Microsoft-Windows-AxInstallService
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 1 | Message. | Log | N | N |
| 2 | Message. | Log | N | N |
| 3 | Message. | Log | N | N |
| 4 | Message. | Log | N | N |
| 5 | Message. | Log | N | N |
| 6 | Message. | Log | N | N |
| 7 | Message. | Log | N | N |
| 8 | Message. | Log | N | N |
| 4097 | Attempt to install control URL failed. | Application | N | N |
| 4098 | The ActiveX control URL from host URL HostName passed all policy checks. | Application | N | N |
| 4099 | Attempt to install control URL failed. | Application | N | N |
| 4100 | Failed to download control URL from host URL HostName. | Application | N | N |
Event ID 4097: Attempt to install control URL failed.
#Event ID 4098: The ActiveX control URL from host URL HostName passed all policy checks.
#Event ID 4099: Attempt to install control URL failed.
#Provenance
ETW provider GUID dab3b18c-3c0f-43e8-80b1-e44bc0dad901
Defined in AxInstSv.dll, which carries the event manifest.
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB