Microsoft-Windows-Biometrics

90 events across 2 channels

EventTitleChannelSample
1000The Windows Biometric Service could not verify Username (SID) using sensor: …OperationalN
1001The Windows Biometric Service successfully verified Username (SID) using sensor: …OperationalN
1002The Windows Biometric Service could not match Username (SID) with the sample …OperationalN
1003The Windows Biometric Service could not complete an identification operation …OperationalN
1004The Windows Biometric Service successfully identified Username (SID) using …OperationalN
1005The Windows Biometric Service could not determine the identity of the sample …OperationalN
1006The Windows Biometric Service started an enrollment operation using sensor: …OperationalN
1007The Windows Biometric Service encountered an error while processing and updating …OperationalN
1008The Windows Biometric Service is processing an enrollment operation and updating …OperationalN
1009The Windows Biometric Service failed to enroll Username (SID) using sensor: …OperationalN
1010The Windows Biometric Service successfully enrolled Username (SID) using sensor: …OperationalN
1011The Windows Biometric Service failed to begin a capture operation using sensor: …OperationalN
1012The Windows Biometric Service failed to complete a capture operation using …OperationalN
1013The Windows Biometric Service failed to export data from sensor: …OperationalN
1014The Windows Biometric Service failed to delete a database record for Username …OperationalN
1015The Windows Biometric Service successfully deleted a database record for …OperationalN
1016The Windows Biometric Service failed to complete a vendor-specific operation for …OperationalN
1017The Windows Biometric Service completed a vendor-specific operation for sensor: …OperationalN
1018The Windows Biometric Service failed to complete a privileged vendor-specific …OperationalN
1019The Windows Biometric Service completed a privileged vendor-specific operation …OperationalN
1020The Windows Biometric Service cannot complete a request because biometric …OperationalN
1021The Windows Biometric Service cannot complete a request because Terminal Server …OperationalN
1100The Windows Biometric Service failed to load an adapter binary: ModulePath.OperationalN
1101The Windows Biometric Service failed to load an adapter binary: ModulePath.OperationalN
1102The Windows Biometric Service failed to load an adapter binary: ModulePath.OperationalN
1103The Windows Biometric Service failed to open sensor: BiometricSensor.OperationalN
1104The Windows Biometric Service failed to set the mode of sensor: BiometricSensor.OperationalN
1105The Windows Biometric Service failed to initialize an adapter binary: …OperationalN
1106The Windows Biometric Service detected a missing or invalid biometric database …OperationalN
1107The Windows Biometric Service encountered an error while opening the database …OperationalN
1108The Windows Biometric Service successfully created a Biometric Unit for sensor: …OperationalY
1109The Windows Biometric Service failed to configure a Biometric Unit for sensor: …OperationalN
1110The Windows Biometric Service failed to create a Biometric Unit for sensor: …OperationalN
1111The Windows Biometric Service failed to create a Biometric Unit for sensor: …OperationalN
1112The Windows Biometric Service failed to complete the calibration setup protocol: …OperationalN
1113The Windows Biometric Service failed to load an adapter binary: ModulePath.OperationalN
1114The Windows Biometric Service failed to transfer private sensor type information …OperationalN
1115The Windows Biometric Service's Source policy configuration.OperationalN
1116The Windows Biometric Service's ESS state configuration.OperationalN
1400The Windows Fingerprint Credential Provider could not log Username on because …OperationalN
1401The Windows Fingerprint Credential Provider failed to enumerate its tile.OperationalN
1402The Windows Fingerprint Credential Provider could not log Username on because …OperationalN
1403The Windows Fingerprint Credential Provider has disabled biometric …OperationalN
1500The Windows Biometric Credential Manager successfully stored a credential for …OperationalN
1501The Windows Biometric Credential Manager failed to store a credential for …OperationalN
1502The Windows Biometric Credential Manager failed to store a credential because …OperationalN
1503The Windows Biometric Credential Manager failed to store a credential.OperationalN
1504The Windows Biometric Credential Manager successfully removed a credential for …OperationalN
1505The Windows Biometric Credential Manager failed to remove a credential for …OperationalN
1506The Windows Biometric Credential Manager failed to remove a credential because …OperationalN
1507The Windows Biometric Credential Manager failed to remove a credential.OperationalN
1508The Windows Biometric Credential Manager successfully retrieved the credential …OperationalN
1509The Windows Biometric Credential Manager failed to retrieve the credential state …OperationalN
1510The Windows Biometric Credential Manager failed to retrieve the credential state …OperationalN
1511The Windows Biometric Credential Manager failed to retrieve the state of a …OperationalN
1512The Windows Biometric Credential Manager successfully switched to user Username …OperationalN
1513The Windows Biometric Credential Manager failed to switch to user Username (SID) …OperationalN
1514The Windows Biometric Credential Manager failed to switch to the specified user …OperationalN
1515The Windows Biometric Credential Manager failed to switch to user Username (SID) …OperationalN
1516The Windows Biometric Credential Manager failed to switch to the specified user.OperationalN
1600The Windows Biometric Service failed to start its secure component.OperationalY
1601The Windows Biometric Service successfully started its secure component.OperationalN
1602The Windows Biometric Service failed to migrate templates into Virtual Secure …OperationalN
1603The Windows Biometric Service successfully migrated templates into Virtual …OperationalN
1604The Windows Biometric Service secure component was compromised.OperationalN
1605The Windows Biometric Service secure component successfully authorized user …OperationalN
1606The Windows Biometric Service secure component successfully redeemed an …OperationalN
1607The Windows Biometric Service secure componets successfully established a secure …OperationalN
1608The Windows Biometric Service secure componets successfully reestablished a …OperationalN
1609The Windows Biometric Service secure component failed to establish a secure …OperationalN
1610The Windows Biometric Service secure component failed to delete an authorized …OperationalN
1611The Windows Biometric Service secure component successfully deleted an …OperationalN
1700The Windows Biometric Service successfully protected data for user SID (Type).OperationalN
1701The Windows Biometric Service failed to protect data for user Username (SID).OperationalN
1702The Windows Biometric Service successfully unprotected data for user SID (Type).OperationalN
1703The Windows Biometric Service failed to unprotect data for user Username (SID).OperationalN
7000WBioSrvcStartAnalyticN
7001WBioSrvcStopAnalyticN
7002WBioSrvcStart7002AnalyticN
7003WBioSrvcStop7003AnalyticN
7004WBioSrvcStart7004AnalyticN
7005WBioSrvcStop7005AnalyticN
7006WBioSrvcStart7006AnalyticN
7007WBioSrvcStop7007AnalyticN
7008WBioSrvcStart7008AnalyticN
7009WBioSrvcStop7009AnalyticN
7010WBioSrvcStart7010AnalyticN
7011WBioSrvcStop7011AnalyticN
7012WBioSrvcStart7012AnalyticN
7013WBioSrvcStop7013AnalyticN

