|
DeploymentOperation UInt32 | |
DependencyPaths UnicodeString | |
Flags UInt32 | |
FlagsHigh UInt32 | |
CallingProcess UnicodeString | |
ExternalLocation UnicodeString |
Event ID 625: The package deployment operation is now paused for package: PackageName.
#Event ID 626: Deployment DeploymentOperation operation on package PackageFullName has been requeued for user SID UserSid.
#Message #
Fields #
| Name | Description |
|---|---|
DeploymentOperation UInt32 | |
PackageFullName UnicodeString | |
UserSid UnicodeString | |
CallingProcess UnicodeString | |
RequeueReason |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 626,
"version": 0,
"level": 5,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-06-13T15:10:58.7522263+00:00",
"event_record_id": 12661,
"correlation": {
"ActivityID": "{C62F76BC-EF88-0006-023D-57C688EFDC01}"
},
"execution": {
"process_id": 5788,
"thread_id": 9468
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-W11-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"DeploymentOperation": "2",
"PackageFullName": "Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wekyb3d8bbwe",
"UserSid": "S-1-5-21-1006758700-2167138679-1475694448-1105",
"CallingProcess": "wsmprovhost.exe",
"RequeueReason": "1"
},
"message": "Deployment Remove operation on package Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wekyb3d8bbwe has been requeued for user SID S-1-5-21-1006758700-2167138679-1475694448-1105."
}
Event ID 627: Windows cannot remove PackageMoniker because the current user does not have that package installed.
#Description
Windows cannot remove PackageMoniker because the current user does not have that package installed. Use Get-AppxPackage to see the list of packages installed.
Message #
Fields #
| Name | Description |
|---|---|
PackageMoniker UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 627,
"version": 0,
"level": 5,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-03-08T23:13:55.256597+00:00",
"event_record_id": 12359,
"correlation": {
"ActivityID": "A84E255E-A05B-000D-B587-4EA85BA0DC01"
},
"execution": {
"process_id": 9436,
"thread_id": 316
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageMoniker": "Microsoft.NET.Native.Framework.2.2_2.2.29512.0_x86__8wekyb3d8bbwe"
},
"message": ""
}
Event ID 628: Windows cannot install package PackageName because this package depends on a framework that could not be found.
#Description
Windows cannot install package PackageName because this package depends on a framework that could not be found. Provide the framework "DependencyName" published by "DependencyPublisher", with neutral or DependencyArchitecture processor architecture and minimum version DependencyMinVersion, along with this package to install. The frameworks with name "DependencyName" currently installed are: %6
Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | |
DependencyName UnicodeString | |
DependencyPublisher UnicodeString | |
DependencyArchitecture UInt32 | |
DependencyMinVersion UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"event_id": 628,
"level": 2,
"task": 4,
"opcode": 0,
"time_created": "2026-05-27T20:06:16.8279516+00:00",
"computer": "DESKTOP-FF3N5XK.ludus.domain",
"channel": "Microsoft-Windows-AppXDeploymentServer"
},
"event_data": {
"DependencyName": "Microsoft.WindowsAppRuntime.1.5",
"DependencyArchitecture": "9",
"PackageName": "Microsoft.StartExperiencesApp_1.1.200.0_x64__8wekyb3d8bbwe",
"DependencyMinVersion": "5001.119.156.0",
"DependencyPublisher": "CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US"
}
}
Event ID 629: No applicable cross-architecture framework was found for package PackageName.
#Description
No applicable cross-architecture framework was found for package PackageName. The package will be installed with matching-architecture framework only.
Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | |
DependencyName UnicodeString | |
DependencyPublisher UnicodeString | |
DependencyArchitecture UInt32 | |
DependencyMinVersion UnicodeString | |
FrameworkList |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 629,
"version": 0,
"level": 5,
"task": 4,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-05-28T18:29:17.9375498+00:00",
"event_record_id": 1386,
"correlation": {
"ActivityID": "{AFDF3271-EE92-0002-245A-DFAF92EEDC01}"
},
"execution": {
"process_id": 7404,
"thread_id": 5504
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"PackageName": "Microsoft.Windows.SecHealthUI_10.0.20348.1_neutral__cw5n1h2txyewy",
"DependencyName": "Microsoft.UI.Xaml.2.4",
"DependencyPublisher": "CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US",
"DependencyArchitecture": "0",
"DependencyMinVersion": "2.42005.1001.0",
"FrameworkList": "{Microsoft.UI.Xaml.2.4_2.42007.9001.0_x64__8wekyb3d8bbwe}"
},
"message": "No applicable cross-architecture framework was found for package Microsoft.Windows.SecHealthUI_10.0.20348.1_neutral__cw5n1h2txyewy. The package will be installed with matching-architecture framework only."
}
Event ID 630: For PreRegisterPackage, unable to determine visibility state to set for package PackageMoniker with error: Error, default to Staged.
#Event ID 631: Disk usage report of UUP product UupProductId: TotalSize=TotalSizeInMBMB, PackageSize=PackageSizeInMBMB, DataSize=DataSizeInMBMB
#Description
Disk usage report of UUP product : TotalSize=MB, PackageSize=MB, DataSize=MB. Details.
Fields #
| Name | Description |
|---|---|
UupProductId UnicodeString | |
TotalSizeInMB Int32 | |
PackageSizeInMB Int32 | |
DataSizeInMB Int32 | |
Details UnicodeString |
Event ID 632: Deployment request for DeploymentOperation operation on package MainPackageMoniker was cancelled because it cannot be resumed from state ResiliencyCurrentState.
#Event ID 633: PreRegisterPackage PackageFullName, IsInstalled=IsInstalled, Options=Options.
#Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
IsInstalled Boolean | |
Options UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 633,
"version": 0,
"level": 4,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-05-28T11:13:14.9582067+00:00",
"event_record_id": 1291,
"correlation": {
"ActivityID": "{AFDF3271-EE92-0000-8742-DFAF92EEDC01}"
},
"execution": {
"process_id": 4744,
"thread_id": 3672
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageFullName": "Windows.PrintDialog_6.2.1.0_neutral_neutral_cw5n1h2txyewy",
"IsInstalled": "true"
},
"message": "PreRegisterPackage Windows.PrintDialog_6.2.1.0_neutral_neutral_cw5n1h2txyewy, IsInstalled=true."
}
Event ID 634: OnDemandRegisterPackage PackageMoniker, unable to find the package from StateRepository, we will register it later.
#Message #
Fields #
| Name | Description |
|---|---|
PackageMoniker UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 634,
"version": 0,
"level": 3,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2023-11-05T22:32:30.183743+00:00",
"event_record_id": 7828,
"correlation": {
"ActivityID": "E4DB489E-1037-0002-4157-DBE43710DA01"
},
"execution": {
"process_id": 4660,
"thread_id": 5424
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-21-1992711665-1655669231-58201500-1000"
}
},
"event_data": {
"PackageMoniker": "Microsoft.VCLibs.140.00_14.0.30704.0_x64__8wekyb3d8bbwe"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 635: ServerSideRPCPreRegisterPackage PackageFullName, Option: Flags, Result: HResult, Calling process: CallingProcess.
#Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
Flags UInt32 | 1, Option. |
HResult HexInt32 | |
CallingProcess UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 635,
"version": 0,
"level": 4,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2023-11-06T06:25:52.892893+00:00",
"event_record_id": 6957,
"correlation": {
"ActivityID": "F590C418-1079-0003-E6D4-90F57910DA01"
},
"execution": {
"process_id": 3480,
"thread_id": 3600
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageFullName": "Microsoft.HEVCVideoExtension_1.0.50361.0_x64__8wekyb3d8bbwe",
"Flags": 2,
"HResult": "0x0",
"CallingProcess": "svchost.exe,AppReadiness"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 636: ServerSideRPCPreRegisterAllInboxPackages result: HResult, Option: Options, Calling process: CallingProcess.
#Message #
Fields #
| Name | Description |
|---|---|
HResult HexInt32 | ServerSideRPCPreRegisterAllInboxPackages result. |
Options UInt32 | |
CallingProcess UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 636,
"version": 0,
"level": 4,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-05-28T11:13:14.9582608+00:00",
"event_record_id": 1292,
"correlation": {
"ActivityID": "{AFDF3271-EE92-0000-8742-DFAF92EEDC01}"
},
"execution": {
"process_id": 4744,
"thread_id": 3672
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HResult": "0x0"
},
"message": "ServerSideRPCPreRegisterAllInboxPackages result:0x0."
}
Event ID 637: Running apps were shut down to allow packages to be updated.
#Description
Running apps were shut down to allow packages to be updated. Running apps: {runningAppsList}, Directly serviced packages: {directlyServicedPackagesList}, Indirectly serviced packages: {indirectlyServicedPackagesList}, Number of previous attempts: numAttempts, Is user session locked: isSessionLocked
Message #
Fields #
| Name | Description |
|---|---|
runningAppsList UnicodeString | |
directlyServicedPackagesList UnicodeString | |
indirectlyServicedPackagesList UnicodeString | |
numAttempts UInt64 | |
isSessionLocked Boolean | |
forceUpdateDeferredByPackage Boolean |
Event ID 638: Packages were not updated because affected apps are still running.
#Description
Packages were not updated because affected apps are still running. Running apps: {runningAppsList}, Directly serviced packages: {directlyServicedPackagesList}, Indirectly serviced packages: {indirectlyServicedPackagesList}, Number of previous attempts: numAttempts, Is user session locked: isSessionLocked
Message #
Fields #
| Name | Description |
|---|---|
runningAppsList UnicodeString | |
directlyServicedPackagesList UnicodeString | |
indirectlyServicedPackagesList UnicodeString | |
numAttempts UInt64 | 3}, Number of previous attempts. |
isSessionLocked Boolean | |
forceUpdateDeferredByPackage |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 638,
"version": 0,
"level": 4,
"task": 3,
"opcode": 0,
"keywords": 4611756387171565569,
"time_created": "2026-06-13T08:26:56.0712394+00:00",
"event_record_id": 12472,
"correlation": {
"ActivityID": "{C62F76BC-EF88-0008-D97E-37C688EFDC01}"
},
"execution": {
"process_id": 10680,
"thread_id": 2636
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-W11-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1104"
}
},
"event_data": {
"runningAppsList": "Microsoft.YourPhone_8wekyb3d8bbwe!App",
"directlyServicedPackagesList": "Microsoft.YourPhone_0.26042.95.0_x64__8wekyb3d8bbwe",
"indirectlyServicedPackagesList": "NULL",
"numAttempts": "0",
"isSessionLocked": "false",
"forceUpdateDeferredByPackage": "false"
},
"message": "Packages were not updated because affected apps are still running. Running apps: {Microsoft.YourPhone_8wekyb3d8bbwe!App}, Directly serviced packages: {Microsoft.YourPhone_0.26042.95.0_x64__8wekyb3d8bbwe}, Indirectly serviced packages: {NULL}, Number of previous attempts: 0, Is user session locked: false, Force update deferred by package: false"
}
Event ID 639: ServerSideRPCCleanupWCIReparsePoints result:HResult.
#Message #
Fields #
| Name | Description |
|---|---|
HResult HexInt32 | ServerSideRPCCleanupWCIReparsePoints result. |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 639,
"version": 0,
"level": 4,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2023-10-25T22:55:18.380827+00:00",
"event_record_id": 5457,
"correlation": {
"ActivityID": "D5BBEBF4-0795-0003-C021-BCD59507DA01"
},
"execution": {
"process_id": 5348,
"thread_id": 7828
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "WinDevEval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"HResult": "0x0"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 640: ServerSideEnsurePackageFamilyIsRegistered result:ServerSideEnsurePackageFamilyIsRegistered_result.
#Event ID 641: OnDemandRegisterPackage PackageMoniker.
#Event ID 642: OnDemandRegisterPackage found existing package PackageMoniker, set PACKAGE_STATUS_REGISTRATION_REQUIRED_BLOCKING.
#Message #
Fields #
| Name | Description |
|---|---|
PackageMoniker UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 642,
"version": 0,
"level": 4,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-03-09T00:21:51.065919+00:00",
"event_record_id": 12440,
"correlation": {
"ActivityID": "AFC537E6-AF5A-0007-A939-C5AF5AAFDC01"
},
"execution": {
"process_id": 5168,
"thread_id": 5992
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1104"
}
},
"event_data": {
"PackageMoniker": "Microsoft.MicrosoftEdge.Stable_145.0.3800.58_neutral__8wekyb3d8bbwe"
},
"message": ""
}
Event ID 643: OnDemandRegisterPackage PackageFullName add PackageUser row, Bundle:Bundle, AppDataVolume:AppDataVolume.
#Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
Bundle Int32 | 1 add PackageUser row, Bundle. |
AppDataVolume Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 643,
"version": 0,
"level": 4,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-05-28T11:13:15.1138601+00:00",
"event_record_id": 1315,
"correlation": {
"ActivityID": "{AFDF3271-EE92-0003-AA39-DFAF92EEDC01}"
},
"execution": {
"process_id": 4744,
"thread_id": 4656
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"PackageFullName": "Windows.PrintDialog_6.2.1.0_neutral_neutral_cw5n1h2txyewy",
"Bundle": "30",
"AppDataVolume": "1"
},
"message": "OnDemandRegisterPackage Windows.PrintDialog_6.2.1.0_neutral_neutral_cw5n1h2txyewy add PackageUser row, Bundle:30, AppDataVolume:1"
}
Event ID 644: OnDemandRegisterPackage PackageMoniker, update Staged to Installed.
#Message #
Fields #
| Name | Description |
|---|---|
PackageMoniker UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 644,
"version": 0,
"level": 4,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-02-12T04:56:35.068770+00:00",
"event_record_id": 10813,
"correlation": {
"ActivityID": "43A6D212-9A2A-0005-33F1-A9432A9ADC01"
},
"execution": {
"process_id": 9772,
"thread_id": 11888
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11.ludus.domain",
"security": {
"user_id": "S-1-5-21-3407486967-1585450050-1838039599-1000"
}
},
"event_data": {
"PackageMoniker": "Microsoft.DesktopAppInstaller_1.27.460.0_x64__8wekyb3d8bbwe"
},
"message": ""
}
Event ID 645: OnDemandRegisterPackage error ErrorCode.
#Event ID 646: The running app String was shut down for servicing (Priority=ErrorCode).
#Event ID 647: Removing registrations for DownlevelInstalled package PackageMoniker.
#Message #
Fields #
| Name | Description |
|---|---|
PackageMoniker UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 647,
"version": 0,
"level": 4,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-03-09T00:22:22.748989+00:00",
"event_record_id": 12459,
"correlation": {
"ActivityID": "AFC537E6-AF5A-0002-513B-C5AF5AAFDC01"
},
"execution": {
"process_id": 5168,
"thread_id": 5992
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1104"
}
},
"event_data": {
"PackageMoniker": "Microsoft.MicrosoftEdge.Stable_145.0.3800.58_neutral__8wekyb3d8bbwe"
},
"message": ""
}
Event ID 648: Error NextDeploymentState: Failure in the early preparatory steps of the request or in the DeploymentState state handler.
#Message #
Fields #
| Name | Description |
|---|---|
FailedDeploymentState UnicodeString | |
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 648,
"version": 0,
"level": 4,
"task": 3,
"opcode": 0,
"keywords": 4611756387171565569,
"time_created": "2026-02-10T04:22:03.207925+00:00",
"event_record_id": 8078,
"correlation": {
"ActivityID": "43A6D212-9A2A-0002-5081-A7432A9ADC01"
},
"execution": {
"process_id": 5816,
"thread_id": 6424
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11.ludus.domain",
"security": {
"user_id": "S-1-5-21-3407486967-1585450050-1838039599-1000"
}
},
"event_data": {
"DeploymentState": 1,
"NextDeploymentState": 2,
"ErrorCode": "0x80070032"
},
"message": ""
}
Example keys not documented in the fields table: DeploymentState, NextDeploymentState
Event ID 649: Deployment DeploymentOperation operation on Package PackageFullName: Summary.
#Message #
Fields #
| Name | Description |
|---|---|
DeploymentOperation UInt32 | |
PackageFullName UnicodeString | |
Summary UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 649,
"version": 0,
"level": 4,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-06-13T05:45:51.0444627+00:00",
"event_record_id": 1810,
"correlation": {
"ActivityID": "{C6821FB2-EF88-0003-695B-82C688EFDC01}"
},
"execution": {
"process_id": 1492,
"thread_id": 7976
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"DeploymentOperation": "4",
"PackageFullName": "Microsoft.MicrosoftEdge.Stable_149.0.4022.62_neutral__8wekyb3d8bbwe",
"Summary": "PostDeploymentOperationCheck cost: 0 ms"
},
"message": "Deployment Stage operation on Package Microsoft.MicrosoftEdge.Stable_149.0.4022.62_neutral__8wekyb3d8bbwe: PostDeploymentOperationCheck cost: 0 ms"
}
Event ID 650: Error processing appinstaller at resolved path Path.
#Event ID 651: Appinstaller operation failed with error code ErrorCode.
#Event ID 652: Error processing appinstaller at resolved path Path.
#Event ID 653: The package full name returned from the AppxManifest does not match the name generated from the AppInstaller.
#Description
The package full name returned from the AppxManifest (PackageNameOne) does not match the name generated from the AppInstaller (PackageNameTwo). Please ensure that the package attributes specified in the .appinstaller file match the package attributes referenced in Path.
Message #
Fields #
| Name | Description |
|---|---|
PackageNameOne UnicodeString | |
PackageNameTwo UnicodeString | |
Path UnicodeString |
Event ID 655: OnDemandRegisterPackage PackageName, failed to create or update tiles.
#Event ID 656: Skipping OnDemandRegisterPackage PackageName because it is Paused.
#Event ID 657: ServerSideRemovePackageFromContainer result HResult.
#Event ID 658: Marking package {PackageMoniker2} for deferred registration because {PackageMoniker} is still running.
#Message #
Fields #
| Name | Description |
|---|---|
PackageMoniker UnicodeString | |
PackageMoniker2 UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"event_id": 658,
"level": "Warning",
"task": null,
"opcode": "Info",
"time_created": "2026-03-19T16:59:23.0615844+00:00",
"computer": "JD-DC01-2022.ludus.domain",
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational"
},
"event_data": {
"PackageMoniker": "Claude_1.1.7203.0_x64__pzs8sxrjxfjjc",
"PackageMoniker2": "Claude_1.1.7464.0_x64__pzs8sxrjxfjjc"
}
}
Event ID 659: Skipping add of {PackageMoniker} from the provided URI because it is already installed on the system.
#Event ID 660: Deployment will return success to the caller instead of {HResult} because DeferRegistrationWhenPackagesAreInUse was passed for the register operation wh...
#Event ID 661: Windows cannot install package String1 because this package depends on a device driver that could not be found.
#Event ID 662: The package to be staged has already been staged before with a different StageInPlace option.
#Description
The package to be staged has already been staged before with a different StageInPlace option. Please destage the existing package then try again. Package full name: String. Current request has StageInPlace option: Bool1. Existing package was staged with StageInPlace option: Bool2.
Message #
Fields #
| Name | Description |
|---|---|
String UnicodeString | |
Bool1 Boolean | |
Bool2 Boolean |
Event ID 663: The package that is being deprovisioned should be destaged, but the destaging operation was unable to be enqueued.
#Event ID 664: Error Error: The request cannot be processed because package PackageMoniker is in use.
#Message #
Fields #
| Name | Description |
|---|---|
Error HexInt32 | |
PackageMoniker UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 664,
"version": 0,
"level": 2,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-05-30T02:10:21.3515745+00:00",
"event_record_id": 3937,
"correlation": {
"ActivityID": "{208980A3-EFD9-0002-03AA-8920D9EFDC01}"
},
"execution": {
"process_id": 4612,
"thread_id": 6336
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "WIN11-25H2-X64",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Error": "0x80073d02",
"PackageMoniker": "Microsoft.WindowsAppRuntime.1.8_8000.806.2252.0_x64__8wekyb3d8bbwe"
},
"message": "Error 0x80073D02: The request cannot be processed because package Microsoft.WindowsAppRuntime.1.8_8000.806.2252.0_x64__8wekyb3d8bbwe is in use."
}
Event ID 665: For repair of package targetPackageFullNameForRepair: starting deploymentOperation operation on package currentPackageFullName (step currentStepIndex of numTotalSteps).
#Event ID 666: For repair of package targetPackageFullNameForRepair: deploymentOperation operation on package currentPackageFullName finished with result errorCode (step currentStepIndex of numTotalSteps).
#Event ID 667: Registration of package PackageMoniker failed because packages cannot be updated as part of a batch registration.
#Event ID 668: Start Msixvc remediation for machine mutable package packageFullName.
#Event ID 669: Msixvc remediation for machine mutable package packageFullName finished with result hresult.
#Event ID 670: Start Msixvc remediation for user mutable package packageFullName for user userSid.
#Event ID 671: Msixvc remediation for user mutable package packageFullName for user userSid finished with result hresult.
#Event ID 672: Package SupplierPackageName does not satisfy a dependency for package DependentPackageName.
#Description
Package SupplierPackageName does not satisfy a dependency for package DependentPackageName. Reason: Reason.
Message #
Fields #
| Name | Description |
|---|---|
DependentPackageName UnicodeString | |
SupplierPackageName UnicodeString | |
Reason UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 672,
"version": 0,
"level": 4,
"task": 4,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-03-11T19:32:54.808572+00:00",
"event_record_id": 13270,
"correlation": {
"ActivityID": "164E10E5-B120-0009-6BC0-4E1620B1DC01"
},
"execution": {
"process_id": 4756,
"thread_id": 7764
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-21-3407486967-1585450050-1838039599-1000"
}
},
"event_data": {
"DependentPackageName": "Microsoft.DesktopAppInstaller_1.28.220.0_x64__8wekyb3d8bbwe",
"SupplierPackageName": "Microsoft.VCLibs.140.00_14.0.30704.0_x64__8wekyb3d8bbwe",
"Reason": 5
},
"message": ""
}
Event ID 673: Deployment DeploymentOperation operation with main parameter MainPackageMoniker is hung and cancelled.
#Description
Deployment DeploymentOperation operation with main parameter MainPackageMoniker is hung and cancelled. Failure occurred in the FailedDeploymentState state handler.
Message #
Fields #
| Name | Description |
|---|---|
MainPackageMoniker UnicodeString | |
DeploymentOperation UInt32 | |
FailedDeploymentState UnicodeString | |
Stack UnicodeString |
Event ID 674: Removal of package PackageName is deferred because it is currently in use.
#Event ID 675: Failed to mark package PackageFullName for deferred removal with error Error.
#Event ID 676: Failed to clear deferred removal mark for package PackageFullName with error Error.
#Event ID 677: UUP update for product ProductID needs attention
#Description
UUP update for product needs attention. Reason: , Mapped error code: .
Fields #
| Name | Description |
|---|---|
ProductID UnicodeString | |
UpdateAttentionRequiredReason UInt32 | |
ErrorCode HexInt32 |
Event ID 678: Deployment DeploymentOperation operation with main parameter MainPackageMoniker is hung and cancelled
#Description
Deployment operation with main parameter is hung and cancelled. Failure occurred in the state handler.
Fields #
| Name | Description |
|---|---|
MainPackageMoniker UnicodeString | |
DeploymentOperation UInt32 | |
FailedDeploymentState UnicodeString | |
Stack UnicodeString | |
WaitChainInfo UnicodeString | |
WerSubmitErrorCode HexInt32 |
Event ID 679: OnDemandRegisterPackageList
#Fields #
| Name | Description |
|---|---|
PackageList UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"event_id": 679,
"level": 4,
"task": 3,
"opcode": 0,
"time_created": "2026-05-27T20:11:34.3697691+00:00",
"computer": "DESKTOP-FF3N5XK.ludus.domain",
"channel": "Microsoft-Windows-AppXDeploymentServer"
},
"event_data": {
"PackageList": "Microsoft.OneDriveSync_23038.219.1.0_neutral__8wekyb3d8bbwe "
}
}
Event ID 679: OnDemandRegisterPackageList PackageList.
#Message #
Fields #
| Name | Description |
|---|---|
PackageList UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"event_id": 679,
"level": 4,
"task": 3,
"opcode": 0,
"time_created": "2026-05-27T20:11:34.3697691+00:00",
"computer": "DESKTOP-FF3N5XK.ludus.domain",
"channel": "Microsoft-Windows-AppXDeploymentServer"
},
"event_data": {
"PackageList": "Microsoft.OneDriveSync_23038.219.1.0_neutral__8wekyb3d8bbwe "
}
}
Event ID 680: OnDemandRegisterPackage error Error on package PackageFullName with original packagefullname
#Description
OnDemandRegisterPackage error on package with original packagefullname .
Fields #
| Name | Description |
|---|---|
Error HexInt32 | |
PackageFullName UnicodeString | |
OriginalPackageFullName UnicodeString |
Event ID 680: OnDemandRegisterPackage error Error on package PackageFullName with original packagefullname OriginalPackageFullName.
#Event ID 681
#Description
Adding Staged entry for package for System.
Fields #
| Name | Description |
|---|---|
PackageMoniker UnicodeString |
Event ID 681: Adding Staged entry for package PackageMoniker for System.
#Event ID 682
#Description
All inbox manifest cache entries were deleted.
Event ID 682: All inbox manifest cache entries were deleted.
#Event ID 683
#Description
Manifest cache for package was reloaded; after reload, full name is now.
Fields #
| Name | Description |
|---|---|
PackageMoniker UnicodeString | |
PackageMoniker2 UnicodeString |
Event ID 683: Manifest cache for package PackageMoniker was reloaded; after reload, full name is now PackageMoniker2.
#Event ID 684
#Description
OnDemandRegisterPackage , framework not supported by OnDemandRegister operation found. We will register later.
Fields #
| Name | Description |
|---|---|
PackageMoniker UnicodeString |
Event ID 684: OnDemandRegisterPackage PackageMoniker, framework not supported by OnDemandRegister operation found.
#Event ID 697
#Description
Deployment operation with main parameter is hung and cancelled. Failure occurred in the state handler.
Fields #
| Name | Description |
|---|---|
MainPackageMoniker UnicodeString | |
DeploymentOperation UInt32 | |
FailedDeploymentState UnicodeString | |
Stack UnicodeString | |
WaitChainInfo UnicodeString | |
WerSubmitErrorCode HexInt32 |
Event ID 697: Deployment DeploymentOperation operation with main parameter MainPackageMoniker is hung and cancelled.
#Description
Deployment DeploymentOperation operation with main parameter MainPackageMoniker is hung and cancelled. Failure occurred in the FailedDeploymentState state handler.
Message #
Fields #
| Name | Description |
|---|---|
MainPackageMoniker UnicodeString | |
DeploymentOperation UInt32 | |
FailedDeploymentState UnicodeString | |
Stack UnicodeString | |
WaitChainInfo UnicodeString | |
WerSubmitErrorCode HexInt32 |
Event ID 698: Deployment DeploymentOperation operation with target volume MountPoint on Package PackageFullName from: Path failed with error ErrorCode.
#Description
Deployment DeploymentOperation operation with target volume MountPoint on Package PackageFullName from: Path failed with error ErrorCode. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
Message #
Fields #
| Name | Description |
|---|---|
DeploymentOperation UInt32 | |
PackageFullName UnicodeString | |
Path UnicodeString | 2 from. |
ErrorCode HexInt32 | |
MountPoint UnicodeString | |
TargetPlatform HexInt32 | |
SystemVolume Boolean | |
StorageId UnicodeString | |
IsCentennial Boolean | |
PackageType HexInt32 | |
IsPackageEncrypted Boolean | |
DeploymentOptions HexInt64 | |
IsStreamingPackage Boolean | |
IsInRelatedSet Boolean | |
IsPackageUsingBDC Boolean | |
MainPackageFamilyName UnicodeString | |
CallingProcess UnicodeString | |
IsInPlaceUpdate HexInt32 | |
ErrorFileInfo UnicodeString | |
DetailedMessageInfo UnicodeString | |
RollbackErrorFileInfo UnicodeString | |
RollbackDetailedMessageInfo UnicodeString | |
IsOptional UInt32 | |
PackageFlags HexInt32 | |
PackageFlags2 HexInt32 | |
HasWin32alacarte Boolean | |
HasFullTrust Boolean | |
ExternalLocation UnicodeString | |
PackageSourceUri UnicodeString | |
PackageDisplayName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 698,
"version": 0,
"level": 2,
"task": 3,
"opcode": 0,
"keywords": 1152991873351024641,
"time_created": "2026-06-13T08:26:56.5922929+00:00",
"event_record_id": 20,
"correlation": {
"ActivityID": "{C62F76BC-EF88-0008-D97E-37C688EFDC01}"
},
"execution": {
"process_id": 10680,
"thread_id": 2636
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Restricted",
"computer": "telemetry-W11-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1104"
}
},
"event_data": {
"DeploymentOperation": "6",
"PackageFullName": "Microsoft.YourPhone_1.26042.95.0_neutral_~_8wekyb3d8bbwe",
"Path": " (AppxBundleManifest.xml) ",
"ErrorCode": "0x80073d02",
"MountPoint": "C:",
"TargetPlatform": "0x3",
"SystemVolume": "true",
"StorageId": "\\\\?\\Volume{ef3318c5-4239-4f08-b989-f41675c41d87}",
"IsCentennial": "false",
"PackageType": "0x0",
"IsPackageEncrypted": "false",
"DeploymentOptions": "0x4000004044800",
"IsStreamingPackage": "false",
"IsInRelatedSet": "false",
"IsPackageUsingBDC": "false",
"MainPackageFamilyName": "NULL",
"CallingProcess": "svchost.exe,wuauserv",
"IsInPlaceUpdate": "0x0",
"ErrorFileInfo": "dependencymanager.cpp,51,80073D02;deploymentmanager.cpp,753,80073D02;pipeline.cpp,36,80073D02;pipeline.cpp,443,80073D02;deploymentrequest.cpp,4383,80073CF9;",
"DetailedMessageInfo": "[{Only Stage and PreRegister Operations can be paused}];",
"RollbackErrorFileInfo": "NULL",
"RollbackDetailedMessageInfo": "NULL",
"IsOptional": "0",
"PackageFlags": "0x0",
"PackageFlags2": "0x0",
"HasWin32alacarte": "false",
"HasFullTrust": "false",
"ExternalLocation": "",
"PackageSourceUri": "",
"PackageDisplayName": ""
},
"message": "Deployment Register operation with target volume C: on Package Microsoft.YourPhone_1.26042.95.0_neutral_~_8wekyb3d8bbwe from: (AppxBundleManifest.xml) failed with error 0x80073D02. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues."