Event ID 1000: The Windows Biometric Service could not verify Username (SID) using sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service could not verify Username (SID) using sensor: BiometricSensor.

Message #

The Windows Biometric Service could not verify %13 (%12) using sensor: %1.

The operation failed with error: %14.

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString
SID UnicodeString
Username UnicodeString
ErrorCode HexInt32

Event ID 1001: The Windows Biometric Service successfully verified Username (SID) using sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service successfully verified Username (SID) using sensor: BiometricSensor.

Message #

The Windows Biometric Service successfully verified %13 (%12) using sensor: %1.

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString
SID UnicodeString
Username UnicodeString

Event ID 1002: The Windows Biometric Service could not match Username (SID) with the sample from sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service could not match Username (SID) with the sample from sensor: BiometricSensor.

Message #

The Windows Biometric Service could not match %13 (%12) with the sample from sensor: %1.

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString
SID UnicodeString
Username UnicodeString

Event ID 1003: The Windows Biometric Service could not complete an identification operation using sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service could not complete an identification operation using sensor: BiometricSensor.

Message #

The Windows Biometric Service could not complete an identification operation using sensor: %1.

The operation failed with error: %12

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString
ErrorCode HexInt32

Event ID 1004: The Windows Biometric Service successfully identified Username (SID) using sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service successfully identified Username (SID) using sensor: BiometricSensor.

Message #

The Windows Biometric Service successfully identified %13 (%12) using sensor: %1.

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString
SID UnicodeString
Username UnicodeString

Event ID 1005: The Windows Biometric Service could not determine the identity of the sample from sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service could not determine the identity of the sample from sensor: BiometricSensor.

Message #

The Windows Biometric Service could not determine the identity of the sample from sensor: %1.

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString

Event ID 1006: The Windows Biometric Service started an enrollment operation using sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service started an enrollment operation using sensor: BiometricSensor.

Message #

The Windows Biometric Service started an enrollment operation using sensor: %1

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString

Event ID 1007: The Windows Biometric Service encountered an error while processing and updating an enrollment request using sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service encountered an error while processing and updating an enrollment request using sensor: BiometricSensor.

Message #

The Windows Biometric Service encountered an error while processing and updating an enrollment request using sensor: %1.

The operation failed with error: %12

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString
ErrorCode HexInt32

Event ID 1008: The Windows Biometric Service is processing an enrollment operation and updating an enrollment using sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service is processing an enrollment operation and updating an enrollment using sensor: BiometricSensor.

Message #

The Windows Biometric Service is processing an enrollment operation and updating an enrollment using sensor: %1.

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString

Event ID 1009: The Windows Biometric Service failed to enroll Username (SID) using sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service failed to enroll Username (SID) using sensor: BiometricSensor.

Message #

The Windows Biometric Service failed to enroll %13 (%12) using sensor: %1.

The operation failed with error: %14.

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString
SID UnicodeString
Username UnicodeString
ErrorCode HexInt32

Event ID 1010: The Windows Biometric Service successfully enrolled Username (SID) using sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service successfully enrolled Username (SID) using sensor: BiometricSensor.

Message #

The Windows Biometric Service successfully enrolled %13 (%12) using sensor: %1.

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString
SID UnicodeString
Username UnicodeString

Event ID 1011: The Windows Biometric Service failed to begin a capture operation using sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service failed to begin a capture operation using sensor: BiometricSensor.

Message #

The Windows Biometric Service failed to begin a capture operation using sensor: %1.

The operation failed with error: %12

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString
ErrorCode HexInt32

Event ID 1012: The Windows Biometric Service failed to complete a capture operation using sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service failed to complete a capture operation using sensor: BiometricSensor.

Message #

The Windows Biometric Service failed to complete a capture operation using sensor: %1.

The operation failed with error: %12, reject detail: %13

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString
ErrorCode HexInt32
RejectDetail UInt32

Event ID 1013: The Windows Biometric Service failed to export data from sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service failed to export data from sensor: BiometricSensor.

Message #

The Windows Biometric Service failed to export data from sensor: %1.

The operation failed with error: %12

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString
ErrorCode HexInt32

Event ID 1014: The Windows Biometric Service failed to delete a database record for Username (SID) on sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service failed to delete a database record for Username (SID) on sensor: BiometricSensor.

Message #

The Windows Biometric Service failed to delete a database record for %13 (%12) on sensor: %1.

The operation failed with error: %14.

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString
SID UnicodeString
Username UnicodeString
ErrorCode HexInt32

Event ID 1015: The Windows Biometric Service successfully deleted a database record for Username (SID) on sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service successfully deleted a database record for Username (SID) on sensor: BiometricSensor.

Message #

The Windows Biometric Service successfully deleted a database record for %13 (%12) on sensor: %1.

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString
SID UnicodeString
Username UnicodeString

Event ID 1016: The Windows Biometric Service failed to complete a vendor-specific operation for sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service failed to complete a vendor-specific operation for sensor: BiometricSensor.

Message #

The Windows Biometric Service failed to complete a vendor-specific operation for sensor: %1.

The command was directed to the biometric unit's "%12" component.

The operation failed with error: %15

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString
Component UInt32
ControlCode HexInt32
OperationStatus HexInt32NTSTATUS reference
ErrorCode HexInt32

Event ID 1017: The Windows Biometric Service completed a vendor-specific operation for sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service completed a vendor-specific operation for sensor: BiometricSensor.

Message #

The Windows Biometric Service completed a vendor-specific operation for sensor: %1.

The command was directed to the biometric unit's "%12" component.

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString
Component UInt32
ControlCode HexInt32
OperationStatus HexInt32NTSTATUS reference

Event ID 1018: The Windows Biometric Service failed to complete a privileged vendor-specific operation for sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service failed to complete a privileged vendor-specific operation for sensor: BiometricSensor.

Message #

The Windows Biometric Service failed to complete a privileged vendor-specific operation for sensor: %1.

The command was directed to the biometric unit's "%12" component.

The operation failed with error: %15

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString
Component UInt32
ControlCode HexInt32
OperationStatus HexInt32NTSTATUS reference
ErrorCode HexInt32

Event ID 1019: The Windows Biometric Service completed a privileged vendor-specific operation for sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service completed a privileged vendor-specific operation for sensor: BiometricSensor.

Message #

The Windows Biometric Service completed a privileged vendor-specific operation for sensor: %1.

The command was directed to the biometric unit's "%12" component.

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString
Component UInt32
ControlCode HexInt32
OperationStatus HexInt32NTSTATUS reference

Event ID 1020: The Windows Biometric Service cannot complete a request because biometric operations are disabled by current system policy.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service cannot complete a request because biometric operations are disabled by current system policy.

Message #

The Windows Biometric Service cannot complete a request because biometric operations are disabled by current system policy.

Event ID 1021: The Windows Biometric Service cannot complete a request because Terminal Server client sessions are not allowed to access the System sensor pool.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service cannot complete a request because Terminal Server client sessions are not allowed to access the System sensor pool.

Message #

The Windows Biometric Service cannot complete a request because Terminal Server client sessions are not allowed to access the System sensor pool.

Event ID 1100: The Windows Biometric Service failed to load an adapter binary: ModulePath.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service failed to load an adapter binary: ModulePath.

Message #

The Windows Biometric Service failed to load an adapter binary: %1.

The operation failed with error: %2.

Fields #

NameDescription
ModulePath UnicodeString
ErrorCode HexInt32

Event ID 1101: The Windows Biometric Service failed to load an adapter binary: ModulePath.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service failed to load an adapter binary: ModulePath.

Message #

The Windows Biometric Service failed to load an adapter binary: %1.

The module's "Force Integrity" flag was not set.

Fields #

NameDescription
ModulePath UnicodeString

Event ID 1102: The Windows Biometric Service failed to load an adapter binary: ModulePath.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service failed to load an adapter binary: ModulePath.

Message #

The Windows Biometric Service failed to load an adapter binary: %1.

The module's "%2" interface is not valid.

Fields #

NameDescription
ModulePath UnicodeString
Component UInt32

Event ID 1103: The Windows Biometric Service failed to open sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service failed to open sensor: BiometricSensor.

Message #

The Windows Biometric Service failed to open sensor: %1.

The operation failed with error: %2

Fields #

NameDescription
BiometricSensor UnicodeString
ErrorCode HexInt32

Event ID 1104: The Windows Biometric Service failed to set the mode of sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service failed to set the mode of sensor: BiometricSensor.