}
Event ID 699: FileName:Line failed with error Error.
#Event ID 700: Unable to install PackageMoniker because the same package PackageMoniker2 is specified multiple times.
#Event ID 701: Unable to install FileName because Count dependencies were specified.
#Event ID 702: Windows cannot remove PackageMoniker because the current user does not have that package installed.
#Description
Windows cannot remove PackageMoniker because the current user does not have that package installed. Use Get-AppxPackage to see the list of packages installed.
Message #
Fields #
| Name | Description |
|---|---|
PackageMoniker UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 702,
"version": 0,
"level": 2,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-03-26T03:33:48.1338736+00:00",
"event_record_id": 14501,
"correlation": {
"ActivityID": "{D0BE9A23-BB1B-0002-EFAC-C3D01BBBDC01}"
},
"execution": {
"process_id": 10368,
"thread_id": 9756
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "JD-WIN11-22H2-1.ludus.domain",
"security": {
"user_id": "S-1-5-21-3407486967-1585450050-1838039599-1000"
}
},
"event_data": {
"PackageMoniker": "Microsoft.UI.Xaml.2.4_2.42007.9001.0_x64__8wekyb3d8bbwe"
},
"message": "Windows cannot remove Microsoft.UI.Xaml.2.4_2.42007.9001.0_x64__8wekyb3d8bbwe because the current user does not have that package installed. Use Get-AppxPackage to see the list of packages installed."
}
Event ID 703: Windows cannot install PackageMoniker because this package has multiple dependencies on the same package PackageMoniker2.
#Event ID 704: Unable to install because of an unknown error ErrorCode in determining which apps need to be closed.
#Event ID 705: Windows cannot deploy to path DeploymentPath of file system type FileSystemType.
#Event ID 706: error ErrorCode: Windows cannot access deployment target at Path.
#Event ID 707: error ErrorCode: AppX Deployment DeploymentOperation operation on package PackageFullName from: Path failed.
#Description
error ErrorCode: AppX Deployment DeploymentOperation operation on package PackageFullName from: Path failed. This app is part of Windows and cannot be uninstalled on a per-user basis. An administrator can attempt to remove the app from the computer using Turn Windows Features on or off. However, it may not be possible to uninstall the app.
Message #
Fields #
| Name | Description |
|---|---|
DeploymentOperation UInt32 | |
PackageFullName UnicodeString | |
Path UnicodeString | |
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 707,
"version": 0,
"level": 2,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-02-18T21:51:27.364443+00:00",
"event_record_id": 12259,
"correlation": {
"ActivityID": "A84E255E-A05B-000B-B669-4EA85BA0DC01"
},
"execution": {
"process_id": 9436,
"thread_id": 316
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"DeploymentOperation": 2,
"PackageFullName": "Microsoft.DesktopAppInstaller_2026.131.32.0_neutral_~_8wekyb3d8bbwe",
"Path": "C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_2026.131.32.0_neutral_~_8wekyb3d8bbwe",
"ErrorCode": "0x80070032"
},
"message": ""
}
Event ID 708: Deployment DeploymentOperation operation rejected on package PackageFullName from: Path install request because the Local System account is not allowed to perform this operation.
#Event ID 709: Rejecting a request to register from Path because the manifest is not in the package root.
#Message #
Fields #
| Name | Description |
|---|---|
Path UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 709,
"version": 0,
"level": 2,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-05-30T01:59:56.1338569+00:00",
"event_record_id": 2776,
"correlation": {
"ActivityID": "{CEFBC89A-D2FC-0007-C5CB-13CFFCD2DC01}"
},
"execution": {
"process_id": 8564,
"thread_id": 1928
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"Path": "AppxManifest.xml"
},
"message": "Rejecting a request to register from AppxManifest.xml because the manifest is not in the package root."
}
Event ID 710: The AppModel version could not be read from the registry.
#Event ID 711: Rejecting a request to register from Path because the files are on a network share.
#Event ID 712: Windows cannot perform the DeploymentOperation operation because it could not find PackageMoniker in the repository.
#Description
Windows cannot perform the DeploymentOperation operation because it could not find PackageMoniker in the repository. Make sure PackageMoniker has been staged or was installed by another user.
Message #
Fields #
| Name | Description |
|---|---|
DeploymentOperation UInt32 | |
PackageMoniker UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 712,
"version": 0,
"level": 2,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-03-23T20:47:37.2238792+00:00",
"event_record_id": 14253,
"correlation": {
"ActivityID": "{520A1857-B89C-0006-23F0-0B529CB8DC01}"
},
"execution": {
"process_id": 11148,
"thread_id": 5688
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "JD-WIN11-22H2-1.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1104"
}
},
"event_data": {
"DeploymentOperation": "20",
"PackageMoniker": "Microsoft.Copilot_8wekyb3d8bbwe"
},
"message": "Windows cannot perform the RegisterByPackageFamilyName operation because it could not find Microsoft.Copilot_8wekyb3d8bbwe in the repository. Make sure Microsoft.Copilot_8wekyb3d8bbwe has been staged or was installed by another user."
}
Event ID 713: Windows cannot register Path because this bundle was passed in as dependency package.
#Event ID 714: Windows cannot register the bundle Path because the specified value from the DeploymentOptions enumeration is DevelopmentMode.
#Event ID 715: Windows cannot install from Path because the AllResources DeploymentOption has been set and this package is not a bundle.
#Event ID 716: Unable to install bundle path because it does not have an appropriate application package for Architecture architecture.
#Event ID 717: Windows cannot remove PackageMoniker because the PreserveApplicationData flag can only be used on a package that was deployed in development mode.
#Message #
Fields #
| Name | Description |
|---|---|
PackageMoniker UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 717,
"version": 0,
"level": 2,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-03-11T02:08:01.484703+00:00",
"event_record_id": 12932,
"correlation": {
"ActivityID": "083E0D5C-AF63-0007-1F3A-420863AFDC01"
},
"execution": {
"process_id": 7460,
"thread_id": 9596
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-21-3407486967-1585450050-1838039599-1000"
}
},
"event_data": {
"PackageMoniker": "Claude_1.1.6041.0_x64__pzs8sxrjxfjjc"
},
"message": ""
}
Event ID 718: Failed to initialize PLM with error ErrorCode.
#Event ID 719: Deployment was cancelled after failure with error ErrorCode.
#Event ID 720: Failed with error ErrorCode to reset machine register state in the State Repository database for package String.
#Event ID 721: The specified package full name PackageMoniker is not eligible for a StageUserDataAsync call.
#Event ID 722: StageUserDataAsync cannot be called for package PackageMoniker which was deployed in development mode.
#Event ID 723: Windows cannot install package PackageMoniker because this package declares mismatched Windows versions.
#Description
Windows cannot install package PackageMoniker because this package declares mismatched Windows versions. The requested mininimum and maximum version tested must be identical. The package requested Windows version RequestedVersionMajor.RequestedVersionMinor with AppModel version RequestedVersionAppModel, with the max tested Windows version is OSVersionMajor.OSVersionMinor with AppModel version OSVersionAppModel.
Message #
Fields #
| Name | Description |
|---|---|
PackageMoniker UnicodeString | |
RequestedVersionMajor UInt32 | |
RequestedVersionMinor UInt32 | |
RequestedVersionAppModel UInt32 | |
OSVersionMajor UInt32 | |
OSVersionMinor UInt32 | |
OSVersionAppModel UInt32 |
Event ID 724: Windows cannot install package PackageMoniker because this package declares invalid Windows versions.
#Description
Windows cannot install package PackageMoniker because this package declares invalid Windows versions. The package requested Windows version RequestedVersionMajor.RequestedVersionMinor with AppModel version RequestedVersionAppModel, but the max tested Windows version is OSVersionMajor.OSVersionMinor with AppModel version OSVersionAppModel.
Message #
Fields #
| Name | Description |
|---|---|
PackageMoniker UnicodeString | |
RequestedVersionMajor UInt32 | |
RequestedVersionMinor UInt32 | |
RequestedVersionAppModel UInt32 | |
OSVersionMajor UInt32 | |
OSVersionMinor UInt32 | |
OSVersionAppModel UInt32 |
Event ID 725: Windows cannot find the main package manifest in the bundle file: PackageUri.
#Event ID 726: Windows cannot find the resource package manifest in the bundle file: PackageUri.
#Message #
Fields #
| Name | Description |
|---|---|
PackageUri UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 726,
"version": 0,
"level": 3,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-05-16T05:41:37.7425087+00:00",
"event_record_id": 9618,
"correlation": {
"ActivityID": "{5086812F-E4F4-0008-F2E2-8650F4E4DC01}"
},
"execution": {
"process_id": 5080,
"thread_id": 4528
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-W11-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1104"
}
},
"event_data": {
"PackageUri": "C:\\Program Files\\WindowsApps\\Microsoft.BingSearch_1.1.37.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml"
},
"message": "Windows cannot find the resource package manifest in the bundle file: C:\\Program Files\\WindowsApps\\Microsoft.BingSearch_1.1.37.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml."
}
Event ID 727: error ErrorCode: Unable to relaunch app ApplicationUserModelId after the app was serviced.
#Event ID 728: error ErrorCode: Unable to notify pre-launch service for app ApplicationUserModelId install/uninstall.
#Message #
Fields #
| Name | Description |
|---|---|
ApplicationUserModelId UnicodeString | |
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 728,
"version": 0,
"level": 3,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-05-16T05:25:40.5671211+00:00",
"event_record_id": 8517,
"correlation": {
"ActivityID": "{5086812F-E4F4-000A-7D95-8650F4E4DC01}"
},
"execution": {
"process_id": 5080,
"thread_id": 4528
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-W11-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1104"
}
},
"event_data": {
"ApplicationUserModelId": "Microsoft.DesktopAppInstaller_8wekyb3d8bbwe!WinGetComServer",
"ErrorCode": "0x80070015"
},
"message": "error 0x80070015: Unable to notify pre-launch service for app Microsoft.DesktopAppInstaller_8wekyb3d8bbwe!WinGetComServer install/uninstall."
}
Event ID 729: Unable to install FileName because Count framework dependencies were specified.
#Event ID 730: Unable to install FileName because Count resource dependencies were specified.
#Event ID 731: The check for how PackageFullName applies to user SID returned ApplicabilityState.
#Event ID 732: The check for how PackageFullName applies to user SID failed with ErrorCode.
#Event ID 733: Invalid dependencies were specified.
#Event ID 734: Package Manager aborted the DeploymentOperation operation because an invalid argument was passed: Argument.
#Event ID 735: Windows cannot install package PackageName because it has version PackageVersion.
#Description
Windows cannot install package PackageName because it has version PackageVersion. A higher version PackageVersion2 of this package is already installed.
Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | |
PackageVersion UnicodeString | |
PackageVersion2 UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 735,
"version": 0,
"level": 5,
"task": 3,
"opcode": 0,
"keywords": 4611756387171565569,
"time_created": "2026-05-30T02:17:23.3598337+00:00",
"event_record_id": 6122,
"correlation": {
"ActivityID": "{208980A3-EFD9-0003-A373-8A20D9EFDC01}"
},
"execution": {
"process_id": 4612,
"thread_id": 6352
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "WIN11-25H2-X64",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageName": "Microsoft.WindowsAppRuntime.1.8",
"PackageVersion": "8000.836.2153.0",
"PackageVersion2": "8000.859.21.0"
},
"message": "Windows cannot install package Microsoft.WindowsAppRuntime.1.8 because it has version 8000.836.2153.0. A higher version 8000.859.21.0 of this package is already installed."
}
Event ID 736: Windows cannot move package PackageName because it is a development mode package.
#Event ID 737: Windows cannot move package PackageName because it is a resource package.
#Event ID 738: Windows cannot move package PackageName because it is part of the system.
#Event ID 739: Windows cannot move package PackageName because it needs to be reinstalled first.
#Event ID 740: Windows cannot move package PackageName because the current user does not have the package installed.
#Event ID 741: Windows cannot move package PackageName because a more recent version of the family is staged for the user to update.
#Event ID 742: Windows cannot move package PackageName because other versions of the family are installed for other users.
#Event ID 743: Windows cannot move package PackageName because it is a framework.
#Event ID 744: Package PackageName is already on the target volume, so it will not be moved.
#Event ID 745: Windows cannot install package PackageMoniker because another package in the family is installed on a different volume.
#Event ID 746: Windows cannot install package PackageName to volume Path with media ID MediaID because the volume is offline.
#Event ID 747: Windows cannot install package PackageName to volume Path with media ID MediaID because framework packages can only be installed to the system volume.
#Event ID 748: Windows cannot move package PackageName to volume Path with media ID MediaID because the volume is offline.
#Event ID 749: Windows cannot move package PackageName from volume Path with media ID MediaID because the volume is offline.
#Event ID 750: Volume Path with media ID MediaID is offline.
#Event ID 751: Windows failed to undo changes with error code Error to package PackageMoniker.
#Event ID 752: Windows failed to update the mounted folder of package PackageMoniker.
#Event ID 753: Windows failed to move package PackageMoniker to the MovedPackages location.
#Event ID 754: Windows failed to create a mounted folder for package PackageMoniker to location FileName.
#Event ID 755: Windows cannot install app data for package PackageName to volume Path with media ID MediaID because the volume is offline.
#Event ID 756: Windows cannot install app data for package PackageName to volume DestinationPath with media ID DestinationMediaID because it is already installed to volume SourcePath with media ID SourceMediaID.
#Event ID 757: Windows cannot move package PackageName because it is in an invalid XAP state: XapState.
#Event ID 758: Windows cannot install package PackageFamilyName, because this operating system only supports apps built using the Windows 10 and greater universal application pl...
#Event ID 760: Failed creating the canonical PRI file for package PackageName.
#Event ID 761: Preview tiles created for package AppId.
#Message #
Fields #
| Name | Description |
|---|---|
AppId UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 761,
"version": 0,
"level": 5,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-05-28T11:13:08.2659836+00:00",
"event_record_id": 1200,
"correlation": {
"ActivityID": "{AFDF3271-EE92-0002-9F38-DFAF92EEDC01}"
},
"execution": {
"process_id": 4744,
"thread_id": 4656
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"AppId": "Windows.PrintDialog_6.2.1.0_neutral_neutral_cw5n1h2txyewy"
},
"message": "Preview tiles created for package Windows.PrintDialog_6.2.1.0_neutral_neutral_cw5n1h2txyewy."
}
Event ID 762: RemoveDefaultPackages uninstall override policy successfully removed package PackageMoniker.
#Event ID 763: Windows cannot install package PackageName because the package is currently paused.
#Event ID 764: Windows cannot install package PackageName because it is missing a phone product ID.
#Event ID 765: Windows cannot install package PackageName to volume Path with media ID MediaID because it is not supported on this filesystem.
#Event ID 766: Failed to create PackageInUseHelper.
#Event ID 767: Failed to set optional package in used by deployment.
#Event ID 768: Failed committing TileStore transaction for preview tile generation.
#Event ID 769: Could not update related set CurrentlyInstalledPackages because MissingPackageFamily is missing in PackagesToBeInstalled.
#Event ID 770: Invalid bundle BundlePackageFullName contains multiple main or optional packages MainOrOptionalPackageFullName1, MainOrOptionalPackageFullName2 registered for a user.
#Event ID 771: Could not find the path PackageUri in the State Repository database.
#Event ID 772: Re-indexing package PackageName.
#Event ID 773: Setting status for package PackageName, so that it is re-registered before next launch.
#Event ID 774: Marking paused package PackageName as staged in the State Repository database, since its payload was found to be complete.
#Event ID 775: Related set CurrentlyInstalledPackages is not ready for registration because MissingPackageFamily is missing in PackagesToBeInstalled.
#Event ID 776: Windows failed to cleanup path FileName for package PackageMoniker with error ErrorCode.
#Event ID 777: Windows cannot install package PackageMoniker because this package is not compatible with the device.
#Event ID 778: Windows cannot install package PackageMoniker because this package is not compatible with the device.
#Description
Windows cannot install package PackageMoniker because this package is not compatible with the device. The package requires OS version RequestedVersionMajor.RequestedVersionMinor.RequestedVersionBuild.RequestedVersionRevision or higher on the deviceFamilyName device family. The device is currently running OS version OSVersionMajor.OSVersionMinor.OSVersionBuild.OSVersionRevision.
Message #
Fields #
| Name | Description |
|---|---|
PackageMoniker UnicodeString | |
deviceFamilyName UnicodeString | |
RequestedVersionMajor UInt32 | |
RequestedVersionMinor UInt32 | |
RequestedVersionBuild UInt32 | |
RequestedVersionRevision UInt32 | |
OSVersionMajor UInt32 | |
OSVersionMinor UInt32 | |
OSVersionBuild UInt32 | |
OSVersionRevision UInt32 |
Event ID 779: Windows cannot install non-preinstalled package PackageName to volume Path with media ID MediaID because the volume is the Preinstalled Apps volume.
#Event ID 780: Windows cannot move package PackageName from volume Path with media ID MediaID because the volume is the Preinstalled Apps volume.
#Event ID 781: Windows cannot move package PackageName to volume Path with media ID MediaID because the volume is the Preinstalled Apps volume.
#Event ID 782: error ErrorCode: AppX Deployment DeploymentOperation operation on package PackageFullName from: Path failed.
#Event ID 783: Windows cannot remove package PackageName from volume Path with media ID MediaID because the volume is the Preinstalled Apps volume.
#Event ID 784: Failed initializing preview tile generation for user UserSid.
#Event ID 785: Failed creating preview tiles for package PackageName due to the package not being found in StateRepository.
#Description
Failed creating preview tiles for package PackageName due to the package not being found in StateRepository. Error: ErrorCode.
Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | |
ErrorCode HexInt32 | 1 due to the package not being found in StateRepository. Error. |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 785,
"version": 0,
"level": 4,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-05-28T11:13:08.2644030+00:00",
"event_record_id": 1196,
"correlation": {
"ActivityID": "{AFDF3271-EE92-0002-9F38-DFAF92EEDC01}"
},
"execution": {
"process_id": 4744,
"thread_id": 4656
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"PackageName": "Microsoft.Windows.PinningConfirmationDialog_10.0.20348.1_neutral_neutral_cw5n1h2txyewy",
"ErrorCode": "0x80070490"
},
"message": "Failed creating preview tiles for package Microsoft.Windows.PinningConfirmationDialog_10.0.20348.1_neutral_neutral_cw5n1h2txyewy due to the package not being found in StateRepository. Error: 0x80070490"
}
Event ID 786: Appinstaller file Path has specified UpdateBlocksActivation is true but defined ShowPrompt as false (or did not define ShowPrompt).
#Event ID 787: Windows cannot remove PackageMoniker because the PreserveRoamableApplicationData flag cannot be used together with incompatible options.
#Event ID 788: ContainerDeployment error ErrorCode.
#Event ID 789: Windows cannot move package PackageName because it is staged in place and cannot be moved.
#Event ID 790: Windows cannot move package PackageName because it is unsigned.
#Event ID 791: Windows cannot install package PackageName because it is not a valid unsigned package.
#Event ID 792: Windows cannot install package PackageName because its publisher Publisher is not in the unsigned namespace.
#Event ID 793: Windows cannot install package PackageName because its publisher Publisher is not in the signed namespace.
#Event ID 794: Windows cannot install package PackageName because it must allow external content to be installed with an external location.
#Event ID 795: Windows cannot install package PackageName because an unsigned package cannot provide a host runtime.
#Event ID 796: Windows cannot install package PackageName because an unsigned package cannot include Executable activations.
#Event ID 797: Access denied.
#Event ID 798: Windows cannot install package PackageName because an unsigned package must be a Main package.
#Event ID 799: Windows cannot install package PackageName because windows.
#Event ID 800: Creation of registry key: RegistryKeyName failed with error: ErrorCode.
#Event ID 801: Opening registry key: RegistryKeyName failed with error: ErrorCode.
#Message #
Fields #
| Name | Description |
|---|---|
RegistryKeyName UnicodeString | |
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 801,
"version": 0,
"level": 2,
"task": 6,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-02-10T04:29:15.215708+00:00",
"event_record_id": 10201,
"correlation": {
"ActivityID": "43A6D212-9A2A-0003-FE99-A7432A9ADC01"
},
"execution": {
"process_id": 5696,
"thread_id": 11192
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"RegistryKeyName": "Software\\Microsoft\\Windows\\CurrentVersion\\Appx\\AppxAllUserStore\\EndOfLife\\S-1-5-21-1006758700-2167138679-1475694448-1104\\Clipchamp.Clipchamp_2.2.8.0_neutral__yxz26nhyzhsrt",
"ErrorCode": "0x80070002"
},
"message": ""
}
Event ID 802: Deletion of registry key: RegistryKeyName failed with error: ErrorCode.
#Event ID 803: Registry copy of tree for package: RegistryKeyName failed with error: ErrorCode.
#Event ID 804: Failed to read the value named RegistryKeyName from registry key: with_error with error: ValueName.
#Event ID 805: Failed to write the value named RegistryKeyName from registry key: with_error with error: ValueName.
#Event ID 806: Package(s) with the following package full names were not registered due to sideloading policy restrictions: PackageFullNames.
#Event ID 807: Creation of registry key: {RegistryKeyName} failed with error: {ErrorCode}.
#Fields #
| Name | Description |
|---|---|
RegistryKeyName | |
ErrorCode |
Event ID 808: Deletion of registry key: RegistryKeyName failed with error: ErrorCode.
#Message #
Fields #
| Name | Description |
|---|---|
RegistryKeyName UnicodeString | Deletion of registry key. |
ErrorCode HexInt32 | failed with error. |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 808,
"version": 0,
"level": 3,
"task": 6,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-06-13T09:28:34.8082397+00:00",
"event_record_id": 12559,
"correlation": {
"ActivityID": "{C62F76BC-EF88-0007-BAFE-39C688EFDC01}"
},
"execution": {
"process_id": 10752,
"thread_id": 8020
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-W11-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"RegistryKeyName": "Software\\Microsoft\\Windows\\CurrentVersion\\Appx\\AppxAllUserStore\\S-1-5-21-3798294047-1846905762-1150995898-1000\\Microsoft.MicrosoftOfficeHub_2026.609.2034.0_neutral_~_8wekyb3d8bbwe",
"ErrorCode": "0x80070002"
},
"message": "Deletion of registry key: Software\\Microsoft\\Windows\\CurrentVersion\\Appx\\AppxAllUserStore\\S-1-5-21-3798294047-1846905762-1150995898-1000\\Microsoft.MicrosoftOfficeHub_2026.609.2034.0_neutral_~_8wekyb3d8bbwe failed with error: 0x80070002."
}
Event ID 811: Unable to determine whether package PackageMoniker is an all user package with error: Error.
#Event ID 812: Unable to update all user store with package PackageMoniker with error: Error.
#Event ID 813: Successfully updated all user store with package PackageMoniker.
#Message #
Fields #
| Name | Description |
|---|---|
PackageMoniker UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 813,
"version": 0,
"level": 5,
"task": 6,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-06-13T09:28:34.8081175+00:00",
"event_record_id": 12558,
"correlation": {
"ActivityID": "{C62F76BC-EF88-0007-BAFE-39C688EFDC01}"
},
"execution": {
"process_id": 10752,
"thread_id": 8020
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-W11-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageMoniker": "Microsoft.MicrosoftOfficeHub_2026.609.2034.0_neutral_~_8wekyb3d8bbwe"
},
"message": "Successfully updated all user store with package Microsoft.MicrosoftOfficeHub_2026.609.2034.0_neutral_~_8wekyb3d8bbwe."
}
Event ID 814: Opening registry key: {RegistryKeyName}\\{RegistrySubKeyName} failed with error: {ErrorCode}.
#Fields #
| Name | Description |
|---|---|
RegistryKeyName | |
RegistrySubKeyName | |
ErrorCode |
Event ID 815: Creating registry key: Creating_registry_key\\RegistryKeyName failed with error: RegistrySubKeyName.
#Event ID 816: Failed to write the value named ValueName with value ValueValue in registry key RegistryKeyName\\RegistrySubKeyName failed with error: ValueName.
#Event ID 817: Package PackageFullName was moved to the Deleted store after reaching the max number of deployment attempts with error: ErrorCode.
#Event ID 818: Determining packages to be installed during logon for user: UserSid.
#Message #
Fields #
| Name | Description |
|---|---|
UserSid UnicodeString | Determining packages to be installed during logon for user. |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 818,
"version": 0,
"level": 5,
"task": 6,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-06-13T15:11:01.6841599+00:00",
"event_record_id": 12699,
"correlation": {
"ActivityID": "{C62F76BC-EF88-0006-223D-57C688EFDC01}"
},
"execution": {
"process_id": 5788,
"thread_id": 3340
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-W11-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"UserSid": "S-1-5-21-1006758700-2167138679-1475694448-1105"
},
"message": "Determining packages to be installed during logon for user: S-1-5-21-1006758700-2167138679-1475694448-1105."
}
Event ID 819: The following packages will be installed: InstallPackageList.
#Description
The following packages will be installed: InstallPackageList. The following packages will be removed: EndOfLifePackageList.
Message #
Fields #
| Name | Description |
|---|---|
InstallPackageList UnicodeString | The following packages will be installed. |
EndOfLifePackageList UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 819,
"version": 0,
"level": 5,
"task": 6,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-05-29T16:33:56.6576893+00:00",
"event_record_id": 1802,
"correlation": {
"ActivityID": "{C6821FB2-EF88-0007-7B21-82C688EFDC01}"
},
"execution": {
"process_id": 1056,
"thread_id": 5280
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"InstallPackageList": "",
"EndOfLifePackageList": ""
},
"message": "The following packages will be installed: . The following packages will be removed: "
}
Event ID 820: Unable to determine packages to be installed during logon with error: ErrorCode.
#Event ID 821: During-logon registration of package MainPackageFullName for user UserSid finished with result: ErrorCode; updating registry.
#Message #
Fields #
| Name | Description |
|---|---|
UserSid UnicodeString | |
MainPackageFullName UnicodeString | |
ErrorCode HexInt32 | 1 finished with result. |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 821,
"version": 0,
"level": 5,
"task": 6,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-05-28T18:29:53.1920054+00:00",
"event_record_id": 1746,
"correlation": {
"ActivityID": "{AFDF3271-EE92-0000-405B-DFAF92EEDC01}"
},
"execution": {
"process_id": 1912,
"thread_id": 2028
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"UserSid": "S-1-5-21-1006758700-2167138679-1475694448-1105",
"MainPackageFullName": "MicrosoftWindows.UndockedDevKit_10.0.20348.1_neutral_neutral_cw5n1h2txyewy",
"ErrorCode": "0x0"
},
"message": "During-logon registration of package MicrosoftWindows.UndockedDevKit_10.0.20348.1_neutral_neutral_cw5n1h2txyewy for user S-1-5-21-1006758700-2167138679-1475694448-1105 finished with result: 0x0; updating registry..."
}
Event ID 822: Updating registry for package PackageMoniker completed with result: Error.
#Message #
Fields #
| Name | Description |
|---|---|
Error HexInt32 | 2 completed with result. |
PackageMoniker UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 822,
"version": 0,
"level": 5,
"task": 6,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-05-28T18:29:53.1928723+00:00",
"event_record_id": 1747,
"correlation": {
"ActivityID": "{AFDF3271-EE92-0000-405B-DFAF92EEDC01}"
},
"execution": {
"process_id": 1912,
"thread_id": 2028
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Error": "0x0",
"PackageMoniker": "MicrosoftWindows.UndockedDevKit_10.0.20348.1_neutral_neutral_cw5n1h2txyewy"
},
"message": "Updating registry for package MicrosoftWindows.UndockedDevKit_10.0.20348.1_neutral_neutral_cw5n1h2txyewy completed with result: 0x0."
}
Event ID 823: Unable to determine whether package PackageMoniker is an all user package with error: Error.
#Event ID 824: Windows cannot register the package PackageName because Modern App can't be updated to Xap.
#Event ID 825: Windows cannot register the package PackageName because Appx can't be updated to SL Lightup.
#Event ID 826: Windows cannot register the package PackageName because there is mismatch in developer status for package registered with same PID.
#Event ID 827: Capability parsing started for the package {PackageName}.
#Fields #
| Name | Description |
|---|---|
PackageName |
Event ID 828: error ErrorCode: AppX Deployment DeploymentOperation operation on package PackageFullName from: Path failed.
#Event ID 829: Could not retrieve decryption key from CLIP
#Event ID 830: Move is blocked for package PackageName.
#Event ID 831: AppXDeployment.Task.Server.AppxAllUserStore831
#Fields #
| Name | Description |
|---|---|
ErrorCode HexInt32 |
Event ID 832: The downlevel package repository could not be accessed for package PackageFullName (action=Action).
#Event ID 833: The package PackageName was removed from the package repository because the package manifests are missing.
#Event ID 834: The package repository fix failed with error code ErrorCode.
#Event ID 835: The optional package PackageMoniker can't be installed because its main package dependency PackageMoniker2 is not installed.
#Event ID 836: The optional package PackageMoniker2 with dependency on main package PackageMoniker will also be removed.
#Event ID 838: Invalid End of Life package PackageName will be ignored.
#Event ID 839: Skipping package PackageMoniker because its volume is offline or missing: Error.
#Event ID 840: The corresponding main package already has the same Application Id PackageName as this optional package.