Message #

The Windows Biometric Service failed to set the mode of sensor: %1.

The operation failed with error: %12

See the "Details" pane for information about the failing configuration.

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString
ErrorCode HexInt32

Event ID 1105: The Windows Biometric Service failed to initialize an adapter binary: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service failed to initialize an adapter binary: BiometricSensor.

Message #

The Windows Biometric Service failed to initialize an adapter binary: %1.

The module's "%12" initialization routine failed with error: %13

See the "Details" pane for information about the failing configuration.

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString
Component UInt32
ErrorCode HexInt32

Event ID 1106: The Windows Biometric Service detected a missing or invalid biometric database configuration for sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service detected a missing or invalid biometric database configuration for sensor: BiometricSensor.

Message #

The Windows Biometric Service detected a missing or invalid biometric database configuration for sensor: %1.

The operation failed with error: %12

See the "Details" pane for information about the failing configuration.

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString
ErrorCode HexInt32

Event ID 1107: The Windows Biometric Service encountered an error while opening the database associated with sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service encountered an error while opening the database associated with sensor: BiometricSensor.

Message #

The Windows Biometric Service encountered an error while opening the database associated with sensor: %1.

The operation failed with error: %12

See the "Details" pane for information about the failing configuration.

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString
ErrorCode HexInt32

Event ID 1108: The Windows Biometric Service successfully created a Biometric Unit for sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Level
Verbose
Task
WBioSrvc

Description

The Windows Biometric Service successfully created a Biometric Unit for sensor: BiometricSensor.

Message #

The Windows Biometric Service successfully created a Biometric Unit for sensor: %1

The sensor's mode is "%6," its pool-type is "%7," and it's isolated in a "%8" process.

See the "Details" pane for additional information about the sensor's new configuration.

Fields #

NameDescription
BiometricSensor UnicodeStringThe Windows Biometric Service successfully created a Biometric Unit for sensor.
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-Biometrics",
    "guid": "{A0E3D8EA-C34F-4419-A1DB-90435B8B21D0}",
    "event_source_name": "",
    "event_id": 1108,
    "version": 0,
    "level": 5,
    "task": 1,
    "opcode": 0,
    "keywords": -9223372036854775808,
    "time_created": "2026-06-13T04:29:41.5895906+00:00",
    "event_record_id": 8,
    "correlation": {},
    "execution": {
      "process_id": 7288,
      "thread_id": 7420
    },
    "channel": "Microsoft-Windows-Biometrics/Operational",
    "computer": "telemetry-DC-d.cell-d.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "BiometricSensor": "Analog NUI Voice Virtual Sensor (\\Voice\\Virtual Sensors\\{F25AB4A2-593A-4A89-B9FF-8144BEA81E15})",
    "SensorAdapter": "NUIVoiceWBSAdapters.dll",
    "EngineAdapter": "NUIVoiceWBSAdapters.dll",
    "StorageAdapter": "WinBioStorageAdapter.dll",
    "DatabaseID": "{51f39552-1075-4199-b513-0c10ea185db0}",
    "SensorMode": "1",
    "SensorPool": "1",
    "IsolationLevel": "0",
    "IsolationSensorAdapter": "-",
    "IsolationEngineAdapter": "-",
    "IsolationStorageAdapter": "-"
  },
  "message": "The Windows Biometric Service successfully created a Biometric Unit for sensor: Analog NUI Voice Virtual Sensor (\\Voice\\Virtual Sensors\\{F25AB4A2-593A-4A89-B9FF-8144BEA81E15})\r\rThe sensor's mode is \"Basic,\" its pool-type is \"System,\" and it's isolated in a \"Local System\" process.\r\rSee the \"Details\" pane for additional information about the sensor's new configuration."
}

Event ID 1109: The Windows Biometric Service failed to configure a Biometric Unit for sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service failed to configure a Biometric Unit for sensor: BiometricSensor.

Message #

The Windows Biometric Service failed to configure a Biometric Unit for sensor: %1.

The operation failed with error: %12

See the "Details" pane for information about the failing configuration.

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString
ErrorCode HexInt32

Event ID 1110: The Windows Biometric Service failed to create a Biometric Unit for sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service failed to create a Biometric Unit for sensor: BiometricSensor.

Message #

The Windows Biometric Service failed to create a Biometric Unit for sensor: %1.

The driver installation package has missing or incorrect configuration values. Contact your PC support personnel for assistance.

The operation failed with error: %2

Fields #

NameDescription
BiometricSensor UnicodeString
ErrorCode HexInt32

Event ID 1111: The Windows Biometric Service failed to create a Biometric Unit for sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service failed to create a Biometric Unit for sensor: BiometricSensor.

Message #

The Windows Biometric Service failed to create a Biometric Unit for sensor: %1.

The operation failed with error: %2

Fields #

NameDescription
BiometricSensor UnicodeString
ErrorCode HexInt32

Event ID 1112: The Windows Biometric Service failed to complete the calibration setup protocol: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service failed to complete the calibration setup protocol: BiometricSensor.

Message #

The Windows Biometric Service failed to complete the calibration setup protocol: %1.

The "%12" failed with error: %13

See the "Details" pane for information about the failing configuration.

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString
Component UInt32
ErrorCode HexInt32

Event ID 1113: The Windows Biometric Service failed to load an adapter binary: ModulePath.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service failed to load an adapter binary: ModulePath.

Message #

The Windows Biometric Service failed to load an adapter binary: %1.

The module was not properly signed.

Fields #

NameDescription
ModulePath UnicodeString

Event ID 1114: The Windows Biometric Service failed to transfer private sensor type information to the matching engine: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service failed to transfer private sensor type information to the matching engine: BiometricSensor.

Message #

The Windows Biometric Service failed to transfer private sensor type information to the matching engine: %1.

The "%12" failed with error: %13

See the "Details" pane for information about the failing configuration.

Fields #

NameDescription
BiometricSensor UnicodeString
SensorAdapter UnicodeString
EngineAdapter UnicodeString
StorageAdapter UnicodeString
DatabaseID GUID
SensorMode UInt32
SensorPool UInt32
IsolationLevel UInt32
IsolationSensorAdapter UnicodeString
IsolationEngineAdapter UnicodeString
IsolationStorageAdapter UnicodeString
Component UInt32
ErrorCode HexInt32

Event ID 1115: The Windows Biometric Service's Source policy configuration.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service's Source policy configuration.

Message #

The Windows Biometric Service's %1 policy configuration:
Value: %3
Source: %2

Fields #

NameDescription
Configuration UnicodeString
Source UInt32
Value UInt32

Event ID 1116: The Windows Biometric Service's ESS state configuration.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service's ESS state configuration.

Message #

The Windows Biometric Service's ESS state configuration:
Requires TPM: %1
VBS capable: %2
Non VBS Windows Hello: %3
VBS Windows Hello: %4
Requires VBS Runnig: %5
Requires VBS Encryption keys: %6
Requires enablement: %7
Managed by policy: %8
Non VBS Bio Enrollments: %9
VBS Bio enrollments: %10
ESS face sensor: %11
ESS fpr sensor: %12
Requires isolated process: %13
Blocked non ESS fpr: %14
Blocked non ESS camera: %15
Is device ESS state default: %16

Fields #

NameDescription
requiresTPM Boolean
isVBSCapable Boolean
hasNonVBSWindowsHello Boolean
hasVBSWindowsHello Boolean
requiresVBSRunning Boolean
requiresVBSEncryptionKeys Boolean
requiresEnablement Boolean
managedByPolicy Boolean
hasNonVBSBiometricEnrollments Boolean
hasVBSBiometricEnrollments Boolean
hasESSFaceSensor Boolean
hasESSFprSensor Boolean
requiresIsolatedProcess Boolean
hasBlockedNonESSFpr Boolean
hasBlockedNonESSCamera Boolean
isDeviceEssSourceDefault Boolean

Event ID 1400: The Windows Fingerprint Credential Provider could not log Username on because the stored credential was invalid.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
BioCredProv

Description

The Windows Fingerprint Credential Provider could not log Username on because the stored credential was invalid.

Message #

The Windows Fingerprint Credential Provider could not log %1 on because the stored credential was invalid.

Fields #

NameDescription
Username UnicodeString

Event ID 1401: The Windows Fingerprint Credential Provider failed to enumerate its tile.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
BioCredProv

Description

The Windows Fingerprint Credential Provider failed to enumerate its tile.

Message #

The Windows Fingerprint Credential Provider failed to enumerate its tile.

The operation failed with error: %1.

Fields #

NameDescription
ErrorCode HexInt32

Event ID 1402: The Windows Fingerprint Credential Provider could not log Username on because the user does not have a credential stored for biometric logon.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
BioCredProv

Description

The Windows Fingerprint Credential Provider could not log Username on because the user does not have a credential stored for biometric logon.

Message #

The Windows Fingerprint Credential Provider could not log %1 on because the user does not have a credential stored for biometric logon.

Fields #

NameDescription
Username UnicodeString

Event ID 1403: The Windows Fingerprint Credential Provider has disabled biometric authentication.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
BioCredProv

Description

The Windows Fingerprint Credential Provider has disabled biometric authentication.

Message #

The Windows Fingerprint Credential Provider has disabled biometric authentication.

The operation failed with error: %1.

Fields #

NameDescription
ErrorCode HexInt32

Event ID 1500: The Windows Biometric Credential Manager successfully stored a credential for Username (SID).

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
BioCredProv

Description

The Windows Biometric Credential Manager successfully stored a credential for Username (SID).

Message #

The Windows Biometric Credential Manager successfully stored a credential for %2 (%1).

Fields #

NameDescription
SID UnicodeString
Username UnicodeString

Event ID 1501: The Windows Biometric Credential Manager failed to store a credential for Username (SID) due to the caller having insufficient privileges.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
BioCredProv

Description

The Windows Biometric Credential Manager failed to store a credential for Username (SID) due to the caller having insufficient privileges.

Message #

The Windows Biometric Credential Manager failed to store a credential for %2 (%1) due to the caller having insufficient privileges.