#Event ID 841: Failed to Expand the environment strings, while creating the Merged Pri file for package:String, with error :ErrorCode.
#Event ID 842: Failed to create the Merged Pri file for package:String with error ErrorCode.
#Event ID 843: The optional package PackageMoniker2 has a FullTrust entry point which requires the main package PackageMoniker to have the runFullTrust capability which it does not have.
#Event ID 844: The optional package with centennial content PackageMoniker2 is not in a related set and it is required to be in a related set specified by the centennial main ...
#Event ID 845: Windows can't provision the package PackageMoniker because it is an unsupported package type.
#Message #
Fields #
| Name | Description |
|---|---|
PackageMoniker UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 845,
"version": 0,
"level": 2,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-06-13T05:45:51.0917405+00:00",
"event_record_id": 1815,
"correlation": {
"ActivityID": "{C6821FB2-EF88-0004-9642-82C688EFDC01}"
},
"execution": {
"process_id": 1492,
"thread_id": 7976
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageMoniker": "Microsoft.MicrosoftEdge.Stable_149.0.4022.62_neutral__8wekyb3d8bbwe"
},
"message": "Windows can't provision the package Microsoft.MicrosoftEdge.Stable_149.0.4022.62_neutral__8wekyb3d8bbwe because it is an unsupported package type."
}
Event ID 846: Windows can't provision the package PackageMoniker because it is not installed on a system volume.
#Event ID 847: Windows can't provision the package PackageMoniker because its dependency main package is not provisioned.
#Event ID 848: Package PackageMoniker is end of life and can no longer be installed.
#Event ID 849: Target user for deployment DeploymentOperation operation on package Package was changed to DefaultAccount.
#Event ID 850: Redirection to DefaultAccount was attempted for deployment operation Result on package DeploymentOperation and blocked because the user is not a device owner.
#Description
Redirection to DefaultAccount was attempted for deployment operation Result on package DeploymentOperation and blocked because the user is not a device owner. User: Package. Result: OriginalUser.
Message #
Fields #
| Name | Description |
|---|---|
DeploymentOperation UInt32 | |
Package UnicodeString | |
OriginalUser UnicodeString | |
ErrorCode UInt32 |
Event ID 851: Windows can't upgrade to package PackageMoniker due to a different architecture when policy for the package requires same-architecture upgrades.
#Event ID 852: Scheduled task String could not be enabled due to error: ErrorCode.
#Event ID 853: Error ErrorCode in package folding: cannot create hardlinking file in main package folder for file String1, because both package String2 and package String3 have this file.
#Event ID 854: Successfully added the following uri(s) to be processed: Path.
#Message #
Fields #
| Name | Description | Rules |
|---|---|---|
Path UnicodeString | Successfully added the following uri(s) to be processed. | 65 detection rules |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 854,
"version": 0,
"level": 4,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-06-13T05:45:50.4695716+00:00",
"event_record_id": 1806,
"correlation": {
"ActivityID": "{C6821FB2-EF88-0003-695B-82C688EFDC01}"
},
"execution": {
"process_id": 1492,
"thread_id": 7976
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Path": " file:///C:/Program%20Files%20(x86)/Microsoft/Edge/Application/149.0.4022.62/identity_proxy/win10/identity_helper.Sparse.stable.msix"
},
"message": "Successfully added the following uri(s) to be processed: file:///C:/Program%20Files%20(x86)/Microsoft/Edge/Application/149.0.4022.62/identity_proxy/win10/identity_helper.Sparse.stable.msix."
}
Common Indicators #
Field/value combinations most frequently checked by detection rules targeting this event, derived from cross-vendor predicate analysis.
| Field | Kind | Value | Rules | Vendors |
|---|---|---|---|---|
Path | contains | \desktop\ | 1 rule | sigma |
Path | contains | \downloads\ | 1 rule | sigma |
Detection Rules #
Full rule details for this event, including ATT&CK technique mappings and native queries →Sigma # view in coverage
Splunk # view in coverage
T1204, T1204.002
Event ID 855: Finished resolving action lists.
#Description
Finished resolving action lists. DeploymentRequest action lists:PackageMoniker.
Message #
Fields #
| Name | Description | Rules |
|---|---|---|
PackageMoniker UnicodeString | Finished resolving action lists. DeploymentRequest action lists. | 2 detection rules |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 855,
"version": 0,
"level": 4,
"task": 4,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-05-28T18:29:52.9885906+00:00",
"event_record_id": 1731,
"correlation": {
"ActivityID": "{AFDF3271-EE92-0002-D461-DFAF92EEDC01}"
},
"execution": {
"process_id": 7404,
"thread_id": 5504
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"PackageMoniker": " addPackageList: MicrosoftWindows.UndockedDevKit_10.0.20348.1_neutral_neutral_cw5n1h2txyewy"
},
"message": "Finished resolving action lists. DeploymentRequest action lists: addPackageList: MicrosoftWindows.UndockedDevKit_10.0.20348.1_neutral_neutral_cw5n1h2txyewy."
}
Common Indicators #
Field/value combinations most frequently checked by detection rules targeting this event, derived from cross-vendor predicate analysis.
| Field | Kind | Value | Rules | Vendors |
|---|---|---|---|---|
Flags | eq | 8388608 | 1 rule | splunk |
Detection Rules #
Full rule details for this event, including ATT&CK technique mappings and native queries →Splunk # view in coverage
T1204, T1204.002, T1553, T1553.005↳ also matches Event ID 603: Started deployment DeploymentOperation operation on a package with main parameter Path and Options Flags and FlagsHigh. T1204, T1204.002, T1553, T1553.005
Event ID 856: Getting registration status of package family PackageFamilyName for user UserSid.
#Message #
Fields #
| Name | Description |
|---|---|
UserSid UnicodeString | |
PackageFamilyName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 856,
"version": 0,
"level": 5,
"task": 6,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-03-12T02:57:25.172968+00:00",
"event_record_id": 13424,
"correlation": {
"ActivityID": "164E10E5-B120-000D-488E-511620B1DC01"
},
"execution": {
"process_id": 1116,
"thread_id": 12004
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"UserSid": "S-1-5-21-3407486967-1585450050-1838039599-1000",
"PackageFamilyName": "Microsoft.XboxGameOverlay_8wekyb3d8bbwe"
},
"message": ""
}
Event ID 857: Getting registration status of package family PackageFamilyName completed with result: Error.
#Description
Getting registration status of package family PackageFamilyName completed with result: Error.(statusFound: FoundState, Status: ErrorCode).
Message #
Fields #
| Name | Description |
|---|---|
Error HexInt32 | |
PackageFamilyName UnicodeString | |
FoundState Boolean | |
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 857,
"version": 0,
"level": 5,
"task": 6,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-03-12T02:57:25.173659+00:00",
"event_record_id": 13426,
"correlation": {
"ActivityID": "164E10E5-B120-000D-488E-511620B1DC01"
},
"execution": {
"process_id": 1116,
"thread_id": 12004
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Error": "0x0",
"PackageFamilyName": "Microsoft.XboxGameOverlay_8wekyb3d8bbwe",
"FoundState": true,
"ErrorCode": "0x0"
},
"message": ""
}
Event ID 858: Failed to determine the type of current user's profile with error HResult.
#Event ID 859: Failed to check for a developer license with error HResult.
#Event ID 861: The InstallStub option cannot be used with package String because it is not a bundle containing a stub.
#Event ID 862: The package PackageMoniker2 has a host runtime dependency resolving to package PackageMoniker3 containing full trust content which requires the main package PackageMoniker to have the r...
#Description
The package PackageMoniker2 has a host runtime dependency resolving to package PackageMoniker3 containing full trust content which requires the main package PackageMoniker to have the runFullTrust capability which it does not have.
Message #
Fields #
| Name | Description |
|---|---|
PackageMoniker UnicodeString | |
PackageMoniker2 UnicodeString | |
PackageMoniker3 UnicodeString |
Event ID 863: Orphaned AppDataVolume OrphanedAppDataVolume no longer exists, and is now replaced with the package volume MitigatedAppDataVolume.
#Event ID 864: The preinstalled app PackageMoniker will be destaged because it is not applicable for the region of the device.
#Event ID 865: Path missing for package PackageName, will be ignored.
#Event ID 866: Windows cannot install package PackageName because it must be installed with an external location.
#Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | |
DeploymentOptions HexInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 866,
"version": 0,
"level": 2,
"task": 3,
"opcode": 0,
"keywords": 4611756387171565569,
"time_created": "2023-11-06T06:22:44.277802+00:00",
"event_record_id": 6088,
"correlation": {
"ActivityID": "626F7C94-1079-0000-A09A-6F627910DA01"
},
"execution": {
"process_id": 1532,
"thread_id": 1636
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageName": "Microsoft.MicrosoftEdge.Stable_118.0.2088.61_neutral__8wekyb3d8bbwe",
"DeploymentOptions": "0x10000020"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 867: Windows cannot install package PackageName because it is already installed with a different external location.
#Event ID 868: Windows failed to evaluate the preinstalled apps' region applicability with error ErrorCode at step String.
#Event ID 900: Windows cannot install package PackageFullname because existing app package ExitingPackageFullname uses the same mutable package directory MutablePackageDirectory.
#Event ID 926: Cannot provision the related set.
#Event ID 927: Cannot provision the related set.
#Event ID 928: Cannot provision the related set.
#Event ID 929: The package family name from the.
#Description
The package family name (PackageFamilyNameTwo) from the .appinstaller file does not match the expected package family name (PackageFamilyNameOne) that has previously been associated with the appinstaller uri. Please ensure the .appinstaller points to a package within the existing package family, or uninstall the existing package family, or move the .appinstaller to a different uri.
Message #
Fields #
| Name | Description |
|---|---|
PackageFamilyNameOne UnicodeString | |
PackageFamilyNameTwo UnicodeString |
Event ID 930: The appinstaller uri Path is already being used by another package and cannot be applied to package PackageName until the association is removed.
#Event ID 931: Update check on applications configured for AppInstaller file background updates completed successfully for the following package families:Path.
#Event ID 932: Package SystemRegistration state changed across upgrade: Incoming package incomingPackageFullName has state processIncomingPackage, Outgoing package outgoingPackageFullName has state outgoingPackag...
#Description
Package SystemRegistration state changed across upgrade: Incoming package incomingPackageFullName has state processIncomingPackage, Outgoing package outgoingPackageFullName has state outgoingPackageIsSystemRegistered.
Message #
Fields #
| Name | Description |
|---|---|
incomingPackageFullName UnicodeString | |
processIncomingPackage Boolean | |
outgoingPackageFullName UnicodeString | |
outgoingPackageIsSystemRegistered Boolean |
Event ID 933: Evaluation of allow list of package family names for BlockNonAdminUserInstall policy failed for rule allowListRule with error code
#Description
Evaluation of allow list of package family names for BlockNonAdminUserInstall policy failed for rule with error code . .
Fields #
| Name | Description |
|---|---|
allowListRule UnicodeString | |
regExErrorCode UInt64 | |
regExErrorDescription AnsiString |
Event ID 933: Evaluation of allow list of package family names for BlockNonAdminUserInstall policy failed for rule allowListRule with error code regExErrorCode.
#Event ID 934
#Fields #
| Name | Description |
|---|---|
AppxPoliciesKeyOpened Boolean | |
EnableMsixAllowedZonesExists Boolean | |
EnableMsixAllowedZones Boolean | |
MsixAllowedZonesKeyOpened Boolean | |
ErrorCode HexInt32 |
Event ID 936
#Fields #
| Name | Description |
|---|---|
Uri UnicodeString | |
UriSecurityZone UnicodeString | |
DefaultPolicyApplied Boolean | |
ErrorCode HexInt32 |
Event ID 938
#Fields #
| Name | Description |
|---|---|
Uri UnicodeString | |
UriSecurityZone UnicodeString | |
DefaultSmartScreenCheckPolicyApplied Boolean | |
ErrorCode HexInt32 |
Event ID 1001: Started activating the PackageName package.
#Event ID 1002: Finished activating the PackageName package.
#Event ID 1003: Started deactivating the PackageName package.
#Event ID 1004: Finished deactivating the PackageName package.
#Event ID 1007: Started parsing the PackageName package manifest.
#Event ID 1008: Finished parsing the PackageName package manifest.
#Event ID 1009: Started conflict resolution on PackageName package for extension CategoryName and KeyName key.
#Event ID 1010: Finished conflict resolution on PackageName package for extension CategoryName and KeyName key.
#Event ID 1011: Started an evaluate of the request for the ExtensionName extension.
#Event ID 1012: Finished an evaluate of the request for the ExtensionName extension.
#Event ID 1013: Started removing the request for the ExtensionName extension.
#Event ID 1014: Finished removing the request for the ExtensionName extension.
#Event ID 1015: Started an evaluate update of the {PackageName} package for the {ExtensionName} extension.
#Fields #
| Name | Description |
|---|---|
PackageName | |
ExtensionName |
Event ID 1016: Finished an evaluate update of the {PackageName} package for the {ExtensionName} extension.
#Fields #
| Name | Description |
|---|---|
PackageName | |
ExtensionName |
Event ID 1017: Started committing the request for the ExtensionName extension.
#Event ID 1018: Finished committing the request for the ExtensionName extension.
#Event ID 1019: Started a call to dependency manager
#Event ID 1020: Finished a call from dependency manager with error: ErrorCode.
#Event ID 1021: Starting to setup the firewall for the PackageName package with BinaryCount binaries.
#Event ID 1022: Completed setting up the firewall for the PackageName package with ErrorCode error code.
#Event ID 1024: Completed setting up the device capabilities for the PackageName package with ErrorCode error code.
#Event ID 1025: Starting to create the AppContainer profile for the PackageName package.
#Event ID 1026: Completed creating the AppContainer profile for the PackageName package with ErrorCode error code.
#Event ID 1029: Starting to create the repository metadata for the PackageName package.
#Event ID 1030: Completed creating the repository metadata for the PackageName package by ErrorCode error code.
#Event ID 1031: About to call CreateDataSource with PackageUri.
#Event ID 1032: Finished call from CreateDataSource for PackageUri.
#Event ID 1033: Begin delta diff calculation for package update: PackageUri staging to PackageFolder with base package in PackageFolderOld.
#Event ID 1034: End delta diff calculation for package update: PackageUri staging to PackageFolder with base package in PackageFolderOld.
#Event ID 1035: Begin range request, file name FileName, offset Offset, size Size.
#Event ID 1036: Range request progress: file name FileName, offset Offset, size Size.
#Event ID 1037: End range request for file name FileName, offset Offset, size Size.
#Event ID 1038: PreAllocateFile Start for file FilePath size FileSize.
#Event ID 1039: PreAllocateFile End for file FilePath size FileSize.
#Event ID 1040: AppxRequestHandler::Run Start for package PackageUri staging to PackageFolder.
#Event ID 1041: AppxRequestHandler::Run End for Package PackageUri staged to PackageFolder.
#Event ID 1042: PreAllocatePackage Start: PreAllocatePackage_Start staging to PackageUri.
#Event ID 1043: PreAllocatePackage End: PreAllocatePackage_End staging to PackageUri.
#Event ID 1044: AppxRequestHandler::Run Start for package update: PackageUri staging to PackageFolder with base package in PackageFolderOld.
#Event ID 1045: AppxRequestHandler::Run End for package update: PackageUri staging to PackageFolder with base package in PackageFolderOld.
#Event ID 1046: PreAllocatePackage Start for package update: PackageUri staging to PackageFolder with base package in PackageFolderOld.
#Event ID 1047: PreAllocatePackage End for package update: PackageUri staging to PackageFolder with base package in PackageFolderOld.
#Event ID 1048: Starting to delete the de-staged package files.
#Event ID 1049: Deleted de-staged package files with result ReturnValue.
#Event ID 1051: Starting to delete the AppContainer profile for the PackageName package.
#Event ID 1052: Completed deleting the AppContainer profile for the PackageName package with ErrorCode error code.
#Event ID 1061: Started an evaluate of the request for the ExtensionName extension.
#Event ID 1062: Finished an evaluate of the request for the ExtensionName extension.
#Event ID 1063: Started removing the request for the ExtensionName extension.
#Event ID 1064: Finished removing the request for the ExtensionName extension.
#Event ID 1065: Started committing the request for the ExtensionName extension.
#Event ID 1066: Finished committing the request for the ExtensionName extension.
#Event ID 1101: AppXDeployment.Task.Server.Deployment.PackageStateHandlerStart
#Event ID 1102: AppXDeployment.Task.Server.Deployment.PackageStateHandlerStop
#Event ID 1103: AppXDeployment.Task.Server.Deployment.PackageManagerGetPackageReaderStart
#Event ID 1104: AppXDeployment.Task.Server.Deployment.PackageManagerGetPackageReaderStop
#Event ID 1107: AppXDeployment.Task.Server.Deployment.RepositoryTerminateSessionStart
#Event ID 1108: AppXDeployment.Task.Server.Deployment.RepositoryTerminateSessionStop
#Event ID 1109: AppXDeployment.Task.Server.Deployment.RepositoryBeginTransactionStart
#Event ID 1110: AppXDeployment.Task.Server.Deployment.RepositoryBeginTransactionStop
#Event ID 1113: AppXDeployment.Task.Server.Deployment.RepositoryCommitTransactionStart
#Event ID 1114: AppXDeployment.Task.Server.Deployment.RepositoryCommitTransactionStop
#Event ID 1115: AppXDeployment.Task.Server.Deployment.RepositoryRollbackTransactionStart
#Event ID 1116: AppXDeployment.Task.Server.Deployment.RepositoryRollbackTransactionStop
#Event ID 1117: AppXDeployment.Task.Server.Deployment.StagePackageStart
#Event ID 1118: AppXDeployment.Task.Server.Deployment.StagePackageStop
#Event ID 1119: AppXDeployment.Task.Server.Deployment.UpdatePackageStart
#Event ID 1120: AppXDeployment.Task.Server.Deployment.UpdatePackageStop
#Event ID 1121: AppXDeployment.Task.Server.Deployment.OSIMActivateStart
#Event ID 1122: AppXDeployment.Task.Server.Deployment.OSIMActivateStop
#Event ID 1125: AppXDeployment.Task.Server.Deployment.OSIMDeactivateStart
#Event ID 1126: AppXDeployment.Task.Server.Deployment.OSIMDeactivateStop
#Event ID 1127: AppXDeployment.Task.Server.Deployment.DeStagePackageStart
#Event ID 1128: AppXDeployment.Task.Server.Deployment.DeStagePackageStop
#Event ID 1129: AppXDeployment.Task.Server.Deployment.PrerequisiteStateHandlerStart
#Event ID 1130: AppXDeployment.Task.Server.Deployment.PrerequisiteStateHandlerStop
#Event ID 1131: AppXDeployment.Task.Server.Deployment.EvaluateStateHandlerStart
#Event ID 1132: AppXDeployment.Task.Server.Deployment.EvaluateStateHandlerStop
#Event ID 1133: AppXDeployment.Task.Server.Deployment.SetPackageStateStart
#Event ID 1134: AppXDeployment.Task.Server.Deployment.SetPackageStateStop
#Event ID 1135: AppXDeployment.Task.Server.Deployment.DeletePackageFilesStart
#Event ID 1136: AppXDeployment.Task.Server.Deployment.DeletePackageFilesStop
#Event ID 1137: AppXDeployment.Task.Server.Deployment.CleanupManagerPreDeploymentStart
#Event ID 1138: AppXDeployment.Task.Server.Deployment.CleanupManagerPreDeploymentStop
#Event ID 1139: AppXDeployment.Task.Server.Deployment.CleanupManagerPostDeploymentStart
#Event ID 1140: AppXDeployment.Task.Server.Deployment.CleanupManagerPostDeploymentStop
#Event ID 1141: AppXDeployment.Task.Server.Deployment.PackagesInUseStart
#Event ID 1142: AppXDeployment.Task.Server.Deployment.PackagesInUseStop
#Event ID 1143: AppXDeployment.Task.Server.Deployment.AllowServiceStart
#Event ID 1144: AppXDeployment.Task.Server.Deployment.AllowServiceStop
#Event ID 1145: AppXDeployment.Task.Server.Deployment.AllowService2Start
#Event ID 1146: AppXDeployment.Task.Server.Deployment.AllowService2Stop
#Event ID 1147: AppXDeployment.Task.Server.Deployment.AllowUninstallStart
#Event ID 1148: AppXDeployment.Task.Server.Deployment.AllowUninstallStop
#Event ID 1149: AppXDeployment.Task.Server.Deployment.DisablePackageStart
#Event ID 1150: AppXDeployment.Task.Server.Deployment.DisablePackageStop
#Event ID 1151: AppXDeployment.Task.Server.Deployment.BeginJETSessionStart
#Event ID 1152: AppXDeployment.Task.Server.Deployment.BeginJETSessionStop
#Event ID 1153: AppXDeployment.Task.Server.Deployment.CreateDatabaseStart
#Event ID 1154: AppXDeployment.Task.Server.Deployment.CreateDatabaseStop
#Event ID 1155: AppXDeployment.Task.Server.Deployment.EndJETSessionStart
#Event ID 1156: AppXDeployment.Task.Server.Deployment.EndJETSessionStop
#Event ID 1157: AppXDeployment.Task.Server.Deployment.ReleaseJETResourcesStart
#Event ID 1158: AppXDeployment.Task.Server.Deployment.ReleaseJETResourcesStop
#Event ID 1161: AppXDeployment.Task.Server.Deployment.QueueManagerEnqueueStart
#Event ID 1162: AppXDeployment.Task.Server.Deployment.QueueManagerEnqueueStop
#Event ID 1163: AppXDeployment.Task.Server.Deployment.QueueManagerDequeueStart
#Event ID 1164: AppXDeployment.Task.Server.Deployment.QueueManagerDequeueStop
#Event ID 1165: AppXDeployment.Task.Server.Deployment.QueueManagerGetNextStart
#Event ID 1166: AppXDeployment.Task.Server.Deployment.QueueManagerGetNextStop
#Event ID 1169: AppXDeployment.Task.Server.Deployment.GetRequestForWNFNameStart
#Event ID 1170: AppXDeployment.Task.Server.Deployment.GetRequestForWNFNameStop
#Event ID 1171: AppXDeployment.Task.Server.Deployment.CancelRequestStart
#Event ID 1172: AppXDeployment.Task.Server.Deployment.CancelRequestStop
#Event ID 1173: AppXDeployment.Task.Server.Deployment.FlushUserRegistrationStart
#Event ID 1174: AppXDeployment.Task.Server.Deployment.FlushUserRegistrationStop
#Event ID 1175: AppXDeployment.Task.Server.Deployment.FlushMachineRegistrationStart
#Event ID 1176: AppXDeployment.Task.Server.Deployment.FlushMachineRegistrationStop
#Event ID 1177: AppXDeployment.Task.Server.Deployment.DataFlushStateHandlerStart
#Event ID 1178: AppXDeployment.Task.Server.Deployment.DataFlushStateHandlerStop
#Event ID 1179: AppXDeployment.Task.Server.Deployment.BundleProcessorStart
#Event ID 1180: AppXDeployment.Task.Server.Deployment.BundleProcessorStop
#Event ID 1181: AppXDeployment.Task.Server.Deployment.StageUserDataStart
#Event ID 1182: AppXDeployment.Task.Server.Deployment.StageUserDataStop
#Event ID 1183: AppXDeployment.Task.Server.Deployment.SISOptimizationStart
#Event ID 1184: AppXDeployment.Task.Server.Deployment.SISOptimizationStop
#Event ID 1185: AppXDeployment.Task.Server.Deployment.SISOptimizationStart1185
#Event ID 1186: AppXDeployment.Task.Server.Deployment.SISOptimizationStop1186
#Event ID 1187: AppXDeployment.Task.Server.Deployment.SISOptimizationStart1187
#Event ID 1188: AppXDeployment.Task.Server.Deployment.SISOptimizationStop1188
#Event ID 1189: AppXDeployment.Task.Server.Deployment.SISOptimizationStart1189
#Event ID 1190: AppXDeployment.Task.Server.Deployment.SISOptimizationStop1190
#Event ID 1191: AppXDeployment.Task.Server.Deployment.SISOptimizationStart1191
#Event ID 1192: AppXDeployment.Task.Server.Deployment.SISOptimizationStop1192
#Event ID 1199: AppXDeployment.Task.Server.Deployment.SetPackageStatusStart
#Event ID 1200: AppXDeployment.Task.Server.Deployment.SetPackageStatusStop
#Event ID 1201: AppXDeployment.Task.Server.Deployment.ClearPackageStatusStart
#Event ID 1202: AppXDeployment.Task.Server.Deployment.ClearPackageStatusStop
#Event ID 1203: AppXDeployment.Task.Server.Deployment.SetPackageStatusStart1203
#Event ID 1204: AppXDeployment.Task.Server.Deployment.SetPackageStatusStop1204
#Event ID 1205: AppXDeployment.Task.Server.Deployment.ClearPackageStatusStart1205
#Event ID 1206: AppXDeployment.Task.Server.Deployment.ClearPackageStatusStop1206
#Event ID 1207: AppXDeployment.Task.Server.Deployment.UpdatePackageStatusStart
#Event ID 1208: AppXDeployment.Task.Server.Deployment.UpdatePackageStatusStop
#Event ID 1209: AppXDeployment.Task.Server.Deployment.VersionSupercedenceHandlerStart
#Event ID 1210: AppXDeployment.Task.Server.Deployment.VersionSupercedenceHandlerStop
#Event ID 1211: AppXDeployment.Task.Server.Deployment.MRTDataStateHandlerStart
#Event ID 1212: AppXDeployment.Task.Server.Deployment.MRTDataStateHandlerStop
#Event ID 1215: AppXDeployment.Task.Server.Deployment.AllowResetStart
#Event ID 1216: AppXDeployment.Task.Server.Deployment.AllowResetStop
#Event ID 1217: AppXDeployment.Task.Server.Deployment.TilesStateHandlerStart
#Event ID 1218: AppXDeployment.Task.Server.Deployment.TilesStateHandlerStop
#Event ID 1219: AppXDeployment.Task.Server.Deployment.OSIMActivateStart1219
#Event ID 1220: AppXDeployment.Task.Server.Deployment.OSIMActivateStop1220
#Event ID 1223: Hardlink candidates - Current package CurrentPackageFullName, target package TargetPackageFullName, current file path CurrentFilePath, target file path TargetFilePath, current file size CurrentFile...
#Description
Hardlink candidates - Current package CurrentPackageFullName, target package TargetPackageFullName, current file path CurrentFilePath, target file path TargetFilePath, current file size CurrentFileSize, target file size TargetFileSize.
Message #
Fields #
| Name | Description |
|---|---|
CurrentPackageFullName UnicodeString | |
TargetPackageFullName UnicodeString | |
CurrentFilePath UnicodeString | |
TargetFilePath UnicodeString | |
CurrentFileSize HexInt64 | |
TargetFileSize HexInt64 |
Event ID 1224: AppXDeployment.Task.Server.Deployment.SharedAppsRedirectHandlerStart
#Event ID 1225: AppXDeployment.Task.Server.Deployment.SharedAppsRedirectHandlerStop
#Event ID 1226: AppXDeployment.Task.Server.Deployment.SharedAppsSyncHandlerStart
#Event ID 1227: AppXDeployment.Task.Server.Deployment.SharedAppsSyncHandlerStop
#Event ID 1228: ApplyAppxSharedFileAclsStart for path Path.
#Event ID 1229: ApplyAppxSharedFileAclsStop completed with result ErrorCode.
#Event ID 1230: These hardlinks did not have packages in repository: Path.
#Message #
Fields #
| Name | Description |
|---|---|
Path UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 1230,
"version": 0,
"level": 3,
"task": 5,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-02-12T20:24:26.368287+00:00",
"event_record_id": 11186,
"correlation": {
"ActivityID": "43A6D212-9A2A-0002-5477-AB432A9ADC01"
},
"execution": {
"process_id": 14100,
"thread_id": 14308
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Path": "\\Program Files\\WindowsApps\\Microsoft.UI.Xaml.2.4_2.42007.9001.0_x86__8wekyb3d8bbwe\\Microsoft.UI.Xaml\\Assets\\NoiseAsset_256x256_PNG.png;"
},
"message": ""
}
Event ID 1231: AppXDeployment.Task.Server.Deployment.ContainerDeploymentStateHandlerStart
#Event ID 1232: AppXDeployment.Task.Server.Deployment.ContainerDeploymentStateHandlerStop
#Event ID 1233: AppXDeployment.Task.Server.Deployment.ContainerDeploymentStateHandlerStart1233
#Event ID 1234: AppXDeployment.Task.Server.Deployment.ContainerDeploymentStateHandlerStop1234
#Event ID 1235: Msixvc staging session method Path started for package PackageName.
#Event ID 1236: Msixvc staging session method Path finished for package PackageName.
#Event ID 1237: AppXDeployment.Task.Server.Deployment.ContainerDeploymentStateHandlerStart1237
#Event ID 1238: AppXDeployment.Task.Server.Deployment.ContainerDeploymentStateHandlerStop1238
#Event ID 1301: Starting to delete the de-staged package files in directory Path.
#Event ID 1302: Deleted de-staged package files with result ReturnValue.