The operation failed with error: %3.

Fields #

NameDescription
SID UnicodeString
Username UnicodeString
ErrorCode HexInt32

Event ID 1502: The Windows Biometric Credential Manager failed to store a credential because the Windows Fingerprint Credential Provider is disabled.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
BioCredProv

Description

The Windows Biometric Credential Manager failed to store a credential because the Windows Fingerprint Credential Provider is disabled.

Message #

The Windows Biometric Credential Manager failed to store a credential because the Windows Fingerprint Credential Provider is disabled.

Event ID 1503: The Windows Biometric Credential Manager failed to store a credential.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
BioCredProv

Description

The Windows Biometric Credential Manager failed to store a credential.

Message #

The Windows Biometric Credential Manager failed to store a credential.

The operation failed with error: %1.

Fields #

NameDescription
ErrorCode HexInt32

Event ID 1504: The Windows Biometric Credential Manager successfully removed a credential for Username (SID).

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
BioCredProv

Description

The Windows Biometric Credential Manager successfully removed a credential for Username (SID).

Message #

The Windows Biometric Credential Manager successfully removed a credential for %2 (%1).

Fields #

NameDescription
SID UnicodeString
Username UnicodeString

Event ID 1505: The Windows Biometric Credential Manager failed to remove a credential for Username (SID) due to the caller having insufficient privileges.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
BioCredProv

Description

The Windows Biometric Credential Manager failed to remove a credential for Username (SID) due to the caller having insufficient privileges.

Message #

The Windows Biometric Credential Manager failed to remove a credential for %2 (%1) due to the caller having insufficient privileges.

The operation failed with error: %3.

Fields #

NameDescription
SID UnicodeString
Username UnicodeString
ErrorCode HexInt32

Event ID 1506: The Windows Biometric Credential Manager failed to remove a credential because the Windows Fingerprint Credential Provider is disabled.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
BioCredProv

Description

The Windows Biometric Credential Manager failed to remove a credential because the Windows Fingerprint Credential Provider is disabled.

Message #

The Windows Biometric Credential Manager failed to remove a credential because the Windows Fingerprint Credential Provider is disabled.

Event ID 1507: The Windows Biometric Credential Manager failed to remove a credential.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
BioCredProv

Description

The Windows Biometric Credential Manager failed to remove a credential.

Message #

The Windows Biometric Credential Manager failed to remove a credential.

The operation failed with error: %1.

Fields #

NameDescription
ErrorCode HexInt32

Event ID 1508: The Windows Biometric Credential Manager successfully retrieved the credential state for Username (SID).

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
BioCredProv

Description

The Windows Biometric Credential Manager successfully retrieved the credential state for Username (SID).

Message #

The Windows Biometric Credential Manager successfully retrieved the credential state for %2 (%1).

Fields #

NameDescription
SID UnicodeString
Username UnicodeString

Event ID 1509: The Windows Biometric Credential Manager failed to retrieve the credential state for Username (SID) due to the caller having insufficient privileges.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
BioCredProv

Description

The Windows Biometric Credential Manager failed to retrieve the credential state for Username (SID) due to the caller having insufficient privileges.

Message #

The Windows Biometric Credential Manager failed to retrieve the credential state for %2 (%1) due to the caller having insufficient privileges.

The operation failed with error: %3.

Fields #

NameDescription
SID UnicodeString
Username UnicodeString
ErrorCode HexInt32

Event ID 1510: The Windows Biometric Credential Manager failed to retrieve the credential state because the Windows Fingerprint Credential Provider is disabled.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
BioCredProv

Description

The Windows Biometric Credential Manager failed to retrieve the credential state because the Windows Fingerprint Credential Provider is disabled.

Message #

The Windows Biometric Credential Manager failed to retrieve the credential state because the Windows Fingerprint Credential Provider is disabled.

Event ID 1511: The Windows Biometric Credential Manager failed to retrieve the state of a credential.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
BioCredProv

Description

The Windows Biometric Credential Manager failed to retrieve the state of a credential.

Message #

The Windows Biometric Credential Manager failed to retrieve the state of a credential.

The operation failed with error: %1.

Fields #

NameDescription
ErrorCode HexInt32

Event ID 1512: The Windows Biometric Credential Manager successfully switched to user Username (SID).

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
BioCredProv

Description

The Windows Biometric Credential Manager successfully switched to user Username (SID).

Message #

The Windows Biometric Credential Manager successfully switched to user %2 (%1).

Fields #

NameDescription
SID UnicodeString
Username UnicodeString

Event ID 1513: The Windows Biometric Credential Manager failed to switch to user Username (SID) due to the caller having insufficient privileges.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
BioCredProv

Description

The Windows Biometric Credential Manager failed to switch to user Username (SID) due to the caller having insufficient privileges.

Message #

The Windows Biometric Credential Manager failed to switch to user %2 (%1) due to the caller having insufficient privileges.

The operation failed with error: %3.

Fields #

NameDescription
SID UnicodeString
Username UnicodeString
ErrorCode HexInt32

Event ID 1514: The Windows Biometric Credential Manager failed to switch to the specified user because the Windows Fingerprint Credential Provider is disabled.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
BioCredProv

Description

The Windows Biometric Credential Manager failed to switch to the specified user because the Windows Fingerprint Credential Provider is disabled.

Message #

The Windows Biometric Credential Manager failed to switch to the specified user because the Windows Fingerprint Credential Provider is disabled.

Event ID 1515: The Windows Biometric Credential Manager failed to switch to user Username (SID) because they are already the interactive user.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
BioCredProv

Description

The Windows Biometric Credential Manager failed to switch to user Username (SID) because they are already the interactive user.

Message #

The Windows Biometric Credential Manager failed to switch to user %2 (%1) because they are already the interactive user.

Fields #

NameDescription
SID UnicodeString
Username UnicodeString

Event ID 1516: The Windows Biometric Credential Manager failed to switch to the specified user.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
BioCredProv

Description

The Windows Biometric Credential Manager failed to switch to the specified user.

Message #

The Windows Biometric Credential Manager failed to switch to the specified user.

The operation failed with error: %1.

Fields #

NameDescription
ErrorCode HexInt32

Event ID 1600: The Windows Biometric Service failed to start its secure component.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Level
Informational
Task
WBioSrvc

Description

The Windows Biometric Service failed to start its secure component.

Message #

The Windows Biometric Service failed to start its secure component.

Reason for unavailability: %1.

The operation failed with error: %2.

Fields #

NameDescription
ErrorCode HexInt32The operation failed with error.
AvailabilityInfo UInt32Reason for unavailability.

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-Biometrics",
    "guid": "{A0E3D8EA-C34F-4419-A1DB-90435B8B21D0}",
    "event_source_name": "",
    "event_id": 1600,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 0,
    "keywords": -9223372036854775808,
    "time_created": "2026-06-13T04:29:41.4351884+00:00",
    "event_record_id": 7,
    "correlation": {},
    "execution": {
      "process_id": 7288,
      "thread_id": 7420
    },
    "channel": "Microsoft-Windows-Biometrics/Operational",
    "computer": "telemetry-DC-d.cell-d.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "ErrorCode": "0x80070032"
  },
  "message": "The Windows Biometric Service failed to start its secure component.\r\rThe operation failed with error: 0x80070032."
}

Event ID 1601: The Windows Biometric Service successfully started its secure component.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service successfully started its secure component.

Message #

The Windows Biometric Service successfully started its secure component.

Event ID 1602: The Windows Biometric Service failed to migrate templates into Virtual Secure Mode.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational

Description

The Windows Biometric Service failed to migrate templates into Virtual Secure Mode.The operation failed with error: {ErrorCode}.

Message #

The Windows Biometric Service failed to migrate templates into Virtual Secure Mode.The operation failed with error: {ErrorCode}.

Fields #

NameDescription
ErrorCode

Event ID 1603: The Windows Biometric Service successfully migrated templates into Virtual Secure Mode.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational

Description

The Windows Biometric Service successfully migrated templates into Virtual Secure Mode.

Message #

The Windows Biometric Service successfully migrated templates into Virtual Secure Mode.

Event ID 1604: The Windows Biometric Service secure component was compromised.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational

Description

The Windows Biometric Service secure component was compromised.The validation failed with error: {ErrorCode}.

Message #

The Windows Biometric Service secure component was compromised.The validation failed with error: {ErrorCode}.

Fields #

NameDescription
ErrorCode

Event ID 1605: The Windows Biometric Service secure component successfully authorized user Username (SID).

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service secure component successfully authorized user Username (SID).

Message #

The Windows Biometric Service secure component successfully authorized user %2 (%1).

Fields #

NameDescription
SID UnicodeString
Username UnicodeString

Event ID 1606: The Windows Biometric Service secure component successfully redeemed an authorization for user Username (SID).

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service secure component successfully redeemed an authorization for user Username (SID).

Message #

The Windows Biometric Service secure component successfully redeemed an authorization for user %2 (%1).

Fields #

NameDescription
SID UnicodeString
Username UnicodeString

Event ID 1607: The Windows Biometric Service secure componets successfully established a secure connection with sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service secure componets successfully established a secure connection with sensor: BiometricSensor.

Message #

The Windows Biometric Service secure componets successfully established a secure connection with sensor: %1.

Fields #

NameDescription
BiometricSensor UnicodeString
ErrorCode HexInt32

Event ID 1608: The Windows Biometric Service secure componets successfully reestablished a secure connection with sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service secure componets successfully reestablished a secure connection with sensor: BiometricSensor.

Message #

The Windows Biometric Service secure componets successfully reestablished a secure connection with sensor: %1.

Fields #

NameDescription
BiometricSensor UnicodeString
ErrorCode HexInt32

Event ID 1609: The Windows Biometric Service secure component failed to establish a secure connection with sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service secure component failed to establish a secure connection with sensor: BiometricSensor.

Message #

The Windows Biometric Service secure component failed to establish a secure connection with sensor: %1.