#Event ID 1303: AppXDeployment.Task.Server.Deployment.FileStat
#Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
PackageKey Int64 | |
Count UInt32 | |
SizeKB UInt32 | |
HardLinkedCount UInt32 | |
HardLinkedSizeKB UInt32 | |
DurationMS UInt32 |
Event ID 1304: AppXDeployment.Task.Server.Deployment.FileCompressionStat
#Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
PackageKey Int64 | |
Count UInt32 | |
UncompressedSizeKB UInt32 | |
CompressedSizeKB UInt32 | |
DurationMS UInt32 |
Event ID 2000: AppXDeployment.Perftrack.Task.UninstallStart
#Fields #
| Name | Description |
|---|---|
packageFullName UnicodeString | |
returnCode UnicodeString |
Event ID 2001: AppXDeployment.Perftrack.Task.UninstallStop
#Fields #
| Name | Description |
|---|---|
packageFullName UnicodeString | |
returnCode UnicodeString |
Event ID 3000: AppXDeployment.Task.Server.OSIMStart3000
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3001: AppXDeployment.Task.Server.OSIMStop3001
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3002: AppXDeployment.Task.Server.OSIMStart3002
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3003: AppXDeployment.Task.Server.OSIMStop3003
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3004: AppXDeployment.Task.Server.OSIMStart3004
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3005: AppXDeployment.Task.Server.OSIMStop3005
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3006: AppXDeployment.Task.Server.OSIMStart3006
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3007: AppXDeployment.Task.Server.OSIMStop3007
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3008: AppXDeployment.Task.Server.OSIMStart3008
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3009: AppXDeployment.Task.Server.OSIMStop3009
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3010: AppXDeployment.Task.Server.OSIMStart3010
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3011: AppXDeployment.Task.Server.OSIMStop3011
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3012: AppXDeployment.Task.Server.OSIMStart3012
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3013: AppXDeployment.Task.Server.OSIMStop3013
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3014: AppXDeployment.Task.Server.OSIMStart3014
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3015: AppXDeployment.Task.Server.OSIMStop3015
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3016: AppXDeployment.Task.Server.OSIMStart3016
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3017: AppXDeployment.Task.Server.OSIMStop3017
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3018: AppXDeployment.Task.Server.OSIMStart3018
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3019: AppXDeployment.Task.Server.OSIMStop3019
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3020: AppXDeployment.Task.Server.OSIMStart3020
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3021: AppXDeployment.Task.Server.OSIMStop3021
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3022: AppXDeployment.Task.Server.OSIMStart3022
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3023: AppXDeployment.Task.Server.OSIMStop3023
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3024: AppXDeployment.Task.Server.OSIMStart3024
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3025: AppXDeployment.Task.Server.OSIMStop3025
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3026: AppXDeployment.Task.Server.OSIMStart3026
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3027: AppXDeployment.Task.Server.OSIMStop3027
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3028: AppXDeployment.Task.Server.OSIMStart3028
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3029: AppXDeployment.Task.Server.OSIMStop3029
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3030: AppXDeployment.Task.Server.OSIMStart3030
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3031: AppXDeployment.Task.Server.OSIMStop3031
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3032: AppXDeployment.Task.Server.OSIMStart3032
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3033: AppXDeployment.Task.Server.OSIMStop3033
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3034: AppXDeployment.Task.Server.OSIMStart3034
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3035: AppXDeployment.Task.Server.OSIMStop3035
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3036: AppXDeployment.Task.Server.OSIMStart3036
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3037: AppXDeployment.Task.Server.OSIMStop3037
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3038: AppXDeployment.Task.Server.OSIMStart3038
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3039: AppXDeployment.Task.Server.OSIMStop3039
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3040: AppXDeployment.Task.Server.OSIMStart3040
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3041: AppXDeployment.Task.Server.OSIMStop3041
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3044: AppXDeployment.Task.Server.OSIMStart3044
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3045: AppXDeployment.Task.Server.OSIMStop3045
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3046: AppXDeployment.Task.Server.OSIMStart3046
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3047: AppXDeployment.Task.Server.OSIMStop3047
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3048: AppXDeployment.Task.Server.OSIMStart3048
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3049: AppXDeployment.Task.Server.OSIMStop3049
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3060: AppXDeployment.Task.Server.OSIMStart3060
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3061: AppXDeployment.Task.Server.OSIMStop3061
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3062: AppXDeployment.Task.Server.OSIMStart3062
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3063: AppXDeployment.Task.Server.OSIMStop3063
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3064: AppXDeployment.Task.Server.OSIMStart3064
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3065: AppXDeployment.Task.Server.OSIMStop3065
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3066: AppXDeployment.Task.Server.OSIMStart3066
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3067: AppXDeployment.Task.Server.OSIMStop3067
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3068: AppXDeployment.Task.Server.OSIMStart3068
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3069: AppXDeployment.Task.Server.OSIMStop3069
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3090: AppXDeployment.Task.Server.OSIMStart3090
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3091: AppXDeployment.Task.Server.OSIMStop3091
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3092: AppXDeployment.Task.Server.OSIMStart3092
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3093: AppXDeployment.Task.Server.OSIMStop3093
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3094: AppXDeployment.Task.Server.OSIMStart3094
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3095: AppXDeployment.Task.Server.OSIMStop3095
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3096: AppXDeployment.Task.Server.OSIMStart3096
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3097: AppXDeployment.Task.Server.OSIMStop3097
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3098: AppXDeployment.Task.Server.OSIMStart3098
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3099: AppXDeployment.Task.Server.OSIMStop3099
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3110: AppXDeployment.Task.Server.OSIMStart3110
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3111: AppXDeployment.Task.Server.OSIMStop3111
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3114: AppXDeployment.Task.Server.OSIMStart3114
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3115: AppXDeployment.Task.Server.OSIMStop3115
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3118: AppXDeployment.Task.Server.OSIMStart3118
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3119: AppXDeployment.Task.Server.OSIMStop3119
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3130: AppXDeployment.Task.Server.OSIMStart3130
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3131: AppXDeployment.Task.Server.OSIMStop3131
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3132: AppXDeployment.Task.Server.OSIMStart3132
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3133: AppXDeployment.Task.Server.OSIMStop3133
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3134: AppXDeployment.Task.Server.OSIMStart3134
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3135: AppXDeployment.Task.Server.OSIMStop3135
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3136: AppXDeployment.Task.Server.OSIMStart3136
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3137: AppXDeployment.Task.Server.OSIMStop3137
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3138: AppXDeployment.Task.Server.OSIMStart3138
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3139: AppXDeployment.Task.Server.OSIMStop3139
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3140: AppXDeployment.Task.Server.OSIMStart3140
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3141: AppXDeployment.Task.Server.OSIMStop3141
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3142: AppXDeployment.Task.Server.OSIMStart3142
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3143: AppXDeployment.Task.Server.OSIMStop3143
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3144: AppXDeployment.Task.Server.OSIMStart3144
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3145: AppXDeployment.Task.Server.OSIMStop3145
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3148: AppXDeployment.Task.Server.OSIMStart3148
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3149: AppXDeployment.Task.Server.OSIMStop3149
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3150: AppXDeployment.Task.Server.OSIMStart3150
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3151: AppXDeployment.Task.Server.OSIMStop3151
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3152: AppXDeployment.Task.Server.OSIMStart3152
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3153: AppXDeployment.Task.Server.OSIMStop3153
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3154: AppXDeployment.Task.Server.OSIMStart3154
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3155: AppXDeployment.Task.Server.OSIMStop3155
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3156: AppXDeployment.Task.Server.OSIMStart3156
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3157: AppXDeployment.Task.Server.OSIMStop3157
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3158: AppXDeployment.Task.Server.OSIMStart3158
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3159: AppXDeployment.Task.Server.OSIMStop3159
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3160: AppXDeployment.Task.Server.OSIMStart3160
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3161: AppXDeployment.Task.Server.OSIMStop3161
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3162: AppXDeployment.Task.Server.OSIMStart3162
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3163: AppXDeployment.Task.Server.OSIMStop3163
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3164: AppXDeployment.Task.Server.OSIMStart3164
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3165: AppXDeployment.Task.Server.OSIMStop3165
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3166: AppXDeployment.Task.Server.OSIMStart3166
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3167: AppXDeployment.Task.Server.OSIMStop3167
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3168: AppXDeployment.Task.Server.OSIMStart3168
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3169: AppXDeployment.Task.Server.OSIMStop3169
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3170: AppXDeployment.Task.Server.OSIMStart3170
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3171: AppXDeployment.Task.Server.OSIMStop3171
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3172: AppXDeployment.Task.Server.OSIMStart3172
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3173: AppXDeployment.Task.Server.OSIMStop3173
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3174: AppXDeployment.Task.Server.OSIMStart3174
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3175: AppXDeployment.Task.Server.OSIMStop3175
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3176: AppXDeployment.Task.Server.OSIMStart3176
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3177: AppXDeployment.Task.Server.OSIMStop3177
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3178: AppXDeployment.Task.Server.OSIMStart3178
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3179: AppXDeployment.Task.Server.OSIMStop3179
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3180: AppXDeployment.Task.Server.OSIMStart3180
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3181: AppXDeployment.Task.Server.OSIMStop3181
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3182: AppXDeployment.Task.Server.OSIMStart3182
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3183: AppXDeployment.Task.Server.OSIMStop3183
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3184: AppXDeployment.Task.Server.OSIMStart3184
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3185: AppXDeployment.Task.Server.OSIMStop3185
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3186: AppXDeployment.Task.Server.OSIMStart3186
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3187: AppXDeployment.Task.Server.OSIMStop3187
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3188: AppXDeployment.Task.Server.OSIMStart3188
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3189: AppXDeployment.Task.Server.OSIMStop3189
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3190: AppXDeployment.Task.Server.OSIMStart3190
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3191: AppXDeployment.Task.Server.OSIMStop3191
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3192: AppXDeployment.Task.Server.OSIMStart3192
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3193: AppXDeployment.Task.Server.OSIMStop3193
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3194: AppXDeployment.Task.Server.OSIMStart3194
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3195: AppXDeployment.Task.Server.OSIMStop3195
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3198: AppXDeployment.Task.Server.OSIMStart3198
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3199: AppXDeployment.Task.Server.OSIMStop3199
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3200: AppXDeployment.Task.Server.OSIMStart3200
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3201: AppXDeployment.Task.Server.OSIMStop3201
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3202: AppXDeployment.Task.Server.OSIMStart3202
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3203: AppXDeployment.Task.Server.OSIMStop3203
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3204: AppXDeployment.Task.Server.OSIMStart3204
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3205: AppXDeployment.Task.Server.OSIMStop3205
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3206: AppXDeployment.Task.Server.OSIMStart3206
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3207: AppXDeployment.Task.Server.OSIMStop3207
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3208: AppXDeployment.Task.Server.OSIMStart3208
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3209: AppXDeployment.Task.Server.OSIMStop3209
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3210: AppXDeployment.Task.Server.OSIMStart3210
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3211: AppXDeployment.Task.Server.OSIMStop3211
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3220: AppXDeployment.Task.Server.OSIMStart3220
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3221: AppXDeployment.Task.Server.OSIMStop3221
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3222: AppXDeployment.Task.Server.OSIMStart3222
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3223: AppXDeployment.Task.Server.OSIMStop3223
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3224: AppXDeployment.Task.Server.OSIMStart3224
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3225: AppXDeployment.Task.Server.OSIMStop3225
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3226: AppXDeployment.Task.Server.OSIMStart3226
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3227: AppXDeployment.Task.Server.OSIMStop3227
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3228: AppXDeployment.Task.Server.OSIMStart3228
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3229: AppXDeployment.Task.Server.OSIMStop3229
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3230: AppXDeployment.Task.Server.OSIMStart3230
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3231: AppXDeployment.Task.Server.OSIMStop3231
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3232: AppXDeployment.Task.Server.OSIMStart3232
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3233: AppXDeployment.Task.Server.OSIMStop3233
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3234: AppXDeployment.Task.Server.OSIMStart3234
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3235: AppXDeployment.Task.Server.OSIMStop3235
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3236: AppXDeployment.Task.Server.OSIMStart3236
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3237: AppXDeployment.Task.Server.OSIMStop3237
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3238: AppXDeployment.Task.Server.OSIMStart3238
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3239: AppXDeployment.Task.Server.OSIMStop3239
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3240: AppXDeployment.Task.Server.OSIMStart3240
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3241: AppXDeployment.Task.Server.OSIMStop3241
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3242: AppXDeployment.Task.Server.OSIMStart3242
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3243: AppXDeployment.Task.Server.OSIMStop3243
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3244: AppXDeployment.Task.Server.OSIMStart3244
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3245: AppXDeployment.Task.Server.OSIMStop3245
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3246: AppXDeployment.Task.Server.OSIMStart3246
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3247: AppXDeployment.Task.Server.OSIMStop3247
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3248: AppXDeployment.Task.Server.OSIMStart3248
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3249: AppXDeployment.Task.Server.OSIMStop3249
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3250: AppXDeployment.Task.Server.OSIMStart3250
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3251: AppXDeployment.Task.Server.OSIMStop3251
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3252: AppXDeployment.Task.Server.OSIMStart3252
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3253: AppXDeployment.Task.Server.OSIMStop3253
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3256: AppXDeployment.Task.Server.OSIMStart3256
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3257: AppXDeployment.Task.Server.OSIMStop3257
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3258: AppXDeployment.Task.Server.OSIMStart3258
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3259: AppXDeployment.Task.Server.OSIMStop3259
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3260: AppXDeployment.Task.Server.OSIMStart3260
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3261: AppXDeployment.Task.Server.OSIMStop3261
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3262: AppXDeployment.Task.Server.OSIMStart3262
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3263: AppXDeployment.Task.Server.OSIMStop3263
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3264: AppXDeployment.Task.Server.OSIMStart3264
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3265: AppXDeployment.Task.Server.OSIMStop3265
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3266: AppXDeployment.Task.Server.OSIMStart3266
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3267: AppXDeployment.Task.Server.OSIMStop3267
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3268: AppXDeployment.Task.Server.OSIMStart3268
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3269: AppXDeployment.Task.Server.OSIMStop3269
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3270: AppXDeployment.Task.Server.OSIMStart3270
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3271: AppXDeployment.Task.Server.OSIMStop3271
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3272: AppXDeployment.Task.Server.OSIMStart3272
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3273: AppXDeployment.Task.Server.OSIMStop3273
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3274: AppXDeployment.Task.Server.OSIMStart3274
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3275: AppXDeployment.Task.Server.OSIMStop3275
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3276: AppXDeployment.Task.Server.OSIMStart3276
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3277: AppXDeployment.Task.Server.OSIMStop3277
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3278: AppXDeployment.Task.Server.OSIMStart3278
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3279: AppXDeployment.Task.Server.OSIMStop3279
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3280: AppXDeployment.Task.Server.OSIMStart3280
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3281: AppXDeployment.Task.Server.OSIMStop3281
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3300: AppXDeployment.Task.Server.OSIMStart3300
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3301: AppXDeployment.Task.Server.OSIMStop3301
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3302: warning {ErrorCode}: The following error occurred while performing Indexed DB cleanup when removing the package: {PackageName} ({ErrorText}).
#Fields #
| Name | Description |
|---|---|
ErrorCode | |
PackageName | |
ErrorText |
Event ID 3303: Started loading the AppX Extensions DLL.
#Event ID 3304: Finished loading the AppX Extensions DLL.
#Event ID 3305: AppXDeployment.Task.Server.OSIMStart3305
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3306: AppXDeployment.Task.Server.OSIMStop3306
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3307: AppXDeployment.Task.Server.OSIMStart3307
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3308: AppXDeployment.Task.Server.OSIMStop3308
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3309: AppXDeployment.Task.Server.OSIMStart3309
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3310: AppXDeployment.Task.Server.OSIMStop3310
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3311: AppXDeployment.Task.Server.OSIMStart3311
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3312: AppXDeployment.Task.Server.OSIMStop3312
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3313: AppXDeployment.Task.Server.OSIMStart3313
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3314: AppXDeployment.Task.Server.OSIMStop3314
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3315: AppXDeployment.Task.Server.OSIMStart3315
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3316: AppXDeployment.Task.Server.OSIMStop3316
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3320: AppXDeployment.Task.Server.OSIMStart3320
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3321: AppXDeployment.Task.Server.OSIMStop3321
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3324: AppXDeployment.Task.Server.OSIMStart3324
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3325: AppXDeployment.Task.Server.OSIMStop3325
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3326: AppXDeployment.Task.Server.OSIMStart3326
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3329: AppXDeployment.Task.Server.OSIMStop3329
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3330: AppXDeployment.Task.Server.OSIMStart3330
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3331: AppXDeployment.Task.Server.OSIMStop3331
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3332: AppXDeployment.Task.Server.OSIMStart3332
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3333: AppXDeployment.Task.Server.OSIMStop3333
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3334: AppXDeployment.Task.Server.OSIMStart3334
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3335: AppXDeployment.Task.Server.OSIMStop3335
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3336: AppXDeployment.Task.Server.OSIMStart3336
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3337: AppXDeployment.Task.Server.OSIMStop3337
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3338: AppXDeployment.Task.Server.OSIMStart3338
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3339: AppXDeployment.Task.Server.OSIMStop3339
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3360: AppXDeployment.Task.Server.OSIMStart3360
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3361: AppXDeployment.Task.Server.OSIMStop3361
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3362: AppXDeployment.Task.Server.OSIMStart3362
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3363: AppXDeployment.Task.Server.OSIMStop3363
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3364: AppXDeployment.Task.Server.OSIMStart3364
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3365: AppXDeployment.Task.Server.OSIMStop3365
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3366: AppXDeployment.Task.Server.OSIMStart3366
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3367: AppXDeployment.Task.Server.OSIMStop3367
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3368: AppXDeployment.Task.Server.OSIMStart3368
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3369: AppXDeployment.Task.Server.OSIMStop3369
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3370: AppXDeployment.Task.Server.OSIMStart3370
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3371: AppXDeployment.Task.Server.OSIMStop3371
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3372: AppXDeployment.Task.Server.OSIMStart3372
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3373: AppXDeployment.Task.Server.OSIMStop3373
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3380: AppXDeployment.Task.Server.OSIMStart3380
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3381: AppXDeployment.Task.Server.OSIMStop3381
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3382: AppXDeployment.Task.Server.OSIMStart3382
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3383: AppXDeployment.Task.Server.OSIMStop3383
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3384: AppXDeployment.Task.Server.OSIMStart3384
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3385: AppXDeployment.Task.Server.OSIMStop3385
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3386: AppXDeployment.Task.Server.OSIMStart3386
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3387: AppXDeployment.Task.Server.OSIMStop3387
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3388: AppXDeployment.Task.Server.OSIMStart3388
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3389: AppXDeployment.Task.Server.OSIMStop3389
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3390: AppXDeployment.Task.Server.OSIMStart3390
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3391: AppXDeployment.Task.Server.OSIMStop3391
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3392: AppXDeployment.Task.Server.OSIMStart3392
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3393: AppXDeployment.Task.Server.OSIMStop3393
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3394: AppXDeployment.Task.Server.OSIMStart3394
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3395: AppXDeployment.Task.Server.OSIMStop3395
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3396: AppXDeployment.Task.Server.OSIMStart3396
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3397: AppXDeployment.Task.Server.OSIMStop3397
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3398: AppXDeployment.Task.Server.OSIMStart3398
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3399: AppXDeployment.Task.Server.OSIMStop3399
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3400: AppXDeployment.Task.Server.OSIMStart3400
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3401: AppXDeployment.Task.Server.OSIMStop3401
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3402: AppXDeployment.Task.Server.OSIMStart3402
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3405: AppXDeployment.Task.Server.OSIMStop3405
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3406: AppXDeployment.Task.Server.OSIMStart3406
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3407: AppXDeployment.Task.Server.OSIMStop3407
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3408: AppXDeployment.Task.Server.OSIMStart3408
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3409: AppXDeployment.Task.Server.OSIMStop3409
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3410: AppXDeployment.Task.Server.OSIMStart3410
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3411: AppXDeployment.Task.Server.OSIMStop3411
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3420: AppXDeployment.Task.Server.OSIMStart3420
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3421: AppXDeployment.Task.Server.OSIMStop3421
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3424: AppXDeployment.Task.Server.OSIMStart3424
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3425: AppXDeployment.Task.Server.OSIMStop3425
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3440: AppXDeployment.Task.Server.OSIMStart3440
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3441: AppXDeployment.Task.Server.OSIMStop3441
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3442: AppXDeployment.Task.Server.OSIMStart3442
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3443: AppXDeployment.Task.Server.OSIMStop3443
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3444: AppXDeployment.Task.Server.OSIMStart3444
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3445: AppXDeployment.Task.Server.OSIMStop3445
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3446: AppXDeployment.Task.Server.OSIMStart3446
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3447: AppXDeployment.Task.Server.OSIMStop3447
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3448: AppXDeployment.Task.Server.OSIMStart3448
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3449: AppXDeployment.Task.Server.OSIMStop3449
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3500: AppXDeployment.Task.Server.ExtensionsStart
#Event ID 3501: AppXDeployment.Task.Server.ExtensionsStop
#Event ID 3502: AppXDeployment.Task.Server.ExtensionsStart3502
#Event ID 3503: AppXDeployment.Task.Server.ExtensionsStop3503
#Event ID 3600: AppXDeployment.Task.Server.OSIMStart3600
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3601: AppXDeployment.Task.Server.OSIMStop3601
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3610: AppXDeployment.Task.Server.OSIMStart3610
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3611: AppXDeployment.Task.Server.OSIMStop3611
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3612: AppXDeployment.Task.Server.OSIMStart3612
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3613: AppXDeployment.Task.Server.OSIMStop3613
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3614: AppXDeployment.Task.Server.OSIMStart3614
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3615: AppXDeployment.Task.Server.OSIMStop3615
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3616: AppXDeployment.Task.Server.OSIMStart3616
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3617: AppXDeployment.Task.Server.OSIMStop3617
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3618: AppXDeployment.Task.Server.OSIMStart3618
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3619: AppXDeployment.Task.Server.OSIMStop3619
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3620: AppXDeployment.Task.Server.OSIMStart3620
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3621: AppXDeployment.Task.Server.OSIMStop3621
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3622: AppXDeployment.Task.Server.OSIMStart3622
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3623: AppXDeployment.Task.Server.OSIMStop3623
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3624: AppXDeployment.Task.Server.OSIMStart3624
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3625: AppXDeployment.Task.Server.OSIMStop3625
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3626: AppXDeployment.Task.Server.OSIMStart3626
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3627: AppXDeployment.Task.Server.OSIMStop3627
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3628: AppXDeployment.Task.Server.OSIMStart3628
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3629: AppXDeployment.Task.Server.OSIMStop3629
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3650: AppXDeployment.Task.Server.OSIMStart3650
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3653: AppXDeployment.Task.Server.OSIMStop3653
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3654: AppXDeployment.Task.Server.OSIMStart3654
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3655: AppXDeployment.Task.Server.OSIMStop3655
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3656: AppXDeployment.Task.Server.OSIMStart3656
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3657: AppXDeployment.Task.Server.OSIMStop3657
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3658: AppXDeployment.Task.Server.OSIMStart3658
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3659: AppXDeployment.Task.Server.OSIMStop3659
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3660: AppXDeployment.Task.Server.OSIMStart3660
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3661: AppXDeployment.Task.Server.OSIMStop3661
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3662: AppXDeployment.Task.Server.OSIMStart3662
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3663: AppXDeployment.Task.Server.OSIMStop3663
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3664: AppXDeployment.Task.Server.OSIMStart3664
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3665: AppXDeployment.Task.Server.OSIMStop3665
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3666: AppXDeployment.Task.Server.OSIMStart3666
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3667: AppXDeployment.Task.Server.OSIMStop3667
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3668: AppXDeployment.Task.Server.OSIMStart3668
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3669: AppXDeployment.Task.Server.OSIMStop3669
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3670: AppXDeployment.Task.Server.OSIMStart3670
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3671: AppXDeployment.Task.Server.OSIMStop3671
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3672: AppXDeployment.Task.Server.OSIMStart3672
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3673: AppXDeployment.Task.Server.OSIMStop3673
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3674: AppXDeployment.Task.Server.OSIMStart3674
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3675: AppXDeployment.Task.Server.OSIMStop3675
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3676: AppXDeployment.Task.Server.OSIMStart3676
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3677: AppXDeployment.Task.Server.OSIMStop3677
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3678: AppXDeployment.Task.Server.OSIMStart3678
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3679: AppXDeployment.Task.Server.OSIMStop3679
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3700: AppXDeployment.Task.Server.OSIMStart3700
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3701: AppXDeployment.Task.Server.OSIMStop3701
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3702: AppXDeployment.Task.Server.OSIMStart3702
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3703: AppXDeployment.Task.Server.OSIMStop3703
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3704: AppXDeployment.Task.Server.OSIMStart3704
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3705: AppXDeployment.Task.Server.OSIMStop3705
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3706: AppXDeployment.Task.Server.OSIMStart3706
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3707: AppXDeployment.Task.Server.OSIMStop3707
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3708: AppXDeployment.Task.Server.OSIMStart3708
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3709: AppXDeployment.Task.Server.OSIMStop3709
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3800: AppXDeployment.Task.Server.OSIMStart3800
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3801: AppXDeployment.Task.Server.OSIMStop3801
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3802: AppXDeployment.Task.Server.OSIMStart3802
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3803: AppXDeployment.Task.Server.OSIMStop3803
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3804: AppXDeployment.Task.Server.OSIMStart3804
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3805: AppXDeployment.Task.Server.OSIMStop3805
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3806: AppXDeployment.Task.Server.OSIMStart3806
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3807: AppXDeployment.Task.Server.OSIMStop3807
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3808: AppXDeployment.Task.Server.OSIMStart3808
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3809: AppXDeployment.Task.Server.OSIMStop3809
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3830: AppXDeployment.Task.Server.OSIMStart3830
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3833: AppXDeployment.Task.Server.OSIMStop3833
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3834: AppXDeployment.Task.Server.OSIMStart3834
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3835: AppXDeployment.Task.Server.OSIMStop3835
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3836: AppXDeployment.Task.Server.OSIMStart3836
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3837: AppXDeployment.Task.Server.OSIMStop3837
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3838: AppXDeployment.Task.Server.OSIMStart3838
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3839: AppXDeployment.Task.Server.OSIMStop3839
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3860: AppXDeployment.Task.Server.Deployment.OptionalDependencyHandlerStart
#Event ID 3861: AppXDeployment.Task.Server.Deployment.OptionalDependencyHandlerStop
#Event ID 3950: AppXDeployment.Task.Server.OSIMStart3950
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3951: AppXDeployment.Task.Server.OSIMStop3951
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3952: AppXDeployment.Task.Server.OSIMStart3952
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3953: AppXDeployment.Task.Server.OSIMStop3953
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3954: AppXDeployment.Task.Server.OSIMStart3954
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3955: AppXDeployment.Task.Server.OSIMStop3955
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3956: AppXDeployment.Task.Server.OSIMStart3956
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3957: AppXDeployment.Task.Server.OSIMStop3957
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3958: AppXDeployment.Task.Server.OSIMStart3958
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3959: AppXDeployment.Task.Server.OSIMStop3959
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3960: AppXDeployment.Task.Server.OSIMStart3960
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3961: AppXDeployment.Task.Server.OSIMStop3961
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3962: AppXDeployment.Task.Server.OSIMStart3962
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3963: AppXDeployment.Task.Server.OSIMStop3963
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3964: AppXDeployment.Task.Server.OSIMStart3964
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3965: AppXDeployment.Task.Server.OSIMStop3965
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3966: AppXDeployment.Task.Server.OSIMStart3966
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3967: AppXDeployment.Task.Server.OSIMStop3967
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3968: AppXDeployment.Task.Server.OSIMStart3968
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 3969: AppXDeployment.Task.Server.OSIMStop3969
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4000: AppXDeployment.Task.Server.OSIMStart4000
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4001: AppXDeployment.Task.Server.OSIMStop4001
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4002: AppXDeployment.Task.Server.OSIMStart4002
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4003: AppXDeployment.Task.Server.OSIMStop4003
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4004: AppXDeployment.Task.Server.OSIMStart4004
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4005: AppXDeployment.Task.Server.OSIMStop4005
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4006: AppXDeployment.Task.Server.OSIMStart4006
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4007: AppXDeployment.Task.Server.OSIMStop4007
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4008: AppXDeployment.Task.Server.OSIMStart4008
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4009: AppXDeployment.Task.Server.OSIMStop4009
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4050: AppXDeployment.Task.Server.OSIMStart4050
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4051: AppXDeployment.Task.Server.OSIMStop4051
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4052: AppXDeployment.Task.Server.OSIMStart4052
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4053: AppXDeployment.Task.Server.OSIMStop4053
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4054: AppXDeployment.Task.Server.OSIMStart4054
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4055: AppXDeployment.Task.Server.OSIMStop4055
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4056: AppXDeployment.Task.Server.OSIMStart4056
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4057: AppXDeployment.Task.Server.OSIMStop4057
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4058: AppXDeployment.Task.Server.OSIMStart4058
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4101: AppXDeployment.Task.Server.OSIMStop4101
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4102: AppXDeployment.Task.Server.OSIMStart4102
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4103: AppXDeployment.Task.Server.OSIMStop4103
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4104: AppXDeployment.Task.Server.OSIMStart4104
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4105: AppXDeployment.Task.Server.OSIMStop4105
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4106: AppXDeployment.Task.Server.OSIMStart4106
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4107: AppXDeployment.Task.Server.OSIMStop4107
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4108: AppXDeployment.Task.Server.OSIMStart4108
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4109: AppXDeployment.Task.Server.OSIMStop4109
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4150: AppXDeployment.Task.Server.OSIMStart4150
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4151: AppXDeployment.Task.Server.OSIMStop4151
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4152: AppXDeployment.Task.Server.OSIMStart4152
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4153: AppXDeployment.Task.Server.OSIMStop4153
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4160: AppXDeployment.Task.Server.OSIMStart4160
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4161: AppXDeployment.Task.Server.OSIMStop4161
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4162: AppXDeployment.Task.Server.OSIMStart4162
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4163: AppXDeployment.Task.Server.OSIMStop4163
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4164: AppXDeployment.Task.Server.OSIMStart4164
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4165: AppXDeployment.Task.Server.OSIMStop4165
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4166: AppXDeployment.Task.Server.OSIMStart4166
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4167: AppXDeployment.Task.Server.OSIMStop4167
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4168: AppXDeployment.Task.Server.OSIMStart4168
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4169: AppXDeployment.Task.Server.OSIMStop4169
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4200: AppXDeployment.Task.Server.OSIMStart4200
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4201: AppXDeployment.Task.Server.OSIMStop4201
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4202: AppXDeployment.Task.Server.OSIMStart4202
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4203: AppXDeployment.Task.Server.OSIMStop4203
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4204: AppXDeployment.Task.Server.OSIMStart4204
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4205: AppXDeployment.Task.Server.OSIMStop4205
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4206: AppXDeployment.Task.Server.OSIMStart4206
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4207: AppXDeployment.Task.Server.OSIMStop4207
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4208: AppXDeployment.Task.Server.OSIMStart4208
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4209: AppXDeployment.Task.Server.OSIMStop4209
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4250: AppXDeployment.Task.Server.OSIMStart4250
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4251: AppXDeployment.Task.Server.OSIMStop4251
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4252: AppXDeployment.Task.Server.OSIMStart4252
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4253: AppXDeployment.Task.Server.OSIMStop4253
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4254: AppXDeployment.Task.Server.OSIMStart4254
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4255: AppXDeployment.Task.Server.OSIMStop4255
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4256: AppXDeployment.Task.Server.OSIMStart4256
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4257: AppXDeployment.Task.Server.OSIMStop4257
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4258: AppXDeployment.Task.Server.OSIMStart4258
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4259: AppXDeployment.Task.Server.OSIMStop4259
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4300: AppXDeployment.Task.Server.OSIMStart4300
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4301: AppXDeployment.Task.Server.OSIMStop4301
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4302: AppXDeployment.Task.Server.OSIMStart4302
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4303: AppXDeployment.Task.Server.OSIMStop4303
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4304: AppXDeployment.Task.Server.OSIMStart4304
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4307: AppXDeployment.Task.Server.OSIMStop4307
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4308: AppXDeployment.Task.Server.OSIMStart4308
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 4309: AppXDeployment.Task.Server.OSIMStop4309
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 5000: Successfully registered the PackageName package.
#Event ID 5001: Initialization of the Visual Elements extension was started.
#Event ID 5002: Initialization of the visual elements extension was completed with error ErrorCode.
#Event ID 5003: Uninitialization of the Visual Elements extension was started.
#Event ID 5004: Uninitialization of the Visual Elements extension completed with error ErrorCode.
#Event ID 5005: The Visual Elements extension started to commit the deployment for package IncomingPackageName.
#Event ID 5006: The Visual Elements extension completed committing the deployment for package IncomingPackageName with error ErrorCode.
#Event ID 5007: The Visual Elements extension started to revert the deployment.
#Event ID 5008: The Visual Elements extension completed reverting the deployment.
#Event ID 5009: The Visual Elements extension started installing package IncomingPackageName.
#Event ID 5010: The Visual Elements extension completed installation of IncomingPackageName package with error ErrorCode.
#Event ID 5011: The Visual Elements extension started updating package IncomingPackageName over existing package OutgoingPackageName.
#Event ID 5012: The Visual Elements extension completed updates to package IncomingPackageName over existing package OutgoingPackageName with error ErrorCode.
#Event ID 5013: The Visual Elements extension started removing package OutgoingPackageName.
#Event ID 5014: The Visual Elements extension completed removal of package OutgoingPackageName with error ErrorCode.
#Event ID 5020: The Notifications extension initialized app PackageFullName with settings Settings.
#Event ID 5021: App PackageFullName was not initialized for notifications.
#Event ID 5022: error ErrorCode: The Notifications extension was unable to connect to the Push Notification Platform.
#Event ID 5023: The Notifications extension started periodic update manifest processing (PackageFullName).
#Event ID 5024: The Notifications extension stopped periodic update manifest processing (PackageFullName).
#Event ID 5025: The Notifications extension found URI Uri with a periodic update recurrence of PeriodicUpdateRecurrence in the manifest (PackageFullName).
#Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
Uri UnicodeString | |
PeriodicUpdateRecurrence UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 5025,
"version": 0,
"level": 5,
"task": 2,
"opcode": 0,
"keywords": 4611686018427387906,
"time_created": "2026-05-16T05:41:38.4470217+00:00",
"event_record_id": 9661,
"correlation": {
"ActivityID": "{5086812F-E4F4-0008-1EE3-8650F4E4DC01}"
},
"execution": {
"process_id": 5080,
"thread_id": 4528
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-W11-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1104"
}
},
"event_data": {
"PackageFullName": "Microsoft.BingNews_8wekyb3d8bbwe!AppexNews",
"Uri": "http://cdn.content.prod.cms.msn.com/singletile/summary/alias/experiencebyname/today?market={language}&source=appxmanifest&tenant=amp&vertical=news",
"PeriodicUpdateRecurrence": "halfHour"
},
"message": "The Notifications extension found URI http://cdn.content.prod.cms.msn.com/singletile/summary/alias/experiencebyname/today?market={language}&source=appxmanifest&tenant=amp&vertical=news with a periodic update recurrence of halfHour in the manifest (Microsoft.BingNews_8wekyb3d8bbwe!AppexNews)."
}
Event ID 5026: The Notifications extension started periodic update temporary registration (PackageFullName).
#Event ID 5027: The Notifications extension stopped periodic update temporary registration with HRESULT Result (PackageFullName).
#Event ID 5028: The Notifications extension started periodic update registration (PackageFullName).
#Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 5028,
"version": 0,
"level": 5,
"task": 2,
"opcode": 1,
"keywords": 4611686018427387906,
"time_created": "2026-05-16T05:41:38.5968835+00:00",
"event_record_id": 9663,
"correlation": {
"ActivityID": "{5086812F-E4F4-0008-1EE3-8650F4E4DC01}"
},
"execution": {
"process_id": 5080,
"thread_id": 4528
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-W11-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1104"
}
},
"event_data": {
"PackageFullName": "Microsoft.BingNews_8wekyb3d8bbwe!AppexNews"
},
"message": "The Notifications extension started periodic update registration (Microsoft.BingNews_8wekyb3d8bbwe!AppexNews)."
}
Event ID 5029: The Notifications extension stopped periodic update registration with HRESULT Result (PackageFullName).
#Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
Result UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 5029,
"version": 0,
"level": 5,
"task": 2,
"opcode": 2,
"keywords": 4611686018427387906,
"time_created": "2026-05-16T05:41:38.6119563+00:00",
"event_record_id": 9664,
"correlation": {
"ActivityID": "{5086812F-E4F4-0008-1EE3-8650F4E4DC01}"
},
"execution": {
"process_id": 5080,
"thread_id": 4528
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-W11-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1104"
}
},
"event_data": {
"PackageFullName": "Microsoft.BingNews_8wekyb3d8bbwe!AppexNews",
"Result": "0"
},
"message": "The Notifications extension stopped periodic update registration with HRESULT 0x0 (Microsoft.BingNews_8wekyb3d8bbwe!AppexNews)."
}
Event ID 5040: ErrorCode: Cannot delete splash screen information from the registry for package PackageName.
#Event ID 5041: ErrorCode: Cannot install or update package PackageName because the splash screen information could not be written to the registry.
#Description
ErrorCode: Cannot install or update package PackageName because the splash screen information could not be written to the registry. The system may not have adequate permissions to write to the registry or the registry keys may be in use.
Message #
Fields #
| Name | Description |
|---|---|
ErrorCode HexInt32 | |
PackageName UnicodeString |
Event ID 5042: Filename(Line,Column): error ErrorCode: Cannot install, update, or uninstall package PackageName because the splash screen element could not be parsed from the package's manif...
#Description
Filename(Line,Column): error ErrorCode: Cannot install, update, or uninstall package PackageName because the splash screen element could not be parsed from the package's manifest. Verify that the splash screen element in the package manifest is valid.
Message #
Fields #
| Name | Description |
|---|---|
Filename UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString |
Event ID 5043: Filename(Line,Column): error ErrorCode: Cannot install or update package PackageName because the splash screen image [ImagePath] cannot be located.
#Description
Filename(Line,Column): error ErrorCode: Cannot install or update package PackageName because the splash screen image [ImagePath] cannot be located. Verify that the package contains an image that can be used as a splash screen for the application, and that the package manifest points to the correct location in the package where this splash screen image can be found.
Message #
Fields #
| Name | Description |
|---|---|
Filename UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString | |
ImagePath UnicodeString |
Event ID 5044: Filename(Line,Column): error ErrorCode: Cannot install or update package PackageName because a splash screen image for the current application context cannot be identified.
#Description
Filename(Line,Column): error ErrorCode: Cannot install or update package PackageName because a splash screen image for the current application context cannot be identified. The application context could include a specific language, DPI, contrast, or other special circumstance. Add a splash screen image to be used as a default if a context-specific splash screen image cannot be identified.
Message #
Fields #
| Name | Description |
|---|---|
Filename UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString |
Event ID 5060: error ErrorCode: Adding a tile failed with unexpected error.
#Event ID 5063: Adding a tile failed because the VisualElements element is missing for app ErrorContext.
#Event ID 5064: Adding a tile failed because element 'ErrorContext1' is defined multiple times for app ErrorContext2.
#Event ID 5065: Adding a tile failed because color value 'ErrorContext1' is not valid for app ErrorContext2.
#Event ID 5066: Adding a tile failed because there are multiple apps with ID ErrorContext defined.
#Event ID 5067: Adding a tile failed because the required element 'ErrorContext1' is not defined for app ErrorContext2.
#Event ID 5068: Adding a tile failed because the resource 'ErrorContext' is not valid.
#Event ID 5069: Adding a tile failed because file 'ErrorContext1' could not be opened which represents the tile for app ErrorContext2.
#Event ID 5070: Adding a tile failed because changes could not be committed to file 'ErrorContext1' which represents the tile for app ErrorContext2.
#Event ID 5071: Removing a tile failed because file 'ErrorContext1' could not be deleted for app ErrorContext2.
#Event ID 5073: Adding a tile failed because app ErrorContext is defined to provide tile notifications on lock screen but does not have a WideLogo attribute defined.
#Event ID 5074: Adding a tile failed because app ErrorContext is defined to provide either notifications on the lockscreen or background tasks, but not both.
#Description
Adding a tile failed because app ErrorContext is defined to provide either notifications on the lockscreen or background tasks, but not both. Verify that the manifest either contains entries for both lockscreen notifications and background tasks, or does not contain entries for either.
Message #
Fields #
| Name | Description |
|---|---|
ErrorContext UnicodeString |
Event ID 5090: error ErrorCode: The Visual Elements extension failed.
#Event ID 5091: error ErrorCode: The Visual Elements extension failed while processing the SplashScreen element in the package manifest.
#Event ID 5092: error ErrorCode: The Visual Elements extension failed while processing the Notification element.
#Event ID 5093: error ErrorCode: Unable to notify WpnService for app ApplicationUserModelId during install/update of
#Description
error : Unable to notify WpnService for app during install/update of .
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
ApplicationUserModelId UnicodeString | |
ErrorCode HexInt32 |
Event ID 5101: error ErrorCode: Cannot create registry key or value Location for the PackageName package.
#Event ID 5102: error ErrorCode: Cannot delete registry key or value Location for the PackageName package.
#Event ID 5104: File(Line,Column): error: Cannot register the Package package because the Verb verb occurs more than once.
#Event ID 5105: File(Line,Column): error: Cannot register the Package package because the open verb is reserved for use with file type association.
#Event ID 5106: File(Line,Column): error: Cannot register the Package package because this app handles AutoPlay events that require the removable-storage capability.
#Event ID 5200: The system app data folder already exists.
#Event ID 5201: The system app data key already exists.
#Event ID 5202: The application data local root folder already exists.
#Event ID 5203: The application data roaming root folder already exists.
#Event ID 5204: The application data temp root folder already exists.
#Event ID 5205: The application data settings store already exists.
#Event ID 5206: The application data user profile packages folder already exists.
#Event ID 5207: The application data user profile packages key already exists.
#Event ID 5208: Creation of the system app data folder failed with error code : ReturnVal.
#Event ID 5209: Creation of the system app data key failed with error code : ReturnVal.
#Event ID 5210: Creation of the application data local root folder failed with error code : ReturnVal.
#Event ID 5211: Creation of the application data roaming root folder failed with error code : ReturnVal.
#Event ID 5212: Creation of the application data temp root folder failed with error code : ReturnVal.
#Event ID 5213: Creation of the application data settings store failed with error code : ReturnVal.
#Event ID 5214: Creation of the application data user profile packages key failed with error code: ReturnVal.
#Event ID 5215: Creation of the application data user profile packages folder failed with error code: ReturnVal.
#Event ID 5216: Successfully created the system app data folder.
#Event ID 5217: Successfully created the system app data key.
#Event ID 5218: Successfully created the application data local root folder.
#Event ID 5219: Successfully created the application data roaming root folder.
#Event ID 5220: Successfully created the application data temp root folder.
#Event ID 5221: Successfully created the application data settings store.
#Event ID 5222: Successfully created the application data user profile packages key
#Event ID 5223: Successfully created the application data user profile packages folder
#Event ID 5224: Error while deleting file filename.
#Description
Error while deleting file filename. Error Code : Error.
Message #
Fields #
| Name | Description |
|---|---|
filename UnicodeString | |
Error HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 5224,
"version": 0,
"level": 3,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387912,
"time_created": "2026-02-10T04:28:55.941274+00:00",
"event_record_id": 9687,
"correlation": {
"ActivityID": "43A6D212-9A2A-0004-FB8F-A7432A9ADC01"
},
"execution": {
"process_id": 3292,
"thread_id": 9296
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1104"
}
},
"event_data": {
"filename": "\\\\?\\C:\\Users\\domainuser\\AppData\\Local\\Packages\\MicrosoftTeams_8wekyb3d8bbwe\\SystemAppData\\Helium\\User.dat.LOG2",
"Error": "0x20"
},
"message": ""
}
Event ID 5225: Error while deleting Directory filename.
#Event ID 5226: Error while deleting system app data key.
#Event ID 5227: Application data remains from a previous uninstall.
#Event ID 5228: No application data remains from a previous uninstall.
#Event ID 5229: Local, Roaming and Temp application data roots already exist.
#Event ID 5230: Error while deleting the existing application data.
#Description
Error while deleting the existing application data. Error Code: ReturnVal.
Message #
Fields #
| Name | Description |
|---|---|
ReturnVal HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 5230,
"version": 0,
"level": 3,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387912,
"time_created": "2026-04-18T00:30:46.8270600+00:00",
"event_record_id": 2429,
"correlation": {
"ActivityID": "{86F22327-CECA-0000-C582-F286CACEDC01}"
},
"execution": {
"process_id": 4056,
"thread_id": 5652
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "WIN11-25H2-X64",
"security": {
"user_id": "S-1-5-21-3798294047-1846905762-1150995898-1000"
}
},
"event_data": {
"ReturnVal": "0x80070020"
},
"message": "Error while deleting the existing application data. Error Code: 0x80070020."
}
Event ID 5231: Successfully deleted any existing application data.
#Event ID 5232: Error while acquiring roaming mutex.
#Event ID 5233: State DEH failed to load existing application data settings store.
#Event ID 5234: Creation of the application data root folder failed with error code : ReturnVal.
#Event ID 5235: Successfully created the application data root folder.
#Event ID 5236: The application data root folder already exists.
#Event ID 5237: Creation of application data settings folder failed with error code : ReturnVal.
#Event ID 5238: Successfully created application data settings folder.
#Event ID 5239: The application data settings folder already exist.
#Event ID 5240: Copying the settings apphive into the application data settings folder failed with error code : ReturnVal.
#Event ID 5241: Successfully copied the settings store into the application data settings folder.
#Event ID 5242: Access Denied error while deleting the system app data key.
#Event ID 5243: Trying to reset the ACL's on the system app data key failed with error code : ReturnVal.
#Event ID 5244: Successfully ACL'ed the system app data key.
#Event ID 5245: The system app data folder does not exist.
#Event ID 5246: The system app data key does not exist.
#Event ID 5247: Creation of the application data synchronization lock failed with error code : ReturnVal.
#Event ID 5248: The application data lock already exists.
#Event ID 5249: The application data lock does not exist.
#Event ID 5250: Verification of the application data synchronization lock failed with error code : ReturnVal.
#Event ID 5251: Successfully created application data lock.
#Event ID 5252: An internal error occurred with error ReturnVal.
#Description
An internal error occurred with error ReturnVal. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
Message #
Fields #
| Name | Description |
|---|---|
ReturnVal HexInt32 |
Event ID 5253: The application data local cache root folder already exists.
#Event ID 5254: Creation of the application data local cache root folder failed with error code : ReturnVal.
#Event ID 5255: Successfully created the application data local cache root folder.
#Event ID 5256: error Error: Windows failed to signal registration change for the PackageMoniker package.
#Event ID 5257: error Error: Windows failed to persist backup eligibility for the PackageMoniker package.
#Event ID 5258: error Error: Windows failed to unregister the state lock for the PackageMoniker package.
#Event ID 5259: error Error: Windows failed to add the marker when unable to unistall the state for the PackageMoniker package.
#Event ID 5260: The app data folder already exists.
#Event ID 5261: The app data folder does not exist.
#Event ID 5262: Successfully created the app data folder.
#Event ID 5263: Creation of the app data folder failed with error code : ReturnVal.
#Event ID 5264: The AC folder already exists.
#Event ID 5265: The AC folder does not exist.
#Event ID 5266: Successfully created the AC folder.
#Event ID 5267: Creation of the AC folder failed with error code : ReturnVal.
#Event ID 5268: The Publisher Root folder already exists.
#Event ID 5269: Creation of the Publisher Root folder failed with error code : ReturnVal.
#Event ID 5270: Successfully created the Publisher Root folder.
#Event ID 5271: The filename Publisher Shared folder already exists.
#Event ID 5272: Creation of the filename Publisher Shared folder failed with error code : Error.
#Event ID 5273: Successfully created the filename Publisher Shared folder.
#Event ID 5274: The Publishers folder already exists.
#Event ID 5275: Creation of the Publishers folder failed with error code : ReturnVal.
#Event ID 5276: Successfully created the Publishers folder.
#Event ID 5277: Application data local root folder is a mounted folder that has no target.
#Event ID 5278: Application data roaming root folder is a mounted folder that has no target.
#Event ID 5279: Application data temp root folder is a mounted folder that has no target.
#Event ID 5280: Application data local cache root folder is a mounted folder that has no target.
#Event ID 5281: Successfully created the secure system app data folder.
#Event ID 5282: Creation of the secure system app data folder failed with error code : ReturnVal.
#Event ID 5283: The secure system app data folder already exists.
#Event ID 5284: The secure system app data folder does not exist.
#Event ID 5285: Set package status for PackageMoniker failed with error code : Error.
#Event ID 5286: Package AppData for PackageMoniker unavailable, error code : Error.
#Event ID 5287: Fetching of policy data for package Error failed with error code: PackageMoniker.
#Event ID 5288: Clearing of policy data for package Error failed with error code: PackageMoniker.
#Event ID 5289: Writing Setting SettingName (index Index) with value SettingValue for package PackageMoniker failed with error code: Error.
#Event ID 5290: FixAppLoadHive encountered sharing violation.
#Event ID 5301: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package because the 'ErrorText' file type association is reserved for system use.
#Event ID 5302: PackageName: error ErrorCode: Error during removal of the ErrorText package because the 'ExtendedData' registry key could not be deleted.
#Event ID 5325: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package because the 'ErrorText' content type association is reserved for system use.
#Event ID 5350: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package because the 'ErrorText' protocol is reserved for system use.
#Event ID 5351: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package because the 'ErrorText' protocol custom progid is not valid for this package.
#Description
(,): error : Cannot register the package because the '' protocol custom progid is not valid for this package. (Ensure that scope=machine, compatmode=classic, package uses externalLocation).
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString | |
ErrorText UnicodeString |
Event ID 5401: error ErrorCode: Windows cannot create the AppContainer profile for the PackageName package.
#Event ID 5402: error ErrorCode: Windows cannot set up the firewall for the PackageName package.
#Event ID 5403: error ErrorCode: Windows cannot set up the device capabilities for the PackageName package.
#Event ID 5405: error ErrorCode: Windows cannot create the repository metadata for the PackageName package with ApplicationCount apps.
#Event ID 5406: FileName(LineNumber,ColumnNumber): error ErrorCode: Cannot map the DeviceName well-known device name to a device interface GUID for the PackageName package.
#Description
FileName(LineNumber,ColumnNumber): error ErrorCode: Cannot map the DeviceName well-known device name to a device interface GUID for the PackageName package. Check that the device name is correct.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
LineNumber UInt32 | |
ColumnNumber UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString | |
DeviceName UnicodeString |
Event ID 5407: error ErrorCode: Windows cannot delete the AppContainer profile for the PackageName package.
#Event ID 5411: {FileName}({LineNumber};{ColumnNumber}): error {ErrorCode}: The ApplicationContentUriRules rule {NavigationDomainRule} for the {ApplicationId} Appl...
#Event ID 5412: {FileName}({LineNumber};{ColumnNumber}): error {ErrorCode}: The OSMaxVersionTested element must be greater than or equal to the OSMinVersion elemen...
#Event ID 5413: error ErrorCode: Failed to install package PackageName because the firewall service is not running.
#Event ID 5414: error ErrorCode: Failed to remove package PackageName because the firewall service is not running.
#Event ID 5415: error ErrorCode: Failed to update package PackageName because the firewall service is not running.
#Event ID 5417: error ErrorCode: Unable to install the framework package PackageName because its manifest contains capabilities.
#Event ID 5418: error FirewallErrorCode: FWOpenPolicyStore failed
#Description
error : FWOpenPolicyStore failed. Firewall service status is , service exit code . Acquiring an SCM Handle to the service returned the error .
Fields #
| Name | Description |
|---|---|
FirewallErrorCode HexInt32 | |
ScmManagerErrorCode HexInt32 | |
BfeServiceOpenErrorCode HexInt32 | |
FirewallServiceOpenErrorCode HexInt32 | |
BfeServiceCurrentState UInt32 | |
BfeServiceExitCode HexInt32 | |
BfeServiceSpecificExitCode HexInt32 | |
FirewallServiceCurrentState UInt32 | |
FirewallServiceExitCode HexInt32 | |
FirewallServiceSpecificExitCode HexInt32 |
Event ID 5500: FileName : error ErrorCode : Cannot register the PackageName package because the specified resource language 'ErrorText' is not a valid language.
#Event ID 5501: FileName : error ErrorCode : Cannot register the PackageName package because there are no free merge indices for the main package 'ErrorText'.
#Event ID 5502: FileName : error ErrorCode : Cannot register the PackageName package because there was a merge failure with the following file: ErrorText.
#Event ID 5503: FileName : error ErrorCode : Cannot register the PackageName package family because there was a failure setting permissions on the ResourceConfig registry key.
#Event ID 5504: {PackageName} : {FilePath} : {Message}.
#Fields #
| Name | Description |
|---|---|
PackageName | |
FilePath | |
Message |
Event ID 5505: PackageName : FilePath : Message.
#Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | |
FilePath UnicodeString | |
Message UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 5505,
"version": 0,
"level": 5,
"task": 0,
"opcode": 0,
"keywords": 4611686018428436480,
"time_created": "2026-06-13T09:28:34.4939389+00:00",
"event_record_id": 12549,
"correlation": {
"ActivityID": "{C62F76BC-EF88-0007-BAFE-39C688EFDC01}"
},
"execution": {
"process_id": 10752,
"thread_id": 8020
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-W11-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageName": "Microsoft.MicrosoftOfficeHub_19.2606.39121.0_x64__8wekyb3d8bbwe",
"FilePath": "C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_19.2606.39121.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\S-1-5-21-1006758700-2167138679-1475694448-1104-MergedResources-3.pri",
"Message": "Linked user-specific merged PRI file"
},
"message": "Microsoft.MicrosoftOfficeHub_19.2606.39121.0_x64__8wekyb3d8bbwe : C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_19.2606.39121.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\S-1-5-21-1006758700-2167138679-1475694448-1104-MergedResources-3.pri : Linked user-specific merged PRI file"
}
Event ID 5506: PackageName : FilePath : Message.
#Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | |
FilePath UnicodeString | |
Message UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 5506,
"version": 0,
"level": 5,
"task": 0,
"opcode": 0,
"keywords": 4611686018428436480,
"time_created": "2026-06-13T09:28:34.4926710+00:00",
"event_record_id": 12548,
"correlation": {
"ActivityID": "{C62F76BC-EF88-0007-BAFE-39C688EFDC01}"
},
"execution": {
"process_id": 10752,
"thread_id": 8020
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-W11-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageName": "Microsoft.MicrosoftOfficeHub_19.2606.39121.0_x64__8wekyb3d8bbwe",
"FilePath": "C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_19.2606.39121.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources.1cdf7f24.pri",
"Message": "Created shared merged PRI file"
},
"message": "Microsoft.MicrosoftOfficeHub_19.2606.39121.0_x64__8wekyb3d8bbwe : C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_19.2606.39121.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources.1cdf7f24.pri : Created shared merged PRI file"
}
Event ID 5507: PackageName : FilePath : Message.
#Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | |
FilePath UnicodeString | |
Message UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 5507,
"version": 0,
"level": 5,
"task": 0,
"opcode": 0,
"keywords": 4611686018428436480,
"time_created": "2026-06-13T09:28:34.7594209+00:00",
"event_record_id": 12555,
"correlation": {
"ActivityID": "{C62F76BC-EF88-0007-BAFE-39C688EFDC01}"
},
"execution": {
"process_id": 10752,
"thread_id": 8020
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-W11-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1104"
}
},
"event_data": {
"PackageName": "Microsoft.MicrosoftOfficeHub_19.2606.39121.0_x64__8wekyb3d8bbwe",
"FilePath": "resources.1cdf7f24.pri",
"Message": "Current shared merged PRI file ignored"
},
"message": "Microsoft.MicrosoftOfficeHub_19.2606.39121.0_x64__8wekyb3d8bbwe : resources.1cdf7f24.pri : Current shared merged PRI file ignored"
}
Event ID 5508: PackageName : FilePath : Message.
#Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | |
FilePath UnicodeString | |
Message UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 5508,
"version": 0,
"level": 5,
"task": 0,
"opcode": 0,
"keywords": 4611686018428436480,
"time_created": "2026-05-16T05:41:36.3247554+00:00",
"event_record_id": 9557,
"correlation": {
"ActivityID": "{5086812F-E4F4-0008-78E2-8650F4E4DC01}"
},
"execution": {
"process_id": 5080,
"thread_id": 4528
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-W11-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageName": "Microsoft.GamingApp_2402.900.28.0_x64__8wekyb3d8bbwe",
"FilePath": "C:\\Program Files\\WindowsApps\\Microsoft.GamingApp_2402.900.28.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources.90a2774f.pri",
"Message": "Deleted"
},
"message": "Microsoft.GamingApp_2402.900.28.0_x64__8wekyb3d8bbwe : C:\\Program Files\\WindowsApps\\Microsoft.GamingApp_2402.900.28.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources.90a2774f.pri : Deleted"
}
Event ID 5509: PackageName : FilePath : err=ErrorCode : Message.
#Event ID 5510: PackageName : FilePath : err=ErrorCode : Message.
#Event ID 5511: PackageName : FilePath : err=ErrorCode : Message.
#Event ID 5512: PackageName : FilePath : Message.
#Event ID 5513: PackageName : FilePath : err=ErrorCode : Message.
#Event ID 5514: PackageName : FilePath : err=ErrorCode : Message.
#Event ID 5600: An internal error occurred with error {ReturnVal}.
#Description
An internal error occurred with error {ReturnVal}. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
Message #
Fields #
| Name | Description |
|---|---|
ReturnVal |
Event ID 5601: An internal error occurred with error {ReturnVal}.
#Description
An internal error occurred with error {ReturnVal}. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
Message #
Fields #
| Name | Description |
|---|---|
ReturnVal |
Event ID 5602: Scheduling roaming sync for package PackageMoniker failed with error Error.
#Event ID 5603: Deferred roaming data acquisition for package PackageName, will block its activation for roaming data.
#Event ID 5604: Deferred roaming data acquisition for package PackageName, will not block activation for roaming data.
#Event ID 5605: Roaming data status for package PackageMoniker is Error.
#Event ID 6201: error ErrorCode: Windows cannot register the package because the ActivatableClassIdentifier ActivatableClassID of the ContractID contract was not found.
#Event ID 6202: error ErrorCode: Windows cannot register the package because the logo file name is missing.
#Event ID 6203: error ErrorCode: Windows cannot register the package because the ActivatableClassIdentifier ActivatableClassID of the ContractID contract is not an exe server.
#Event ID 6204: error ErrorCode: Windows cannot register the package because the ActivatableClassIdentifier ActivatableClassID of the ContractID contract is not marked with the ActivateAsPackage attribute.
#Event ID 6205: error ErrorCode: Windows cannot register the package because an ActivatableClassID with the same name already exists: 'ActivatableClassIdentifier'.
#Event ID 6206: error ErrorCode: Windows cannot register the package because an ActivatableClassID was previously declared with the same name: 'ActivatableClassIdentifier'.
#Event ID 6207: error ErrorCode: Windows cannot register the package because the ActivatableClassIdentifier ActivatableClassID name is empty or too long.
#Event ID 6208: error ErrorCode: Windows cannot register the package because the ActivatableClassIdentifier ActivatableClassID is invalid.
#Event ID 6209: error ErrorCode: Windows cannot register the package because a Windows Runtime server with the same name already exists: 'ServerName'.
#Event ID 6210: error ErrorCode: Windows cannot register the package because a Windows Runtime server with the same name was previously declared: 'ServerName'.
#Event ID 6211: error ErrorCode: Windows cannot register the package because the ServerName Windows Runtime server name is empty or too long.
#Event ID 6212: error ErrorCode: Windows cannot register the package because the ServerName Windows Runtime server name is invalid.
#Event ID 6213: error ErrorCode: Windows cannot register the package because an error occured when registering the ServerName Windows Runtime server.
#Event ID 6215: error ErrorCode: Windows cannot register the PackageName package because the Activatable Class ActivatableClassIdentifier does not contain a valid DllPath.