Fields #

NameDescription
BiometricSensor UnicodeString
ErrorCode HexInt32

Event ID 1610: The Windows Biometric Service secure component failed to delete an authorized enrollment for Username (SID) on sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service secure component failed to delete an authorized enrollment for Username (SID) on sensor: BiometricSensor.

Message #

The Windows Biometric Service secure component failed to delete an authorized enrollment for %3 (%2) on sensor: %1.

The operation failed with error: %4.

Fields #

NameDescription
BiometricSensor UnicodeString
SID UnicodeString
Username UnicodeString
ErrorCode HexInt32

Event ID 1611: The Windows Biometric Service secure component successfully deleted an authorized enrollment for Username (SID) on sensor: BiometricSensor.

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service secure component successfully deleted an authorized enrollment for Username (SID) on sensor: BiometricSensor.

Message #

The Windows Biometric Service secure component successfully deleted an authorized enrollment for %3 (%2) on sensor: %1.

Fields #

NameDescription
BiometricSensor UnicodeString
SID UnicodeString
Username UnicodeString

Event ID 1700: The Windows Biometric Service successfully protected data for user SID (Type).

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service successfully protected data for user SID (Type).

Message #

The Windows Biometric Service successfully protected data for user %2 (%1).

Type: %3.

Fields #

NameDescription
SID UnicodeString
Username UnicodeString
Type UInt32

Event ID 1701: The Windows Biometric Service failed to protect data for user Username (SID).

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service failed to protect data for user Username (SID).

Message #

The Windows Biometric Service failed to protect data for user %2 (%1).

Type: %3

The operation failed with error: %4.

Fields #

NameDescription
SID UnicodeString
Username UnicodeString
Type UInt32
ErrorCode HexInt32

Event ID 1702: The Windows Biometric Service successfully unprotected data for user SID (Type).

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service successfully unprotected data for user SID (Type).

Message #

The Windows Biometric Service successfully unprotected data for user %2 (%1).

Type: %3.

Fields #

NameDescription
SID UnicodeString
Username UnicodeString
Type UInt32

Event ID 1703: The Windows Biometric Service failed to unprotect data for user Username (SID).

#
Provider
Microsoft-Windows-Biometrics
Channel
Operational
Task
WBioSrvc

Description

The Windows Biometric Service failed to unprotect data for user Username (SID).

Message #

The Windows Biometric Service failed to unprotect data for user %2 (%1).

Type: %3

The operation failed with error: %4.

Fields #

NameDescription
SID UnicodeString
Username UnicodeString
Type UInt32
ErrorCode HexInt32

Event ID 7000: WBioSrvcStart

#
Provider
Microsoft-Windows-Biometrics
Channel
Analytic
Task
WBioSrvc
Opcode
Start

Event ID 7001: WBioSrvcStop

#
Provider
Microsoft-Windows-Biometrics
Channel
Analytic
Task
WBioSrvc
Opcode
Stop

Event ID 7002: WBioSrvcStart7002

#
Provider
Microsoft-Windows-Biometrics
Channel
Analytic
Task
WBioSrvc
Opcode
Start

Event ID 7003: WBioSrvcStop7003

#
Provider
Microsoft-Windows-Biometrics
Channel
Analytic
Task
WBioSrvc
Opcode
Stop

Event ID 7004: WBioSrvcStart7004

#
Provider
Microsoft-Windows-Biometrics
Channel
Analytic
Task
WBioSrvc
Opcode
Start

Event ID 7005: WBioSrvcStop7005

#
Provider
Microsoft-Windows-Biometrics
Channel
Analytic
Task
WBioSrvc
Opcode
Stop

Event ID 7006: WBioSrvcStart7006

#
Provider
Microsoft-Windows-Biometrics
Channel
Analytic
Task
WBioSrvc
Opcode
Start

Event ID 7007: WBioSrvcStop7007

#
Provider
Microsoft-Windows-Biometrics
Channel
Analytic
Task
WBioSrvc
Opcode
Stop

Event ID 7008: WBioSrvcStart7008

#
Provider
Microsoft-Windows-Biometrics
Channel
Analytic
Task
WBioSrvc
Opcode
Start

Event ID 7009: WBioSrvcStop7009

#
Provider
Microsoft-Windows-Biometrics
Channel
Analytic
Task
WBioSrvc
Opcode
Stop

Event ID 7010: WBioSrvcStart7010

#
Provider
Microsoft-Windows-Biometrics
Channel
Analytic
Task
WBioSrvc
Opcode
Start

Event ID 7011: WBioSrvcStop7011

#
Provider
Microsoft-Windows-Biometrics
Channel
Analytic
Task
WBioSrvc
Opcode
Stop

Event ID 7012: WBioSrvcStart7012

#
Provider
Microsoft-Windows-Biometrics
Channel
Analytic
Task
WBioSrvc
Opcode
Start

Event ID 7013: WBioSrvcStop7013

#
Provider
Microsoft-Windows-Biometrics
Channel
Analytic
Task
WBioSrvc
Opcode
Stop

Provenance

Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.

ETW provider GUID a0e3d8ea-c34f-4419-a1db-90435b8b21d0

Defined in wbiosrvc.dll, which carries the event manifest.

Observed on:

  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02
  • Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02

Downloads