#Description
error ErrorCode: Windows cannot register the PackageName package because the Activatable Class ActivatableClassIdentifier does not contain a valid DllPath. The DllPath must point to a DLL in the package or to an OS-provided hosting binary. Correct the DllPath and try again.
Message #
Fields #
| Name | Description |
|---|---|
ErrorCode HexInt32 | |
PackageName UnicodeString | |
ActivatableClassIdentifier UnicodeString |
Event ID 6217: error ErrorCode: Windows cannot register the package because two or more attributes share the name 'AttributeName'.
#Event ID 6218: error ErrorCode: Windows cannot register the package because an attribute on the ActivatableClass is invalid.
#Event ID 6219: error ErrorCode: Windows cannot register the package because an attribute on the ActivatableClass is empty or too long.
#Event ID 6220: task_06220
#Event ID 6221: error ErrorCode: Windows cannot register the package because the ProxyStub CLSID CLSID is defined in two or more DLLs.
#Event ID 6222: error ErrorCode: Windows cannot register the package because a ProxyStub CLSID is already associated with interface InterfaceIdentifier.
#Description
error ErrorCode: Windows cannot register the package because a ProxyStub CLSID is already associated with interface InterfaceIdentifier. Only one ProxyStub CLSID can be associated with an interface. Correct the registrations and try again.
Message #
Fields #
| Name | Description |
|---|---|
ErrorCode HexInt32 | |
InterfaceIdentifier UnicodeString |
Event ID 6223: error ErrorCode: Windows cannot register the package because the publisher name is missing.
#Event ID 6224: error ErrorCode: Windows cannot register the package because the display name is mising.
#Event ID 6225: error ErrorCode: Windows cannot register the package because the description is missing.
#Event ID 6226: error ErrorCode: Windows cannot register the package because the ServerName contract identifier is empty or too long.
#Event ID 6227: error ErrorCode: Windows cannot register the package because of low memory.
#Event ID 6228: error ErrorCode: Windows cannot register the package because of an internal error or low memory.
#Event ID 6229: error Error: Windows cannot register the PackageMoniker package because of an internal error or low memory.
#Event ID 6230: error Error: Windows cannot register the PackageMoniker package because of an internal error or low memory.
#Event ID 6231: error ErrorCode: Windows cannot register the package because of an internal error or low memory.
#Event ID 6400: error {ErrorCode}: Failed to install Game {PackageMoniker}.
#Fields #
| Name | Description |
|---|---|
ErrorCode | |
PackageMoniker |
Event ID 6402: error {ErrorCode}: Failed to remove Game {PackageMoniker}.
#Fields #
| Name | Description |
|---|---|
ErrorCode | |
PackageMoniker |
Event ID 6403: The extension content from the package manifest is {Message}.
#Fields #
| Name | Description |
|---|---|
Message |
Event ID 6404: The game definition file container file path is {Message}.
#Fields #
| Name | Description |
|---|---|
Message |
Event ID 6405: error {Error}: game definition file container file not found.
#Fields #
| Name | Description |
|---|---|
Error |
Event ID 6407: error {ErrorCode}: Game {PackageMoniker} is already installed.
#Fields #
| Name | Description |
|---|---|
ErrorCode | |
PackageMoniker |
Event ID 6408: error {ErrorCode}: Game {PackageMoniker} is not installed.
#Fields #
| Name | Description |
|---|---|
ErrorCode | |
PackageMoniker |
Event ID 6412: error {Error}: Invalid Access.
#Event ID 6500: error ErrorCode: windows.
#Event ID 6501: error ErrorCode: windows.
#Event ID 6502: error ErrorCode: windows.
#Event ID 6503: error ErrorCode: windows.
#Event ID 6504: error ErrorCode: windows.
#Event ID 6505: error ErrorCode: windows.
#Event ID 6550: File(Line,Column): error ErrorCode: Cannot register Package package because the following error was encountered while trying to open and evaluate the Content certificate to...
#Description
File(Line,Column): error ErrorCode: Cannot register Package package because the following error was encountered while trying to open and evaluate the Content certificate to add to the StoreName store: ErrorCodeDescription.
Message #
Fields #
| Name | Description |
|---|---|
File UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
Package UnicodeString | |
Content UnicodeString | |
StoreName UnicodeString | |
ErrorCodeDescription UnicodeString |
Event ID 6551: File(Line,Column): warning: While registering Package package, a SelectionCriteria element without attributes was found.
#Description
File(Line,Column): warning: While registering Package package, a SelectionCriteria element without attributes was found. You should specify HardwareOnly or AutoSelect as SelectionCriteria attributes. If you don't need to specify any attributes for SelectionCriteria, exclude the SelectionCriteria element from the manifest.
Message #
Fields #
| Name | Description |
|---|---|
File UnicodeString | |
Line UInt32 | |
Column UInt32 | |
Package UnicodeString |
Event ID 6552: File(Line,Column): error ErrorCode: Cannot register Package package because the following error was encountered while parsing the Certificates element: ErrorCodeDescription.
#Event ID 6800: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package because the following error was encountered while parsing the ExtendedData extension: ErrorText.
#Description
FileName(Line,Column): error ErrorCode: Cannot register the PackageName package because the following error was encountered while parsing the ExtendedData extension: ErrorText. Try again and contact the package publisher if the problem persists.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString | |
ErrorText UnicodeString | |
ExtendedData UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 6800,
"version": 0,
"level": 2,
"task": 0,
"opcode": 0,
"keywords": 4611686018427396096,
"time_created": "2026-02-12T04:54:20.728832+00:00",
"event_record_id": 10545,
"correlation": {
"ActivityID": "43A6D212-9A2A-0003-5B5E-AA432A9ADC01"
},
"execution": {
"process_id": 9772,
"thread_id": 11928
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"FileName": "AppxManifest.xml",
"Line": 32,
"Column": 10,
"ErrorCode": "0x80070422",
"PackageName": "Microsoft.XboxIdentityProvider",
"ErrorText": "The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.\r\n",
"ExtendedData": "Windows.WebAccountProvider"
},
"message": ""
}
Event ID 6801: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package because the following error was encountered while registering the ExtendedData extension: ErrorText.
#Description
(,): error : Cannot register the package because the following error was encountered while registering the extension: . Try again and contact the package publisher if the problem persists.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString | |
ErrorText UnicodeString | |
ExtendedData UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 6801,
"version": 0,
"level": 2,
"task": 0,
"opcode": 0,
"keywords": 4611686018427396096,
"time_created": "2026-06-13T15:11:01.5948891+00:00",
"event_record_id": 12697,
"correlation": {
"ActivityID": "{C62F76BC-EF88-000B-1D7C-32C688EFDC01}"
},
"execution": {
"process_id": 5788,
"thread_id": 3340
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-W11-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"FileName": "AppxManifest.xml",
"Line": "21",
"Column": "6",
"ErrorCode": "0x80070002",
"PackageName": "c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.26100.1_neutral_neutral_cw5n1h2txyewy",
"ErrorText": "The system cannot find the file specified.\n",
"ExtendedData": "windows.defaultPrograms"
},
"message": "AppxManifest.xml(21,6): error 0x80070002: Cannot register the c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.26100.1_neutral_neutral_cw5n1h2txyewy package because the following error was encountered while registering the windows.defaultPrograms extension: The system cannot find the file specified.\r\n. Try again and contact the package publisher if the problem persists."
}
Event ID 6802: Cannot restore the UniqueKey extension because it was not found in the PackageName package.
#Event ID 6803: error ErrorCode: The following error occured while preparing the Category extension in the PackageName package for update or removal: ErrorText.
#Event ID 6900: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package because the following error was encountered while parsing the package: ErrorText.
#Description
FileName(Line,Column): error ErrorCode: Cannot register the PackageName package because the following error was encountered while parsing the package: ErrorText. Try again and contact the package publisher if the problem persists.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString | |
ErrorText UnicodeString |
Event ID 6901: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package because the following error was encountered while parsing the ExtendedData Extension element: ErrorText.
#Description
(,): error : Cannot register the package because the following error was encountered while parsing the Extension element: . Try again and contact the package publisher if the problem persists.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString | |
ErrorText UnicodeString | |
ExtendedData UnicodeString |
Event ID 6902: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package because the following error was encountered while parsing the ExtendedData application: ErrorText.
#Description
(,): error : Cannot register the package because the following error was encountered while parsing the application: . Try again and contact the package publisher if the problem persists.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString | |
ErrorText UnicodeString | |
ExtendedData UnicodeString |
Event ID 6903: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package because the following error was encountered while registering the ExtendedData activatable class: ErrorText.
#Description
(,): error : Cannot register the package because the following error was encountered while registering the activatable class: . Try again and contact the package publisher if the problem persists.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString | |
ErrorText UnicodeString | |
ExtendedData UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 6903,
"version": 0,
"level": 2,
"task": 0,
"opcode": 0,
"keywords": 4611686018427420672,
"time_created": "2026-02-11T00:51:39.347092+00:00",
"event_record_id": 10368,
"correlation": {
"ActivityID": "43A6D212-9A2A-0001-640C-AB432A9ADC01"
},
"execution": {
"process_id": 4272,
"thread_id": 6116
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"FileName": "Microsoft.ZuneMusic_11.2512.10.0_x64__8wekyb3d8bbwe.xml",
"Line": 121,
"Column": 10,
"ErrorCode": "0x80004003",
"PackageName": "Microsoft.ZuneMusic_11.2512.10.0_x64__8wekyb3d8bbwe",
"ErrorText": "Invalid pointer\r\n",
"ExtendedData": "Microsoft.ZuneMusic"
},
"message": ""
}
Event ID 6904: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package because the following error was encountered while registering the ExtendedData contract ID: ErrorText.
#Description
(,): error : Cannot register the package because the following error was encountered while registering the contract ID: . Try again and contact the package publisher if the problem persists.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString | |
ErrorText UnicodeString | |
ExtendedData UnicodeString |
Event ID 6905: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package because the following error was encountered while parsing the ExtendedData Action element: ErrorText.
#Description
(,): error : Cannot register the package because the following error was encountered while parsing the Action element: . Try again and contact the package publisher if the problem persists.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString | |
ErrorText UnicodeString | |
ExtendedData UnicodeString |
Event ID 6906: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package because the following error was encountered while parsing the ExtendedData service ID: ErrorText.
#Description
(,): error : Cannot register the package because the following error was encountered while parsing the service ID: . Try again and contact the package publisher if the problem persists.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString | |
ErrorText UnicodeString | |
ExtendedData UnicodeString |
Event ID 6907: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package because the following error was encountered while parsing the ExtendedData Extension element: ErrorText.
#Description
FileName(Line,Column): error ErrorCode: Cannot register the PackageName package because the following error was encountered while parsing the ExtendedData Extension element: ErrorText. The ResourceGroup attribute for this extension must match the parent application.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString | |
ErrorText UnicodeString | |
ExtendedData UnicodeString |
Event ID 7001: error ErrorCode: Cannot register the PackageFullName package because the following error was encountered while creating the FileName package dependency file: ErrorText.
#Event ID 7002: error ErrorCode: Cannot register the PackageFullName package because the following error was encountered while removing the FileName package dependency file.
#Description
error ErrorCode: Cannot register the PackageFullName package because the following error was encountered while removing the FileName package dependency file (queued for later removal): ErrorText.
Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
FileName UnicodeString | |
ErrorCode HexInt32 | |
ErrorText UnicodeString |
Event ID 7003: error {ErrorCode} : Cannot register the {PackageFullName} package because the following error was encountered while creating the {Key}\{Subkey} pac...
#Event ID 7004: error {ErrorCode}: Cannot register the {PackageFullName} package because the following error was encountered while removing the {Key}\{Subkey} pack...
#Event ID 7005: error ErrorCode: Failed to enqueue a request for deferred file deletion for PackageFullName package because the following error was encountered for the FileName package depe...
#Description
error ErrorCode: Failed to enqueue a request for deferred file deletion for PackageFullName package because the following error was encountered for the FileName package dependency file: ErrorText.
Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
FileName UnicodeString | |
ErrorCode HexInt32 | |
ErrorText UnicodeString |
Event ID 7006: error {ErrorCode}: Cannot register the {PackageFullName} package because the following error was encountered while opening the HKEY_CURRENT_USER_LO...
#Event ID 7007: error {ErrorCode}: Cannot register the {PackageFullName} package because the following error was encountered while enumerating to remove the {Key}\...
#Event ID 7008: Upstream dependency scan for the PackageFullName package found the UpstreamDependentPackageFullName package (PackageKey=UpstreamDependentPackageKey).
#Event ID 7009: error ErrorCode: Cannot register the PackageFullName package because the following error was encountered while creating the FileName package dependency file: ErrorText.
#Event ID 7010: error ErrorCode: Cannot register the PackageFullName package because file error was encountered while removing the FileName package dependency file.
#Description
error ErrorCode: Cannot register the PackageFullName package because file error was encountered while removing the FileName package dependency file (queued for later removal): ErrorText.
Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
FileName UnicodeString | |
ErrorCode HexInt32 | |
ErrorText UnicodeString |
Event ID 7011: error ErrorCode: Cannot process the PackageFullName package because the following error was encountered while retrieving its package state: ErrorText.
#Event ID 7012: Started creating the Dependency Mini Repository for the PackageFullName package.
#Event ID 7013: Finished creating the Dependency Mini Repository for the PackageFullName package.
#Event ID 7014: error ErrorCode: Cannot process the PackageFullName package because the following error was encountered while retrieving the PropertyId property for the value 'Value': ErrorText.
#Event ID 7015: error ErrorCode: Cannot process the PackageRelativeApplicationId application in the PackageFullName package because the following error was encountered while retrieving the PropertyId property for ...
#Description
error ErrorCode: Cannot process the PackageRelativeApplicationId application in the PackageFullName package because the following error was encountered while retrieving the PropertyId property for the value 'Value': ErrorText.
Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
PackageRelativeApplicationId UnicodeString | |
ApplicationIndex Int32 | |
PropertyId UInt32 | |
Value UnicodeString | |
Type UInt32 | |
ErrorCode HexInt32 | |
ErrorText UnicodeString |
Event ID 7016: error ErrorCode: Cannot retrieve file usage for the FileName package dependency file in the ProcessingPackageFullName package because the following error was encountered: ErrorText.
#Event ID 7017: error ErrorCode: Failure processing ProcessingPackageFullName package because FileName package dependency file is in use by ProcessCount processes.
#Description
error ErrorCode: Failure processing ProcessingPackageFullName package because FileName package dependency file is in use by ProcessCount processes. Process[ProcessIndex] = processid ProcessId (error retrieving process information): ErrorText.
Message #
Fields #
| Name | Description |
|---|---|
ProcessingPackageFullName UnicodeString | |
FileName UnicodeString | |
ErrorCode HexInt32 | |
ErrorText UnicodeString | |
ProcessIndex UInt32 | |
ProcessCount UInt32 | |
ProcessId UInt32 |
Event ID 7018: error ErrorCode: Failure processing ProcessingPackageFullName package because FileName package dependency file is in use by ProcessCount processes.
#Description
error : Failure processing package because package dependency file is in use by processes. Process[] = processid , application , package , executable , user username /, session.
Message #
Fields #
| Name | Description |
|---|---|
ProcessingPackageFullName UnicodeString | |
FileName UnicodeString | |
ErrorCode HexInt32 | |
ErrorText UnicodeString | |
ProcessIndex UInt32 | |
ProcessCount UInt32 | |
ProcessId UInt32 | |
ApplicationUserModelId UnicodeString | |
PackageFullName UnicodeString | |
ExecutableName UnicodeString | |
UserSID UnicodeString | |
UserDomain UnicodeString | |
UserName UnicodeString | |
SessionId UInt32 |
Event ID 7019: Started creating the Dependency Mini Repository for the PackageFullName incoming package.
#Event ID 7020: Finished creating the Dependency Mini Repository for the PackageFullName incoming package.
#Event ID 7021: Started updating the Dependency Mini Repository for the PackageFullName upstream package.
#Event ID 7022: Finished updating the Dependency Mini Repository for the PackageFullName upstream package.
#Event ID 7023: Started removing the Dependency Mini Repository for the PackageFullName outgoing package.
#Event ID 7024: Finished removing the Dependency Mini Repository for the PackageFullName outgoing package.
#Event ID 7025: ErrorCode: Package runtime information FileName failed to load (processid=ProcessId).
#Event ID 7026: error ErrorCode: Cannot process the PackageFullName package because the following error was encountered while retrieving its package status: ErrorText.
#Event ID 7027: Upstream dependency scan for the PackageFullName package found the UpstreamDependentPackageFullName package (PackageKey=UpstreamDependentPackageKey).
#Event ID 7028: Removed {PackageMoniker} package from HKEY_CURRENT_USER_LOCAL_SETTINGS families key because it is no longer referenced in the state repository.
#Fields #
| Name | Description |
|---|---|
PackageMoniker |
Event ID 7029: error ErrorCode: Cannot update the DependencyMiniRepository (DMR) file.
#Event ID 7100: error ErrorCode: Cannot register the PackageName package due to the following error: ErrorText.
#Event ID 7101: FileName(LineNumber,ColumnNumber): error ErrorCode: Cannot register the PackageName package because the extension is missing an EntryPoint or StartPage attribute.
#Event ID 7102: FileName(LineNumber,ColumnNumber): error ErrorCode: Cannot register the PackageName package because the ServerName attribute is invalid.
#Event ID 7103: FileName(LineNumber,ColumnNumber): error ErrorCode: Cannot register the PackageName package because the Executable attribute is invalid.
#Event ID 7104: FileName(LineNumber,ColumnNumber): error ErrorCode: Cannot register the PackageName package because ServerName and Executable attribute are mutually exclusive.
#Event ID 7105: FileName(LineNumber,ColumnNumber): error ErrorCode: Cannot register the PackageName package because a task of this type requires a custom background task host.
#Event ID 7106: FileName(LineNumber,ColumnNumber): error ErrorCode: Cannot register the PackageName package because ServerName and ResourceGroup attribute are mutually exclusive.
#Event ID 7107: FileName(LineNumber,ColumnNumber): error ErrorCode: Cannot register the PackageName package because Executable cannot be specified when no EntryPoint is specified.
#Event ID 7108: FileName(LineNumber,ColumnNumber): error ErrorCode: Cannot register the PackageName package because ResourceGroup must match application ResourceGroup when no EntryPoint is specified.
#Event ID 7109: error ErrorCode: Cannot register the PackageName package while processing the default background task due to the following error: ErrorText.
#Event ID 7110: FileName(LineNumber,ColumnNumber): error ErrorCode: Cannot register the PackageName package because ResourceGroup must not match application ResourceGroup when SupportsMultipleInstances i...
#Description
FileName(LineNumber,ColumnNumber): error ErrorCode: Cannot register the PackageName package because ResourceGroup must not match application ResourceGroup when SupportsMultipleInstances is true.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
LineNumber UInt32 | |
ColumnNumber UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString |
Event ID 7111: FileName(LineNumber,ColumnNumber): error ErrorCode: Cannot register the PackageName package because Executable cannot be specified when SupportsMultipleInstances is true.
#Event ID 7112: FileName(LineNumber,ColumnNumber): error ErrorCode: Cannot register the PackageName package because EntryPoint must be specified when SupportsMultipleInstances is true.
#Event ID 7113: FileName(LineNumber,ColumnNumber): error ErrorCode: Cannot register the PackageName package because StartPage must be specified when SupportsMultipleInstances is true.
#Event ID 7200: error ErrorCode: Cannot register the PackageName package due to the following error: ErrorText.
#Event ID 7250: error ErrorCode: Cannot register the PackageName package due to the following error: ErrorText.
#Event ID 7300: ErrorCode : Failed to fire WNF notification for Device Setup for the package PackageName after uninstall.
#Event ID 7301: ErrorCode : Failed to fire WNF notification for Device Setup for the package PackageName after install.
#Event ID 7302: ErrorCode : Failed to switch to system context before firing the WNF notification(s) for Device Setup for incoming package IncomingPackageName and outgoing package OutgoingPackageName.
#Event ID 7400: ErrorCode: Package runtime information FileName is corrupted (address=HeaderAddr, size=Size, offset=Offset, section=Section, processid=ProcessId).
#Description
ErrorCode: Package runtime information FileName is corrupted (address=HeaderAddr, size=Size, offset=Offset, section=Section, processid=ProcessId). Reinstall the package to fix this issue.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
ErrorCode HexInt32 | |
Size UInt64 | |
Offset UInt32 | |
HeaderAddr Pointer | |
Section UnicodeString | |
ProcessId UInt32 |
Event ID 7401: ErrorCode: Package runtime information FileName is missing expected data (address=HeaderAddr, size=Size, section=Section, processid=ProcessId).
#Description
ErrorCode: Package runtime information FileName is missing expected data (address=HeaderAddr, size=Size, section=Section, processid=ProcessId). Reinstall the package to fix this issue.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
ErrorCode HexInt32 | |
Size UInt64 | |
HeaderAddr Pointer | |
Section UnicodeString | |
ProcessId UInt32 |
Event ID 7402: ErrorCode: Package runtime information FileName contains conflicting data (address=HeaderAddr, size=Size, offset=Offset, section=Section, processid=ProcessId).
#Description
ErrorCode: Package runtime information FileName contains conflicting data (address=HeaderAddr, size=Size, offset=Offset, section=Section, processid=ProcessId). Reinstall the package to fix this issue.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
ErrorCode HexInt32 | |
Size UInt64 | |
Offset UInt32 | |
HeaderAddr Pointer | |
Section UnicodeString | |
ProcessId UInt32 |
Event ID 7403: ErrorCode: Package runtime information FileName contains unexpected data (address=HeaderAddr, size=Size, offset=Offset, section=Section, processid=ProcessId).
#Description
ErrorCode: Package runtime information FileName contains unexpected data (address=HeaderAddr, size=Size, offset=Offset, section=Section, processid=ProcessId). Reinstall the package to fix this issue.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
ErrorCode HexInt32 | |
Size UInt64 | |
Offset UInt32 | |
HeaderAddr Pointer | |
Section UnicodeString | |
ProcessId UInt32 |
Event ID 7404: ErrorCode: Package runtime information FileName failed to load (processid=ProcessId).
#Event ID 7405: Package runtime information FileName failed to load because exception ExceptionCode occurred.
#Event ID 7406: ErrorCode: Package runtime information FileName is missing expected data (address=HeaderAddr, size=Size, section=ApplicationUserModelId, processid=ProcessId).
#Description
ErrorCode: Package runtime information FileName is missing expected data (address=HeaderAddr, size=Size, section=ApplicationUserModelId, processid=ProcessId). Reinstall the package to fix this issue.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
ErrorCode Int32 | |
Size UInt64 | |
HeaderAddr Pointer | |
ApplicationUserModelId UnicodeString | |
ProcessId UInt32 |
Event ID 7407: ErrorCode: Application identity not accessible while loading package runtime information FileName (address=HeaderAddr, size=Size, processid=ProcessId).
#Event ID 7408: Package runtime information FileName failed to refresh because the following error ErrorCode occurred in operation type Type.
#Event ID 7500: error ErrorCode: Cannot register the PackageName package due to the following error: ErrorText.
#Event ID 7501: FileName(LineNumber,ColumnNumber): error ErrorCode: Cannot register the PackageName package because the Executable attribute is invalid.
#Event ID 7600: Error : Failed to load the object that will clean up the association between the current user and package PackageMoniker.
#Event ID 7601: Error : Failed to complete cleaning up the association between the current user and package PackageMoniker.
#Event ID 7700: APPX manifest DeviceCapability DeviceCapabilityName: missing required Device element.
#Event ID 7701: ErrorCode: Cannot register package PackageName because of an error in DeviceCapability DeviceCapabilityName: DeviceCapabilityName is not a supported Name.
#Event ID 7702: ErrorCode: Cannot register package PackageName because of an error in DeviceCapability DeviceCapabilityName: Device DeviceId missing required Function element.
#Event ID 7703: ErrorCode: Cannot register package PackageName becuase the handler for DeviceCapability DeviceCapabilityName could not be loaded.
#Event ID 7704: ErrorCode: Cannot register package PackageName because the handler for DeviceCapability DeviceCapabilityName is missing a required registry parameter (MissingParameter) and cannot be used.
#Event ID 7705: ErrorCode: Cannot register package PackageName because of a problem with Device element DeviceId: VetoReason.
#Event ID 7706: ErrorCode: Cannot register package PackageName because of a problem with Function element FunctionType: VetoReason.
#Event ID 7707: ErrorCode: Cannot register package PackageName because of an error with DeviceCapability[@Name="DeviceCapabilityName"]\.
#Description
ErrorCode: Cannot register package PackageName because of an error with DeviceCapability[@Name="DeviceCapabilityName"]\...\ElementName[@AttributeName="AttributeValue"].
Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | |
ErrorCode Int32 | |
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
DeviceCapabilityName UnicodeString | |
ElementName UnicodeString | |
AttributeName UnicodeString | |
AttributeValue UnicodeString |
Event ID 7708: ErrorCode: Cannot register package PackageName because of an error in Element (attribute Attribute): Problem.
#Event ID 7709: ErrorCode: Cannot register package PackageName because element Element is missing required attribute Attribute.
#Event ID 7750: warning ErrorCode: The following error occurred while performing Indexed DB cleanup when removing the package: PackageName (ErrorText).
#Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | |
ErrorCode HexInt32 | |
ErrorText UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 7750,
"version": 0,
"level": 3,
"task": 0,
"opcode": 0,
"keywords": 4611686018460942336,
"time_created": "2026-06-13T15:11:01.5663093+00:00",
"event_record_id": 12695,
"correlation": {
"ActivityID": "{C62F76BC-EF88-000B-1D7C-32C688EFDC01}"
},
"execution": {
"process_id": 5788,
"thread_id": 3340
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-W11-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"PackageName": "AppxManifest.xml",
"ErrorCode": "0x80070005",
"ErrorText": "Access is denied.\n"
},
"message": "warning 0x80070005: The following error occurred while performing Indexed DB cleanup when removing the package: AppxManifest.xml (Access is denied.\r\n)."
}
Event ID 7751: warning ErrorCode: The following error occurred while getting deployment options during Indexed DB cleanup when removing the package: PackageName (ErrorText).
#Event ID 7800: AppSync DEH invoke ({InvokeAction}) on package={PackageFamilyName}.
#Fields #
| Name | Description |
|---|---|
InvokeAction | |
PackageFamilyName |
Event ID 7801: AppXDeployment.Task.Server.OSIMStart7801
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 7802: AppXDeployment.Task.Server.OSIMStop7802
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 7803: AppXDeployment.Task.Server.OSIMStart7803
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 7804: AppXDeployment.Task.Server.OSIMStop7804
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 7805: AppXDeployment.Task.Server.OSIMStart7805
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 7806: AppXDeployment.Task.Server.OSIMStop7806
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 7807: AppXDeployment.Task.Server.OSIMStart7807
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 7808: AppXDeployment.Task.Server.OSIMStop7808
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 7809: AppXDeployment.Task.Server.OSIMStart7809
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 7810: AppXDeployment.Task.Server.OSIMStop7810
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 7900: SearchIndexer extension has failed to connect into Windows Search service: PackageFamilyName.
#Event ID 7901: SearchIndexer extension started initialization
#Event ID 7902: SearchIndexer extension has finished initialization with error ErrorCode.
#Event ID 7903: SearchIndexer extension started removal
#Event ID 7904: SearchIndexer extension has finished removal of PackageFamilyName.
#Event ID 7910: UserDataAccess extension started removal
#Event ID 7911: UserDataAccess extension has finished removal of PackageFamilyName (returned with ErrorCode).
#Event ID 7920: FileName(Line,Column) ErrorCode: The PackageName package cannot be registered because an unexpected error occured while processing the alarm extension.
#Event ID 7921: FileName(Line,Column) ErrorCode: The PackageName package cannot register an alarm extension because it does not have the required lock screen capability.
#Event ID 7950: Geolocation extension could not invoke the Location Framework Service to remove package {PackageName}.
#Event ID 7951: Geolocation extension could not invoke the Visual Studio simulator to remove package PackageName.
#Event ID 7970: error ErrorCode: Cannot register the PackageName package due to the following error: ErrorText.
#Event ID 7971: FileName(LineNumber,ColumnNumber): error ErrorCode: Cannot register the PackageName package because the extension is missing an EntryPoint or StartPage attribute.
#Event ID 7972: FileName(LineNumber,ColumnNumber): error ErrorCode: Cannot register the PackageName package because the ServerName attribute cannot be specified for a preinstall task.
#Event ID 7973: FileName(LineNumber,ColumnNumber): error ErrorCode: Cannot register the PackageName package because the Executable attribute cannot be specified for a preinstall task.
#Event ID 7981: FileName(LineNumber,ColumnNumber): error ErrorCode: Cannot register the PackageName package because the extension is missing an EntryPoint or StartPage attribute.
#Event ID 7982: FileName(LineNumber,ColumnNumber): error ErrorCode: Cannot register the PackageName package because the ServerName attribute cannot be specified for an update task.
#Event ID 7983: FileName(LineNumber,ColumnNumber): error ErrorCode: Cannot register the PackageName package because the Executable attribute cannot be specified for an update task.
#Event ID 8000: AppXSvc service initialization failed : ErrorCode.
#Event ID 8001: Updating service status to ServiceStatus failed with ErrorCode.
#Event ID 8100: Starting validation and setting the Trust Label on package PackageFullName with flags Flags.
#Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
Flags HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 8100,
"version": 0,
"level": 5,
"task": 49,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-05-28T18:29:18.0349973+00:00",
"event_record_id": 1395,
"correlation": {
"ActivityID": "{AFDF3271-EE92-0002-245A-DFAF92EEDC01}"
},
"execution": {
"process_id": 7404,
"thread_id": 5504
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageFullName": "Microsoft.UI.Xaml.2.4_2.42007.9001.0_x64__8wekyb3d8bbwe",
"Flags": "0x5"
},
"message": "Starting validation and setting the Trust Label on package Microsoft.UI.Xaml.2.4_2.42007.9001.0_x64__8wekyb3d8bbwe with flags 0x5."
}
Event ID 8101: Finished validation and setting the Trust Label on package PackageFullName with flags Flags.
#Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
Flags HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 8101,
"version": 0,
"level": 5,
"task": 49,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-05-28T18:29:18.0362876+00:00",
"event_record_id": 1397,
"correlation": {
"ActivityID": "{AFDF3271-EE92-0002-245A-DFAF92EEDC01}"
},
"execution": {
"process_id": 7404,
"thread_id": 5504
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageFullName": "Microsoft.UI.Xaml.2.4_2.42007.9001.0_x64__8wekyb3d8bbwe",
"Flags": "0x5"
},
"message": "Finished validation and setting the Trust Label on package Microsoft.UI.Xaml.2.4_2.42007.9001.0_x64__8wekyb3d8bbwe with flags 0x5."
}
Event ID 8102: Modified file ModifiedFile found in package PackageFullName.
#Event ID 8103: File ModifiedFile does not belong to package PackageFullName.
#Event ID 8104: Failed to set the Trust Label on package PackageFullName with flags Flags.
#Event ID 8105: NumberOfFiles file(s) have been validated from block map for package PackageFullName.
#Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
NumberOfFiles UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 8105,
"version": 0,
"level": 5,
"task": 49,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2023-11-06T06:23:22.163509+00:00",
"event_record_id": 6935,
"correlation": {},
"execution": {
"process_id": 1532,
"thread_id": 1016
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageFullName": "Microsoft.VCLibs.140.00_14.0.32530.0_x86__8wekyb3d8bbwe",
"NumberOfFiles": 11
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 8106: Package PackageFullName has Trust Label already.
#Description
Package PackageFullName has Trust Label already. Flags: Flags.
Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
Flags HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 8106,
"version": 0,
"level": 5,
"task": 49,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-05-28T18:29:18.0362662+00:00",
"event_record_id": 1396,
"correlation": {
"ActivityID": "{AFDF3271-EE92-0002-245A-DFAF92EEDC01}"
},
"execution": {
"process_id": 7404,
"thread_id": 5504
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageFullName": "Microsoft.UI.Xaml.2.4_2.42007.9001.0_x64__8wekyb3d8bbwe",
"Flags": "0x5"
},
"message": "Package Microsoft.UI.Xaml.2.4_2.42007.9001.0_x64__8wekyb3d8bbwe has Trust Label already. Flags: 0x5"
}
Event ID 8107: Illegal non-AppStore or non-AppInstaller package integrity validation attempted for package PackageFullName.
#Event ID 8108: Modified file ModifiedFile found in package PackageFullName.
#Event ID 8200: Successfully added volume VolumeKey with name "VolumeName", mountPoint "VolumeMountPoint", and media ID "VolumeMediaID".
#Event ID 8201: Successfully set volume VolumeKey with name "VolumeName", mountPoint "VolumeMountPoint", and media ID "VolumeMediaID" offline.
#Event ID 8202: Successfully set volume VolumeKey with name "VolumeName", mountPoint "VolumeMountPoint", and media ID "VolumeMediaID" online.
#Event ID 8203: Successfully removed volume VolumeKey with name "VolumeName", mountPoint "VolumeMountPoint", and media ID "VolumeMediaID".
#Event ID 8204: Successfully updated volume {VolumeKey} with name '{VolumeName}' mountPoint '{VolumeMountPoint}' and flags {Flags}.
#Fields #
| Name | Description |
|---|---|
VolumeKey | |
VolumeName | |
VolumeMountPoint | |
Flags |
Event ID 8205: Error ErrorCode: Found a corrupt volume VolumeKey with name "VolumeName", mountPoint "VolumeMountPoint", and media ID "VolumeMediaID".
#Event ID 8206: The path "ErrorCode" cannot be added as a package volume.
#Event ID 8220: AppXDeployment.Task.Server.OSIMStart8220
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8221: AppXDeployment.Task.Server.OSIMStop8221
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8222: AppXDeployment.Task.Server.OSIMStart8222
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8223: AppXDeployment.Task.Server.OSIMStop8223
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8224: AppXDeployment.Task.Server.OSIMStart8224
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8225: AppXDeployment.Task.Server.OSIMStop8225
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8226: AppXDeployment.Task.Server.OSIMStart8226
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8227: AppXDeployment.Task.Server.OSIMStop8227
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8228: AppXDeployment.Task.Server.OSIMStart8228
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8229: AppXDeployment.Task.Server.OSIMStop8229
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8230: FileName(Line, Column): error ErrorCode: Cannot register the PackageName package because the following error was encountered while registering WebAccountProvider extension: ErrorText.
#Event ID 8250: error ErrorCode: Cannot register the PackageName package due to the following error: ErrorText.
#Event ID 8251: FileName(LineNumber,ColumnNumber): error ErrorCode: Cannot register the PackageName package because the extension is missing an EntryPoint or StartPage attribute.
#Event ID 8252: {FileName}({LineNumber};{ColumnNumber}): error {ErrorCode}: Cannot register the {PackageName} package because the ServerName attribute cannot be sp...
#Event ID 8253: {FileName}({LineNumber};{ColumnNumber}): error {ErrorCode}: Cannot register the {PackageName} package because the Executable attribute cannot be sp...
#Event ID 8300: error ErrorCode: Cannot register the PackageName package due to the following error: ErrorText.
#Event ID 8351: error ErrorCode: AoW App Evaluate Install failed for package PackageName.
#Event ID 8352: error ErrorCode: AoW App Evaluate Update failed for package PackageName.
#Event ID 8353: error ErrorCode: AoW App Commit failed for package PackageName.
#Event ID 8354: error ErrorCode: AoW App Revert failed with operation CurrentOperation.
#Event ID 8355: error ErrorCode: AoW App Uninstall failed for package PackageName.
#Event ID 8356: error ErrorCode: AoW App failed to find the element PayloadName in the Manifest for package PackageName.
#Event ID 8357: error ErrorCode: AoW App failed to find the element PayloadVersion in the Manifest for package PackageName.
#Event ID 8400: error ErrorCode: Cannot remove the PackageName package due to the following error: ErrorText.
#Event ID 8451: error ErrorCode: Cannot remove the PackageName package due to the following error: ErrorText.
#Event ID 8460: AppXDeployment.Task.Server.OSIMStart8460
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8461: AppXDeployment.Task.Server.OSIMStop8461
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8464: AppXDeployment.Task.Server.OSIMStart8464
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8465: AppXDeployment.Task.Server.OSIMStop8465
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8466: AppXDeployment.Task.Server.OSIMStart8466
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8467: AppXDeployment.Task.Server.OSIMStop8467
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8468: AppXDeployment.Task.Server.OSIMStart8468
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8469: AppXDeployment.Task.Server.OSIMStop8469
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8481: AppXDeployment.Task.Server.OSIMStart8481
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8482: AppXDeployment.Task.Server.OSIMStop8482
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8483: AppXDeployment.Task.Server.OSIMStart8483
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8484: AppXDeployment.Task.Server.OSIMStop8484
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8485: AppXDeployment.Task.Server.OSIMStart8485
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8486: AppXDeployment.Task.Server.OSIMStop8486
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8487: AppXDeployment.Task.Server.OSIMStart8487
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8488: AppXDeployment.Task.Server.OSIMStop8488
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8489: AppXDeployment.Task.Server.OSIMStart8489
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8490: AppXDeployment.Task.Server.OSIMStop8490
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8501: Compiling mof file MofFile has the status information: phase error PhaseError, number of object that is at fault ObjectNum, first line number of the object FirstLine, last li...
#Description
Compiling mof file MofFile has the status information: phase error PhaseError, number of object that is at fault ObjectNum, first line number of the object FirstLine, last line number of the object LastLine.
Message #
Fields #
| Name | Description |
|---|---|
MofFile UnicodeString | |
PhaseError Int32 | |
ObjectNum Int32 | |
FirstLine Int32 | |
LastLine Int32 |
Event ID 8502: Compiling mof file MofFile has the status information: phase error PhaseError, number of object that is at fault ObjectNum, first line number of the object FirstLine, last li...
#Description
Compiling mof file MofFile has the status information: phase error PhaseError, number of object that is at fault ObjectNum, first line number of the object FirstLine, last line number of the object LastLine.
Message #
Fields #
| Name | Description |
|---|---|
MofFile UnicodeString | |
PhaseError Int32 | |
ObjectNum Int32 | |
FirstLine Int32 | |
LastLine Int32 |
Event ID 8503: The WMI provider is not supported because its HostingModel is HostingModel.
#Event ID 8521: AppXDeployment.Task.Server.OSIMStart8521
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8522: AppXDeployment.Task.Server.OSIMStop8522
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8523: AppXDeployment.Task.Server.OSIMStart8523
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8524: AppXDeployment.Task.Server.OSIMStop8524
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8525: AppXDeployment.Task.Server.OSIMStart8525
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8526: AppXDeployment.Task.Server.OSIMStop8526
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8527: AppXDeployment.Task.Server.OSIMStart8527
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8528: AppXDeployment.Task.Server.OSIMStop8528
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8529: AppXDeployment.Task.Server.OSIMStart8529
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8530: AppXDeployment.Task.Server.OSIMStop8530
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8541: AppXDeployment.Task.Server.OSIMStart8541
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8542: AppXDeployment.Task.Server.OSIMStop8542
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8543: AppXDeployment.Task.Server.OSIMStart8543
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8544: AppXDeployment.Task.Server.OSIMStop8544
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8545: AppXDeployment.Task.Server.OSIMStart8545
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8546: AppXDeployment.Task.Server.OSIMStop8546
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8547: AppXDeployment.Task.Server.OSIMStart8547
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8548: AppXDeployment.Task.Server.OSIMStop8548
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8549: AppXDeployment.Task.Server.OSIMStart8549
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8550: AppXDeployment.Task.Server.OSIMStop8550
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8561: Notify PackageStatus change for PackageFullName with error Error.
#Event ID 8562: Verify for PackageFullName with error Error.
#Event ID 8563: RegisterNotification for AppId[AppId] AppExtensionName[AppExtensionName] with error Error.
#Event ID 8564: UnregisterNotification for AppId[AppId] AppExtensionName[AppExtensionName] with error Error.
#Message #
Fields #
| Name | Description |
|---|---|
AppId UnicodeString | |
AppExtensionName UnicodeString | |
Error HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3f471139-acb7-4a01-b7a7-ff5da4ba2d43",
"event_source_name": "",
"event_id": 8564,
"version": 0,
"level": 2,
"task": 0,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-06-08T23:47:40.8387744+00:00",
"event_record_id": 23227,
"correlation": {
"ActivityID": "241ac215-92dd-415a-af10-374f195e95aa",
"RelatedActivityID": ""
},
"execution": {
"process_id": 7596,
"thread_id": 10944
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "JD-WIN11-22H2-1.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"AppId": "{4EA6715B-2E87-4009-B1E2-EF9D4B4C8C85}",
"AppExtensionName": "*",
"Error": "0x80080008"
},
"message": "UnregisterNotification for AppId[{4EA6715B-2E87-4009-B1E2-EF9D4B4C8C85}] AppExtensionName[*] with error 0x80080008."
}
Event ID 8565: GetNotificationPayload for AppId[AppId] AppExtensionName[AppExtensionName] with error Error.
#Event ID 8571: Notify PackageStatus change for PackageFullName with error Error.
#Event ID 8572: Verify for PackageFullName with error Error.
#Event ID 8573: RegisterNotification for PackageFullName[AppId] PackageExtensionName[PackageExtensionName] with error Error.
#Event ID 8574: UnregisterNotification for PackageFullName[AppId] PackageExtensionName[PackageExtensionName] with error Error.
#Event ID 8575: GetNotificationPayload for PackageFullName[AppId] PackageExtensionName[PackageExtensionName] with error Error.
#Event ID 8662: AppXDeployment.Task.Server.OSIMStop8662
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8663: AppXDeployment.Task.Server.OSIMStart8663
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8664: AppXDeployment.Task.Server.OSIMStop8664
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8665: AppXDeployment.Task.Server.OSIMStart8665
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8666: AppXDeployment.Task.Server.OSIMStop8666
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8667: AppXDeployment.Task.Server.OSIMStart8667
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8668: AppXDeployment.Task.Server.OSIMStop8668
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8669: AppXDeployment.Task.Server.OSIMStart8669
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8670: AppXDeployment.Task.Server.OSIMStop8670
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8681: AppXDeployment.Task.Server.OSIMStart8681
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8682: AppXDeployment.Task.Server.OSIMStop8682
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8683: AppXDeployment.Task.Server.OSIMStart8683
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8684: AppXDeployment.Task.Server.OSIMStop8684
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8685: AppXDeployment.Task.Server.OSIMStart8685
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8686: AppXDeployment.Task.Server.OSIMStop8686
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8687: AppXDeployment.Task.Server.OSIMStart8687
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8688: AppXDeployment.Task.Server.OSIMStop8688
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8689: AppXDeployment.Task.Server.OSIMStart8689
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8690: AppXDeployment.Task.Server.OSIMStop8690
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8701: Windows cannot install the package because the current user is not a member of Administrators group and creation of server extension failed.
#Event ID 8721: error ErrorCode: Cannot register the PackageName package due to the following error: ErrorText.
#Event ID 8722: {FileName}({LineNumber};{ColumnNumber}): error {ErrorCode}: Cannot register the {PackageName} package because the extension is missing an EntryPoin...
#Event ID 8723: {FileName}({LineNumber};{ColumnNumber}): error {ErrorCode}: Cannot register the {PackageName} package because the ServerName attribute cannot be sp...
#Event ID 8724: {FileName}({LineNumber};{ColumnNumber}): error {ErrorCode}: Cannot register the {PackageName} package because the Executable attribute cannot be sp...
#Event ID 8751: AppXDeployment.Task.Server.OSIMStart8751
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8752: AppXDeployment.Task.Server.OSIMStop8752
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8753: AppXDeployment.Task.Server.OSIMStart8753
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8754: AppXDeployment.Task.Server.OSIMStop8754
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8755: AppXDeployment.Task.Server.OSIMStart8755
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8756: AppXDeployment.Task.Server.OSIMStop8756
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8757: AppXDeployment.Task.Server.OSIMStart8757
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8758: AppXDeployment.Task.Server.OSIMStop8758
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8759: AppXDeployment.Task.Server.OSIMStart8759
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8760: AppXDeployment.Task.Server.OSIMStop8760
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 8761: AppExecutionAlias directory missing, error code is ErrorCode.
#Message #
Fields #
| Name | Description |
|---|---|
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 8761,
"version": 0,
"level": 2,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-03-14T21:01:28.151838+00:00",
"event_record_id": 2047,
"correlation": {
"ActivityID": "D73F5340-B345-0001-00B2-3FD745B3DC01"
},
"execution": {
"process_id": 8172,
"thread_id": 11980
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-DC01.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"ErrorCode": "0x8007010b"
},
"message": ""
}
Event ID 9001: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Event ID 9002: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Event ID 9003: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Event ID 9004: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Event ID 9005: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Event ID 9006: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Description
FileName(Line,Column): error ErrorCode: Cannot register the PackageName package. Cannot specify attribute InsertableObject = true in the Class element when attribute ProgId is not specified.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString |
Event ID 9007: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Description
FileName(Line,Column): error ErrorCode: Cannot register the PackageName package. Cannot specify the ProxyStubClsid attribute in the Interface element when attribute UseUniversalMarshaler = true.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString |
Event ID 9008: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Description
FileName(Line,Column): error ErrorCode: Cannot register the PackageName package. Interface element cannot have both AsynchronousInterface and SynchronousInterface attributes.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString |
Event ID 9009: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Event ID 9010: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Event ID 9011: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Description
FileName(Line,Column): error ErrorCode: Cannot register the PackageName package. Attribute UseUniveralMarshaler = true requires a TypeLib element under the Interface element.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString |
Event ID 9012: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Event ID 9013: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Event ID 9014: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Event ID 9015: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Event ID 9016: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Event ID 9017: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Description
FileName(Line,Column): error ErrorCode: Cannot register the PackageName package. DataFormats elements requires exactly one DefaultFormatName or DefaultStandardFormat attribute.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString |
Event ID 9018: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Event ID 9019: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Description
FileName(Line,Column): error ErrorCode: Cannot register the PackageName package. Multiple DataFormat elements under a DataFormat element have the same values for all attributes.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString |
Event ID 9020: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Event ID 9021: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Event ID 9022: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Event ID 9023: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Description
FileName(Line,Column): error ErrorCode: Cannot register the PackageName package. The TypeLib referenced in the Interface element does not have the specified VersionNumber.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString |
Event ID 9024: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Description
FileName(Line,Column): error ErrorCode: Cannot register the PackageName package. To use the AsynchronousInterface and SynchronousInterface attributes, there must be two Interfaces elements with the same ProxyStubClsid attribute value. One Interface element will be the synchronous interface that must refer to the asynchronous interface via the AsynchronousInterface attribute. The second element is the asynchronous interface that must refer to the synchronous interface via the SynchronousInterface attribute.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString |
Event ID 9025: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Description
FileName(Line,Column): error ErrorCode: Cannot register the PackageName package. The VersionIndependentProgId referenced in the Class element refers back to a ProgId element without a CurrentVersion attribute.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString |
Event ID 9026: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Description
FileName(Line,Column): error ErrorCode: Cannot register the PackageName package. The VersionIndependentProgId referenced in the Class element refers back to a Class with a different VersionIndependentProgId attribute value. Verify that the ProgId marked as the CurrentVersion refers to the correct Clsid.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString |
Event ID 9027: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Description
FileName(Line,Column): error ErrorCode: Cannot register the PackageName package. The VersionIndependentProgId referenced in the Class element refers back to a Class with no VersionIndependentProgId attribute. Verify that the ProgId marked as the CurrentVersion refers to the correct Clsid.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString |
Event ID 9028: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Event ID 9029: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Description
FileName(Line,Column): error ErrorCode: Cannot register the PackageName package. The ProgId referenced in CurrentVersion attribute value points to a ProgId without Clsid or CurrentVersion attribute.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString |
Event ID 9030: AppXDeployment.Task.Server.OSIMStart9030
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9031: AppXDeployment.Task.Server.OSIMStop9031
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9032: AppXDeployment.Task.Server.OSIMStart9032
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9033: AppXDeployment.Task.Server.OSIMStop9033
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9034: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Description
FileName(Line,Column): error ErrorCode: Cannot register the PackageName package. SurrogateServer element cannot have both CustomSurrogateExecutable and SystemSurrogate attributes.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString |
Event ID 9035: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Event ID 9036: Package COM is not supported on this platform.
#Event ID 9037: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Description
FileName(Line,Column): error ErrorCode: Cannot register the PackageName package. The Id referenced in the ClassReference element does not refer to a Class element in the manifest.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString |
Event ID 9038: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Description
FileName(Line,Column): error ErrorCode: Cannot register the PackageName package. Packages with classic CompatMode packaged COM extensions cannot be registered with a user ExternalLocation.
Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString |
Event ID 9039: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Event ID 9071: AppXDeployment.Task.Server.OSIMStart9071
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9072: AppXDeployment.Task.Server.OSIMStop9072
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9073: AppXDeployment.Task.Server.OSIMStart9073
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9074: AppXDeployment.Task.Server.OSIMStop9074
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9075: AppXDeployment.Task.Server.OSIMStart9075
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9076: AppXDeployment.Task.Server.OSIMStop9076
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9077: AppXDeployment.Task.Server.OSIMStart9077
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9078: AppXDeployment.Task.Server.OSIMStop9078
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9079: AppXDeployment.Task.Server.OSIMStart9079
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9080: AppXDeployment.Task.Server.OSIMStop9080
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9101: AppXDeployment.Task.Server.OSIMStart9101
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9102: AppXDeployment.Task.Server.OSIMStop9102
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9103: AppXDeployment.Task.Server.OSIMStart9103
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9104: AppXDeployment.Task.Server.OSIMStop9104
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9105: {FileName}({Line};{Column}): error {ErrorCode}: Cannot register package {PackageName} .
#Event ID 9121: AppXDeployment.Task.Server.OSIMStart9121
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9122: AppXDeployment.Task.Server.OSIMStop9122
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9123: AppXDeployment.Task.Server.OSIMStart9123
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9124: AppXDeployment.Task.Server.OSIMStop9124
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9125: AppXDeployment.Task.Server.OSIMStart9125
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9126: AppXDeployment.Task.Server.OSIMStop9126
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9127: AppXDeployment.Task.Server.OSIMStart9127
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9128: AppXDeployment.Task.Server.OSIMStop9128
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9131: error ErrorCode: Cannot register the PackageName package due to the following error: ErrorText.
#Event ID 9200: AppXDeployment.Task.Server.OSIMStart9200
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9201: AppXDeployment.Task.Server.OSIMStop9201
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9202: AppXDeployment.Task.Server.OSIMStart9202
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9203: AppXDeployment.Task.Server.OSIMStop9203
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9204: AppXDeployment.Task.Server.OSIMStart9204
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9205: AppXDeployment.Task.Server.OSIMStop9205
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9206: AppXDeployment.Task.Server.OSIMStart9206
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9207: AppXDeployment.Task.Server.OSIMStop9207
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9208: AppXDeployment.Task.Server.OSIMStart9208
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9209: AppXDeployment.Task.Server.OSIMStop9209
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9220: Deleting the shared hardlink for the eventlog dll for package String1 at location String2 during String3 operation, error is ErrorCode.
#Event ID 9221: Extension 'windows.
#Event ID 9222: Extension 'windows.
#Event ID 9300: AppXDeployment.Task.Server.OSIMStart9300
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9301: AppXDeployment.Task.Server.OSIMStop9301
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9302: AppXDeployment.Task.Server.OSIMStart9302
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9303: AppXDeployment.Task.Server.OSIMStop9303
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9304: AppXDeployment.Task.Server.OSIMStart9304
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9305: AppXDeployment.Task.Server.OSIMStop9305
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9306: AppXDeployment.Task.Server.OSIMStart9306
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9307: AppXDeployment.Task.Server.OSIMStop9307
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9308: AppXDeployment.Task.Server.OSIMStart9308
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9309: AppXDeployment.Task.Server.OSIMStop9309
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9400: Failed to set Desktop AppX metadata for the package.
#Event ID 9401: AppXDeployment.Task.Server.StagingManagerStart9401
#Event ID 9402: AppXDeployment.Task.Server.StagingManagerStop9402
#Event ID 9403: Failed to set Desktop AppX metadata for the path.
#Event ID 9404: task_0Start9404
#Event ID 9405: task_0Stop
#Event ID 9406: Failed to create output location for Desktop AppX registry files.
#Event ID 9407: Failed to delete the Desktop AppX registry file.
#Event ID 9408: Desktop AppX registry file was unexpectedly a directory.
#Event ID 9409: Failed to delete the Desktop AppX registry directory.
#Event ID 9410: Failed to process the Desktop AppX registry file.
#Event ID 9500: AppXDeployment.Task.Server.OSIMStart9500
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9501: AppXDeployment.Task.Server.OSIMStop9501
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9502: AppXDeployment.Task.Server.OSIMStart9502
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9503: AppXDeployment.Task.Server.OSIMStop9503
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9504: AppXDeployment.Task.Server.OSIMStart9504
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9505: AppXDeployment.Task.Server.OSIMStop9505
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9506: AppXDeployment.Task.Server.OSIMStart9506
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9507: AppXDeployment.Task.Server.OSIMStop9507
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9508: AppXDeployment.Task.Server.OSIMStart9508
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9509: AppXDeployment.Task.Server.OSIMStop9509
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9510: Couldn't install interop asssembly for PackageFullname package because the assembly already exists: Path.
#Event ID 9511: Version downgrade happened for interop asssembly for PackageFullname package, from version PreDowngradeVersion to version PostDowngradeVersion.
#Event ID 9512: PIA copyfile for PackageFullname package failed, errorString.
#Event ID 9521: CC file pattern SearchString, hresult HresultCode, error ErrorCode, index Index.
#Message #
Fields #
| Name | Description |
|---|---|
SearchString UnicodeString | |
HresultCode HexInt32 | |
ErrorCode HexInt32 | |
Index UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 9521,
"version": 0,
"level": 3,
"task": 0,
"opcode": 0,
"keywords": 4611694814520410112,
"time_created": "2023-11-05T22:33:32.152464+00:00",
"event_record_id": 8495,
"correlation": {
"ActivityID": "E4DB489E-1037-0000-617A-DBE43710DA01"
},
"execution": {
"process_id": 4660,
"thread_id": 5424
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-21-1992711665-1655669231-58201500-1000"
}
},
"event_data": {
"SearchString": "C:\\Program Files\\WindowsApps\\MicrosoftCorporationII.QuickAssist_2.0.5.0_x64__8wekyb3d8bbwe\\*.sccd",
"HresultCode": "0x80004005",
"ErrorCode": "0x2",
"Index": 0
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 9541: error ErrorCode: Package PackageFullName declares capability Capability but its HostRuntimeDependency HostRuntimePackageFullName does not.
#Description
error ErrorCode: Package PackageFullName declares capability Capability but its HostRuntimeDependency HostRuntimePackageFullName does not. The package will be registered without this capability.
Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
HostRuntimePackageFullName UnicodeString | |
Capability SID | |
ErrorCode HexInt32 |
Event ID 9542: error ErrorCode: Package PackageFullName declares custom capability Capability but its HostRuntimeDependency HostRuntimePackageFullName does not.
#Description
error ErrorCode: Package PackageFullName declares custom capability Capability but its HostRuntimeDependency HostRuntimePackageFullName does not. The package will be registered without this capability.
Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
HostRuntimePackageFullName UnicodeString | |
Capability SID | |
ErrorCode HexInt32 |
Event ID 9543: error ErrorCode: Package PackageFullName declares device capability Capability but its HostRuntimeDependency HostRuntimePackageFullName does not.
#Description
error ErrorCode: Package PackageFullName declares device capability Capability but its HostRuntimeDependency HostRuntimePackageFullName does not. The package will be registered without this capability.
Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
HostRuntimePackageFullName UnicodeString | |
Capability SID | |
ErrorCode HexInt32 |
Event ID 9544: The Capability DB will not be provisioned during MachineRegister.
#Event ID 9545: Package is an Unsigned Package.
#Event ID 9546: The Capability DB was not previously provisioned during MachineRegister for Package full name: PackageName.
#Event ID 9547: error ErrorCode: Package PackageFullName being registered declares HostRuntimeDependency HostRuntimePackageFullName, which does not have any capabilities or is not registered.
#Description
error ErrorCode: Package PackageFullName being registered declares HostRuntimeDependency HostRuntimePackageFullName, which does not have any capabilities or is not registered. Please re-register HostRuntimePackageFullName and try again.
Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
HostRuntimePackageFullName UnicodeString | |
ErrorCode HexInt32 |
Event ID 9548: Authorization of capabilities for PackageFullName failed with error code ErrorCode.
#Event ID 9600: AppXDeployment.Task.Server.OSIMStart9600
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9601: AppXDeployment.Task.Server.OSIMStop9601
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9602: AppXDeployment.Task.Server.OSIMStart9602
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9603: AppXDeployment.Task.Server.OSIMStop9603
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9604: AppXDeployment.Task.Server.OSIMStart9604
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9605: AppXDeployment.Task.Server.OSIMStop9605
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9606: AppXDeployment.Task.Server.OSIMStart9606
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9607: AppXDeployment.Task.Server.OSIMStop9607
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9608: AppXDeployment.Task.Server.OSIMStart9608
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9609: AppXDeployment.Task.Server.OSIMStop9609
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9621: FileName(Line,Column): error ErrorCode: Cannot register the PackageName package.
#Event ID 9622: ErrorCode: PackagedServiceDEH EvaluateRequest completed successfully.
#Message #
Fields #
| Name | Description |
|---|---|
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 9622,
"version": 0,
"level": 5,
"task": 1,
"opcode": 0,
"keywords": 4611694814520410116,
"time_created": "2026-03-11T03:42:30.287831+00:00",
"event_record_id": 13004,
"correlation": {
"ActivityID": "083E0D5C-AF63-0005-FF59-400863AFDC01"
},
"execution": {
"process_id": 11128,
"thread_id": 11952
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"ErrorCode": "0x0"
},
"message": ""
}
Event ID 9623: ErrorCode: PackagedServiceDEH CommitRequest completed successfully.
#Message #
Fields #
| Name | Description |
|---|---|
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 9623,
"version": 0,
"level": 5,
"task": 1,
"opcode": 0,
"keywords": 4611694814520410116,
"time_created": "2026-03-11T03:42:30.301639+00:00",
"event_record_id": 13005,
"correlation": {
"ActivityID": "083E0D5C-AF63-0005-FF59-400863AFDC01"
},
"execution": {
"process_id": 11128,
"thread_id": 11952
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"ErrorCode": "0x0"
},
"message": ""
}
Event ID 9624: ErrorCode: PackagedServiceDEH RevertRequest completed successfully.
#Event ID 9625: ErrorCode: PackagedServiceDEH RemoveRequest completed successfully.
#Message #
Fields #
| Name | Description |
|---|---|
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 9625,
"version": 0,
"level": 5,
"task": 1,
"opcode": 0,
"keywords": 4611694814520410116,
"time_created": "2026-03-11T03:42:30.301697+00:00",
"event_record_id": 13006,
"correlation": {
"ActivityID": "083E0D5C-AF63-0005-FF59-400863AFDC01"
},
"execution": {
"process_id": 11128,
"thread_id": 11952
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"ErrorCode": "0x0"
},
"message": ""
}
Event ID 9626: FileName(Line,Column): PackagedServiceDEH successfully parsed manifest for package PackageName install.
#Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 9626,
"version": 0,
"level": 5,
"task": 1,
"opcode": 0,
"keywords": 4611694814520410116,
"time_created": "2026-03-11T03:42:30.266417+00:00",
"event_record_id": 13003,
"correlation": {
"ActivityID": "083E0D5C-AF63-0005-FF59-400863AFDC01"
},
"execution": {
"process_id": 11128,
"thread_id": 11952
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"FileName": "AppxManifest.xml",
"Line": 49,
"Column": 12,
"ErrorCode": "0x0",
"PackageName": "MicrosoftCorporationII.WindowsSubsystemForLinux_2.6.3.0_x64__8wekyb3d8bbwe"
},
"message": ""
}
Event ID 9627: FileName(Line,Column): PackagedServiceDEH successfully parsed manifest for package PackageName removal.
#Message #
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | |
Line UInt32 | |
Column UInt32 | |
ErrorCode HexInt32 | |
PackageName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"event_id": 9627,
"level": "Verbose",
"task": null,
"opcode": "Info",
"time_created": "2026-03-30T04:22:04.1588772+00:00",
"computer": "JD-DC01-2022.ludus.domain",
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational"
},
"event_data": {
"Column": "12",
"PackageName": "Claude_1.1.7203.0_x64__pzs8sxrjxfjjc",
"FileName": "Claude_1.1.7203.0_x64__pzs8sxrjxfjjc.xml",
"ErrorCode": "0x0",
"Line": "108"
}
}
Event ID 9628: FileName(Line,Column): PackagedServiceDEH failed to delete service ErrorText in package PackageName.
#Event ID 9629: ErrorCode: PackagedServiceDEH PostOsUpgradeEvaluateRequest completed successfully.
#Message #
Fields #
| Name | Description |
|---|---|
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"event_id": 9629,
"level": "Verbose",
"task": null,
"opcode": "Info",
"time_created": "2026-03-30T04:22:04.1589356+00:00",
"computer": "JD-DC01-2022.ludus.domain",
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational"
},
"event_data": {
"ErrorCode": "0x0"
}
}
Event ID 9641: ErrorCode: Deployment aborts due to active service String.
#Event ID 9643: ErrorCode: TerminateApplications successful.
#Message #
Fields #
| Name | Description |
|---|---|
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 9643,
"version": 0,
"level": 5,
"task": 1,
"opcode": 0,
"keywords": 4611694814520410116,
"time_created": "2026-05-28T18:29:53.0103415+00:00",
"event_record_id": 1737,
"correlation": {
"ActivityID": "{AFDF3271-EE92-0002-D461-DFAF92EEDC01}"
},
"execution": {
"process_id": 7404,
"thread_id": 5504
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"ErrorCode": "0x0"
},
"message": "0x0: TerminateApplications successful."
}
Event ID 9644: ErrorCode: AllowUninstall successful for package String.
#Message #
Fields #
| Name | Description |
|---|---|
ErrorCode HexInt32 | |
String UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 9644,
"version": 0,
"level": 5,
"task": 1,
"opcode": 0,
"keywords": 4611694814520410116,
"time_created": "2026-05-16T01:56:20.9502137+00:00",
"event_record_id": 6237,
"correlation": {
"ActivityID": "{94CD86C6-E4D6-0003-7EDE-CD94D6E4DC01}"
},
"execution": {
"process_id": 4716,
"thread_id": 6940
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "WIN11-25H2-X64",
"security": {
"user_id": "S-1-5-21-3798294047-1846905762-1150995898-1000"
}
},
"event_data": {
"ErrorCode": "0x0",
"String": "Microsoft.VCLibs.140.00_14.0.30704.0_x64__8wekyb3d8bbwe"
},
"message": "0x0: AllowUninstall successful for package Microsoft.VCLibs.140.00_14.0.30704.0_x64__8wekyb3d8bbwe."
}
Event ID 9645: ErrorCode: GetActiveAumidsInPackage successful for package String.
#Message #
Fields #
| Name | Description |
|---|---|
ErrorCode HexInt32 | |
String UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 9645,
"version": 0,
"level": 5,
"task": 1,
"opcode": 0,
"keywords": 4611694814520410116,
"time_created": "2026-06-13T08:26:54.8964417+00:00",
"event_record_id": 12448,
"correlation": {
"ActivityID": "{C62F76BC-EF88-0002-9732-33C688EFDC01}"
},
"execution": {
"process_id": 10680,
"thread_id": 10276
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-W11-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1104"
}
},
"event_data": {
"ErrorCode": "0x0",
"String": "Microsoft.GamingApp_2605.1001.14.0_x64__8wekyb3d8bbwe"
},
"message": "0x0: GetActiveAumidsInPackage successful for package Microsoft.GamingApp_2605.1001.14.0_x64__8wekyb3d8bbwe."
}
Event ID 9646: ErrorCode: TerminateServicesInPackage successful for package String.
#Event ID 9647: ErrorCode: TerminateSingleService for uninstall successful for service String2 in package String1, terminateService: Bool1.
#Event ID 9648: ErrorCode: TerminateSingleService for update successful for service String2 in package String1, terminateService: Bool1.
#Event ID 9649: ErrorCode: Cannot terminate service String2 in package String1.
#Event ID 9650: ErrorCode: Succesfully terminated service String2 in package String1.
#Event ID 9651: ErrorCode: Service String2 in package String1 has an error level that is marked either critical or severe.
#Event ID 9652: ErrorCode: Force terminated service String2 process in package String1.
#Event ID 9653: OpenService for service String failed with error ErrorCode.
#Event ID 9660: error ErrorCode: Unable to notify BrokerInfrastructure service for package PackageFullName and state change
#Description
error : Unable to notify BrokerInfrastructure service for package and state change .
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
BiStateTransition UInt32 | |
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"event_id": 9660,
"level": 3,
"task": 3,
"opcode": 0,
"time_created": "2026-05-27T16:22:26.6282818+00:00",
"computer": "DESKTOP-FF3N5XK.ludus.domain",
"channel": "Microsoft-Windows-AppXDeploymentServer"
},
"event_data": {
"BiStateTransition": "2",
"ErrorCode": "0xd007007a",
"PackageFullName": "Microsoft.WindowsAppRuntime.1.8_8000.836.2153.0_x64__8wekyb3d8bbwe"
}
}
Event ID 9660: error ErrorCode: Unable to notify BrokerInfrastructure service for package PackageFullName and state change BiStateTransition.
#Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
BiStateTransition UInt32 | |
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"event_id": 9660,
"level": 3,
"task": 3,
"opcode": 0,
"time_created": "2026-05-27T16:22:26.6282818+00:00",
"computer": "DESKTOP-FF3N5XK.ludus.domain",
"channel": "Microsoft-Windows-AppXDeploymentServer"
},
"event_data": {
"BiStateTransition": "2",
"ErrorCode": "0xd007007a",
"PackageFullName": "Microsoft.WindowsAppRuntime.1.8_8000.836.2153.0_x64__8wekyb3d8bbwe"
}
}
Event ID 9681: AppXDeployment.Task.Server.OSIMStart9681
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9682: AppXDeployment.Task.Server.OSIMStop9682
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9683: AppXDeployment.Task.Server.OSIMStart9683
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9684: AppXDeployment.Task.Server.OSIMStop9684
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9700: AppXDeployment.Task.Server.OSIMStart9700
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9701: AppXDeployment.Task.Server.OSIMStop9701
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9702: AppXDeployment.Task.Server.OSIMStart9702
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9703: AppXDeployment.Task.Server.OSIMStop9703
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9706: AppXDeployment.Task.Server.OSIMStart9706
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9707: AppXDeployment.Task.Server.OSIMStop9707
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9708: AppXDeployment.Task.Server.OSIMStart9708
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9709: AppXDeployment.Task.Server.OSIMStop9709
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9720: The shortcut variable 'String' is not supported.
#Event ID 9721: Shortcuts require CompatMode to be 'classic'.
#Fields #
| Name | Description |
|---|---|
ErrorCode HexInt32 | |
String UnicodeString |
Event ID 9722: Shortcut extension Scope must match the shortcut destination's KNOWNFOLDER scope.
#Fields #
| Name | Description |
|---|---|
ErrorCode HexInt32 | |
String UnicodeString |
Event ID 9800: AppXDeployment.Task.Server.OSIMStart9800
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9801: AppXDeployment.Task.Server.OSIMStop9801
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9802: AppXDeployment.Task.Server.OSIMStart9802
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9803: AppXDeployment.Task.Server.OSIMStop9803
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9804: AppXDeployment.Task.Server.OSIMStart9804
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9805: AppXDeployment.Task.Server.OSIMStop9805
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9806: AppXDeployment.Task.Server.OSIMStart9806
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9807: AppXDeployment.Task.Server.OSIMStop9807
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9808: AppXDeployment.Task.Server.OSIMStart9808
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9809: AppXDeployment.Task.Server.OSIMStop9809
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9820: The ApplicationRegistration variable 'String' is not supported.
#Event ID 9900: AppXDeployment.Task.Server.OSIMStart9900
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9901: AppXDeployment.Task.Server.OSIMStop9901
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9902: AppXDeployment.Task.Server.OSIMStart9902
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9903: AppXDeployment.Task.Server.OSIMStop9903
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9904: AppXDeployment.Task.Server.OSIMStart9904
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9905: AppXDeployment.Task.Server.OSIMStop9905
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9906: AppXDeployment.Task.Server.OSIMStart9906
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9907: AppXDeployment.Task.Server.OSIMStop9907
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9908: AppXDeployment.Task.Server.OSIMStart9908
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9909: AppXDeployment.Task.Server.OSIMStop9909
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 9920: The registry key path must be compatible with the 'windows.
#Event ID 10000: About to service package PackageFullName.
#Description
About to service package PackageFullName. Setting the package state to disabled returned with ErrorCode.
Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 10000,
"version": 0,
"level": 5,
"task": 4,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-05-28T18:29:53.0050055+00:00",
"event_record_id": 1735,
"correlation": {
"ActivityID": "{AFDF3271-EE92-0002-D461-DFAF92EEDC01}"
},
"execution": {
"process_id": 7404,
"thread_id": 5504
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageFullName": "MicrosoftWindows.UndockedDevKit_10.0.20348.1_neutral_neutral_cw5n1h2txyewy",
"ErrorCode": "0x0"
},
"message": "About to service package MicrosoftWindows.UndockedDevKit_10.0.20348.1_neutral_neutral_cw5n1h2txyewy. Setting the package state to disabled returned with 0x0."
}
Event ID 10001: Finished servicing package PackageFullName.
#Description
Finished servicing package PackageFullName. Setting the package state to enabled returned with ErrorCode.
Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 10001,
"version": 0,
"level": 5,
"task": 4,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-05-28T18:29:53.1602314+00:00",
"event_record_id": 1741,
"correlation": {
"ActivityID": "{AFDF3271-EE92-0002-D461-DFAF92EEDC01}"
},
"execution": {
"process_id": 7404,
"thread_id": 5504
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageFullName": "MicrosoftWindows.UndockedDevKit_10.0.20348.1_neutral_neutral_cw5n1h2txyewy",
"ErrorCode": "0x0"
},
"message": "Finished servicing package MicrosoftWindows.UndockedDevKit_10.0.20348.1_neutral_neutral_cw5n1h2txyewy. Setting the package state to enabled returned with 0x0."
}
Event ID 10002: Creating Resiliency File ResiliencyFilePath for DeploymentOperation Operation on Package MainPackageMoniker.
#Message #
Fields #
| Name | Description |
|---|---|
DeploymentOperation UInt32 | |
MainPackageMoniker UnicodeString | |
ResiliencyFilePath UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43}",
"event_source_name": "",
"event_id": 10002,
"version": 0,
"level": 5,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-06-13T05:45:51.0905610+00:00",
"event_record_id": 1813,
"correlation": {
"ActivityID": "{C6821FB2-EF88-0004-9642-82C688EFDC01}"
},
"execution": {
"process_id": 1492,
"thread_id": 7976
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "telemetry-DC-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"DeploymentOperation": "29",
"MainPackageMoniker": "Microsoft.MicrosoftEdge.Stable_149.0.4022.62_neutral__8wekyb3d8bbwe",
"ResiliencyFilePath": "C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\7b8e2300-a60e-4c55-b28b-d01e50a41079_S-1-5-18_2.rslc"
},
"message": "Creating Resiliency File C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\7b8e2300-a60e-4c55-b28b-d01e50a41079_S-1-5-18_2.rslc for ProvisionPackageOperation Operation on Package Microsoft.MicrosoftEdge.Stable_149.0.4022.62_neutral__8wekyb3d8bbwe."
}
Event ID 10003: Deleting Resiliency File ResiliencyFilePath finished with code ErrorCode.
#Message #
Fields #
| Name | Description |
|---|---|
ResiliencyFilePath UnicodeString | |
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"event_id": 10003,
"level": 5,
"task": 3,
"opcode": 0,
"time_created": "2026-05-27T16:22:16.2133432+00:00",
"computer": "DESKTOP-FF3N5XK.ludus.domain",
"channel": "Microsoft-Windows-AppXDeploymentServer"
},
"event_data": {
"ResiliencyFilePath": "C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\55f858d1-f8e2-4aa0-85ed-d69b2044fe8b_S-1-5-18_86.rslc",
"ErrorCode": "0x0"
}
}
Event ID 10004: Publishing deployment request status to TDL for package PackageFullName : operation DeploymentOperation state State percentage Percentage errorcode ErrorCode impersonating IsImpersonating.
#Event ID 10005: Published deployment request status to TDL for package PackageFullName.
#Event ID 10006: Failed to read the sideload limit from Software Licensing policy with error ErrorCode.
#Event ID 10007: Finished servicing singleton package PackageFullName.
#Description
Finished servicing singleton package PackageFullName. Setting the singleton package state to enabled returned with ErrorCode.
Message #
Fields #
| Name | Description |
|---|---|
PackageFullName UnicodeString | |
ErrorCode HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppXDeployment-Server",
"guid": "3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43",
"event_source_name": "",
"event_id": 10007,
"version": 0,
"level": 5,
"task": 4,
"opcode": 0,
"keywords": 4611686018427387905,
"time_created": "2026-03-11T03:42:30.758001+00:00",
"event_record_id": 13014,
"correlation": {
"ActivityID": "083E0D5C-AF63-0005-FF59-400863AFDC01"
},
"execution": {
"process_id": 11128,
"thread_id": 11952
},
"channel": "Microsoft-Windows-AppXDeploymentServer/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PackageFullName": "MicrosoftCorporationII.WindowsSubsystemForLinux_2.6.3.0_x64__8wekyb3d8bbwe",
"ErrorCode": "0x0"
},
"message": ""
}
Event ID 10050: {FileName}({Line};{Column}) {ErrorCode}: The {PackageName} package cannot be registered because an unexpected error occured while processing the Lo...
#Event ID 11000: Failed to install loopback access rule.
#Event ID 11001: Failed to uninstall loopback access rule.
#Event ID 11100: FileName(Line,Column) ErrorCode: The PackageName package cannot be registered because an unexpected error occured while processing the Local Experience Pack extension.
#Event ID 11200: PreInstalledVolumeServicing ApplySuccess started
#Event ID 11201: PreInstalledVolumeServicing ApplySuccess finished
#Event ID 11202: PreInstalledVolumeServicing ResetCleanup started
#Event ID 11203: PreInstalledVolumeServicing ResetCleanup finished
#Event ID 11204: PreInstalledVolumeServicing did not find an upgrade to service
#Event ID 11205: PreInstalledVolumeServicing failed to get the PreInstalled AllUserStore with error ErrorCode.
#Event ID 11206: PreInstalledVolumeServicing failed to Activate required Instances with error ErrorCode.
#Event ID 11207: PreInstalledVolumeServicing failed to get the DefaultAccount Token with error ErrorCode.
#Event ID 11209: PreInstalledVolumeServicing failed to Remove apps with error ErrorCode.
#Event ID 11210: PreInstalledVolumeServicing failed to Prepare new apps with error ErrorCode.
#Event ID 11211: PreInstalledVolumeServicing failed to Delete the Upgrade Key with error ErrorCode.
#Event ID 11212: PreInstalledVolumeServicing failed to Remove package String with error ErrorCode.
#Event ID 11213: PreInstalledVolumeServicing failed to Upgrade package String with error ErrorCode.
#Event ID 11214: PreInstalledVolumeServicing failed to get the Applicable Version Upgrade key with error ErrorCode.
#Event ID 11215: PreInstalledVolumeServicing failed to Fix the Integrity of the AllUserStore with error ErrorCode.
#Event ID 11900: AppXDeployment.Task.Server.OSIMStart11900
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 11901: AppXDeployment.Task.Server.OSIMStop11901
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 11902: AppXDeployment.Task.Server.OSIMStart11902
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 11903: AppXDeployment.Task.Server.OSIMStop11903
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 11904: AppXDeployment.Task.Server.OSIMStart11904
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 11905: AppXDeployment.Task.Server.OSIMStop11905
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 11906: AppXDeployment.Task.Server.OSIMStart11906
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 11907: AppXDeployment.Task.Server.OSIMStop11907
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 11908: AppXDeployment.Task.Server.OSIMStart11908
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 11909: AppXDeployment.Task.Server.OSIMStop11909
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 11920: Extension 'windows.
#Event ID 12000: AppXDeployment.Task.Server.OSIMStart12000
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12001: AppXDeployment.Task.Server.OSIMStop12001
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12002: AppXDeployment.Task.Server.OSIMStart12002
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12003: AppXDeployment.Task.Server.OSIMStop12003
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12004: AppXDeployment.Task.Server.OSIMStart12004
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12005: AppXDeployment.Task.Server.OSIMStop12005
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12006: AppXDeployment.Task.Server.OSIMStart12006
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12007: AppXDeployment.Task.Server.OSIMStop12007
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12008: AppXDeployment.Task.Server.OSIMStart12008
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12009: AppXDeployment.Task.Server.OSIMStop12009
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12020: Extension 'windows.
#Event ID 12030: Extension 'windows.
#Event ID 12100: AppXDeployment.Task.Server.OSIMStart12100
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12101: AppXDeployment.Task.Server.OSIMStop12101
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12102: AppXDeployment.Task.Server.OSIMStart12102
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12103: AppXDeployment.Task.Server.OSIMStop12103
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12104: AppXDeployment.Task.Server.OSIMStart12104
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12105: AppXDeployment.Task.Server.OSIMStop12105
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12106: AppXDeployment.Task.Server.OSIMStart12106
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12107: AppXDeployment.Task.Server.OSIMStop12107
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12108: AppXDeployment.Task.Server.OSIMStart12108
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12109: AppXDeployment.Task.Server.OSIMStop12109
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12120: Extension 'windows.
#Event ID 12200: AppXDeployment.Task.Server.OSIMStart12200
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12201: AppXDeployment.Task.Server.OSIMStop12201
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12202: AppXDeployment.Task.Server.OSIMStart12202
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12203: AppXDeployment.Task.Server.OSIMStop12203
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12204: AppXDeployment.Task.Server.OSIMStart12204
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12205: AppXDeployment.Task.Server.OSIMStop12205
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12206: AppXDeployment.Task.Server.OSIMStart12206
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12209: AppXDeployment.Task.Server.OSIMStop12209
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12220: Extension 'windows.
#Event ID 12230: AppXDeployment.Task.Server.OSIMStart12230
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12231: AppXDeployment.Task.Server.OSIMStop12231
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12232: AppXDeployment.Task.Server.OSIMStart12232
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12233: AppXDeployment.Task.Server.OSIMStop12233
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12234: AppXDeployment.Task.Server.OSIMStart12234
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12235: AppXDeployment.Task.Server.OSIMStop12235
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12236: AppXDeployment.Task.Server.OSIMStart12236
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12237: AppXDeployment.Task.Server.OSIMStop12237
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12238: AppXDeployment.Task.Server.OSIMStart12238
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12239: AppXDeployment.Task.Server.OSIMStop12239
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12240: Extension 'windows.
#Event ID 12241: A Provider element was found to have a duplicate Id attribute Guid.
#Event ID 12242: A Provider element was found to have a duplicate Name attribute String2.
#Event ID 12243: A Channel element was found to have a duplicate Name attribute String2.
#Event ID 12244: A Channel element with the Name attribute String2 referenced by an ImportChannel element in Provider with Id Guid was not found.
#Event ID 12245: A circular dependency between Provider elements was detected.
#Event ID 12246: An event tracing provider from package PackageName was not registered due to its guid conflicting with another package.
#Description
An event tracing provider from package PackageName was not registered due to its guid conflicting with another package. Provider guid: ProviderGuid, provider name: ProviderName, other package name: OtherPackageName.
Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | |
ProviderGuid GUID | |
ProviderName UnicodeString | |
OtherPackageName UnicodeString |
Event ID 12247: An event tracing provider from package PackageName was not registered due to its name conflicting with another package.
#Description
An event tracing provider from package PackageName was not registered due to its name conflicting with another package. Provider guid: ProviderGuid, provider name: ProviderName, other package name: OtherPackageName.
Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | |
ProviderGuid GUID | |
ProviderName UnicodeString | |
OtherPackageName UnicodeString |
Event ID 12248: An event tracing provider from package PackageName was not registered due to a channel name conflicting with another package.
#Description
An event tracing provider from package PackageName was not registered due to a channel name conflicting with another package. Provider guid: ProviderGuid, provider name: ProviderName, channel name: DuplicateChannelName, other package name: OtherPackageName.
Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | |
ProviderGuid GUID | |
ProviderName UnicodeString | |
DuplicateChannelName UnicodeString | |
OtherPackageName UnicodeString |
Event ID 12249: An event tracing provider from package PackageName was not registered due to its dependency provider not being registered.
#Description
An event tracing provider from package PackageName was not registered due to its dependency provider not being registered. Provider guid: ProviderGuid, provider name: ProviderName, dependency provider guid: DependencyProviderGuid.
Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | |
ProviderGuid GUID | |
ProviderName UnicodeString | |
DependencyProviderGuid GUID |
Event ID 12250: An event tracing provider registration from package PackageName was overwritten when another package with a conflicting guid was installed.
#Description
An event tracing provider registration from package PackageName was overwritten when another package with a conflicting guid was installed. Provider guid: ProviderGuid, provider name: ProviderName, other package name: OtherPackageName.
Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | |
ProviderGuid GUID | |
ProviderName UnicodeString | |
OtherPackageName UnicodeString |
Event ID 12251: An event tracing provider registration from package PackageName was overwritten when another package with a conflicting name was installed.
#Description
An event tracing provider registration from package PackageName was overwritten when another package with a conflicting name was installed. Provider guid: ProviderGuid, provider name: ProviderName, other package name: OtherPackageName.
Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | |
ProviderGuid GUID | |
ProviderName UnicodeString | |
OtherPackageName UnicodeString |
Event ID 12252: An event tracing provider registration from package PackageName was overwritten when another package with a conflicting channel name was installed.
#Description
An event tracing provider registration from package PackageName was overwritten when another package with a conflicting channel name was installed. Provider guid: ProviderGuid, provider name: ProviderName, channel name: DuplicateChannelName, other package name: OtherPackageName.
Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | |
ProviderGuid GUID | |
ProviderName UnicodeString | |
DuplicateChannelName UnicodeString | |
OtherPackageName UnicodeString |
Event ID 12253: An event tracing provider registration from package PackageName was overwritten due to its dependency provider being overwritten when another package with a...
#Description
An event tracing provider registration from package PackageName was overwritten due to its dependency provider being overwritten when another package with a conflicting provider was installed. Provider guid: ProviderGuid, provider name: ProviderName, dependency provider guid: DependencyProviderGuid.
Message #
Fields #
| Name | Description |
|---|---|
PackageName UnicodeString | |
ProviderGuid GUID | |
ProviderName UnicodeString | |
DependencyProviderGuid GUID |
Event ID 12254: Registering the event tracing provider with Id Guid and Name String2 from package String1 failed with error ErrorCode.
#Event ID 12255: Unregistering the event tracing provider with Id Guid and Name String2 from package String1 failed with error ErrorCode.
#Event ID 12270: AppXDeployment.Task.Server.OSIMStart12270
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12271: AppXDeployment.Task.Server.OSIMStop12271
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12272: AppXDeployment.Task.Server.OSIMStart12272
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12273: AppXDeployment.Task.Server.OSIMStop12273
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12274: AppXDeployment.Task.Server.OSIMStart12274
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12275: AppXDeployment.Task.Server.OSIMStop12275
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12276: AppXDeployment.Task.Server.OSIMStart12276
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12277: AppXDeployment.Task.Server.OSIMStop12277
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12278: AppXDeployment.Task.Server.OSIMStart12278
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12279: AppXDeployment.Task.Server.OSIMStop12279
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12280: error ErrorCode: Cannot register the PackageName package due to the following error: ErrorText.
#Event ID 12290: AppXDeployment.Task.Server.OSIMStart12290
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12291: AppXDeployment.Task.Server.OSIMStop12291
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12292: AppXDeployment.Task.Server.OSIMStart12292
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12293: AppXDeployment.Task.Server.OSIMStop12293
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12294: AppXDeployment.Task.Server.OSIMStart12294
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12295: AppXDeployment.Task.Server.OSIMStop12295
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12296: AppXDeployment.Task.Server.OSIMStart12296
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12297: AppXDeployment.Task.Server.OSIMStop12297
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12298: AppXDeployment.Task.Server.OSIMStart12298
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12311: AppXDeployment.Task.Server.OSIMStop12311
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12312: AppXDeployment.Task.Server.OSIMStart12312
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12313: AppXDeployment.Task.Server.OSIMStop12313
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12314: AppXDeployment.Task.Server.OSIMStart12314
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12315: AppXDeployment.Task.Server.OSIMStop12315
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12316: AppXDeployment.Task.Server.OSIMStart12316
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12317: AppXDeployment.Task.Server.OSIMStop12317
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12318: AppXDeployment.Task.Server.OSIMStart12318
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12319: AppXDeployment.Task.Server.OSIMStop12319
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12330: AppXDeployment.Task.Server.OSIMStart12330
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12331: AppXDeployment.Task.Server.OSIMStop12331
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12332: AppXDeployment.Task.Server.OSIMStart12332
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12333: AppXDeployment.Task.Server.OSIMStop12333
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12334: AppXDeployment.Task.Server.OSIMStart12334
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12335: AppXDeployment.Task.Server.OSIMStop12335
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12336: AppXDeployment.Task.Server.OSIMStart12336
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12337: AppXDeployment.Task.Server.OSIMStop12337
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12338: AppXDeployment.Task.Server.OSIMStart12338
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12339: AppXDeployment.Task.Server.OSIMStop12339
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12340: error ErrorCode: Cannot register the PackageName package due to the following error: ErrorText.
#Event ID 12350: AppXDeployment.Task.Server.OSIMStart12350
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12351: AppXDeployment.Task.Server.OSIMStop12351
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12352: AppXDeployment.Task.Server.OSIMStart12352
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12353: AppXDeployment.Task.Server.OSIMStop12353
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12354: AppXDeployment.Task.Server.OSIMStart12354
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12355: AppXDeployment.Task.Server.OSIMStop12355
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12356: AppXDeployment.Task.Server.OSIMStart12356
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12357: AppXDeployment.Task.Server.OSIMStop12357
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12358: AppXDeployment.Task.Server.OSIMStart12358
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12359: AppXDeployment.Task.Server.OSIMStop12359
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12370: Deleting the shared hardlink for the eventlog dll for package String1 at location String2 during String3 operation, error is ErrorCode.
#Event ID 12390: AppXDeployment.Task.Server.OSIMStart12390
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12391: AppXDeployment.Task.Server.OSIMStop12391
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12392: AppXDeployment.Task.Server.OSIMStart12392
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12393: AppXDeployment.Task.Server.OSIMStop12393
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12394: AppXDeployment.Task.Server.OSIMStart12394
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12395: AppXDeployment.Task.Server.OSIMStop12395
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12396: AppXDeployment.Task.Server.OSIMStart12396
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12397: AppXDeployment.Task.Server.OSIMStop12397
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12398: AppXDeployment.Task.Server.OSIMStart12398
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12399: AppXDeployment.Task.Server.OSIMStop12399
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12500: Untrusted reparse point redirection skipped for file String1 in package String2.
#Event ID 12501: Untrusted reparse point delete successful for file String1 in package String2.
#Event ID 12502: Untrusted reparse point delete failed, error:ErrorCode for file String1 in package String2.
#Event ID 12510: FileName(Line,Column): ContextMenuShellExHandlerDEH parsed IncomingPackage: PackageName.
#Event ID 12511: FileName(Line,Column): ContextMenuShellExHandlerDEH parsed OutgoingPackage: PackageName.
#Event ID 12512: FileName(Line,Column): ContextMenuShellExHandlerDEH Cannot register package PackageName due to the following error: ErrorText.
#Event ID 12513: ErrorCode: ContextMenuShellExHandlerDEH EvaluateRequest completed.
#Event ID 12514: ErrorCode: ContextMenuShellExHandlerDEH CommitRequest completed.
#Event ID 12516: ErrorCode: ContextMenuShellExHandlerDEH RemoveRequest completed.
#Event ID 12520: ErrorCode: Undocked DEH Category String1.
#Event ID 12521: ErrorCode: Undocked DEH Category String1.
#Event ID 12522: ErrorCode: Undocked DEH Category String1.
#Event ID 12531: AppXDeployment.Task.Server.OSIMStart12531
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12532: AppXDeployment.Task.Server.OSIMStop12532
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12533: AppXDeployment.Task.Server.OSIMStart12533
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12534: AppXDeployment.Task.Server.OSIMStop12534
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12535: AppXDeployment.Task.Server.OSIMStart12535
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12536: AppXDeployment.Task.Server.OSIMStop12536
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12537: AppXDeployment.Task.Server.OSIMStart12537
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12538: AppXDeployment.Task.Server.OSIMStop12538
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Event ID 12539: AppXDeployment.Task.Server.OSIMStart12539
#Fields #
| Name | Description |
|---|---|
PackageName UnicodeString |
Provenance
ETW provider GUID 3f471139-acb7-4a01-b7a7-ff5da4ba2d43
Defined in AppXDeploymentServer.dll, which carries the event manifest.
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.3692, captured 2026-06-02 — Manifest XML pack, 1.9 MB
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.5074, captured 2026-06-02 — Manifest XML pack, 2.0 MB